$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e7a9b488-4222-36d6-9f9a-bab7325bea60.roa File: e7a9b488-4222-36d6-9f9a-bab7325bea60.roa (raw, json) Hash identifier: y2FV5w7bOMSxx1KH06NKSDKJjV+rFJuotbKWX0tWQ3c= Subject key identifier: 8C:E5:5A:2B:E9:D0:AA:29:21:B7:F7:28:CE:7E:D8:BE:87:A5:06:7D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C12795F7D87679B1859C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e7a9b488-4222-36d6-9f9a-bab7325bea60.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.66.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:12:79:5f:7d:87:67:9b:18:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=f6acf756-5438-45a9-bd2d-3aa1f2b49c67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b1:d6:a7:fc:5d:72:f7:f3:fb:d2:2f:9f:2f: 5c:b3:0d:12:d5:f2:93:7d:28:ce:60:5a:88:4e:42: 40:aa:91:3d:49:01:8e:98:0d:90:5c:94:8c:a4:7c: 50:df:81:7e:78:a9:f7:e7:21:b1:4c:a9:89:b3:25: 7d:dc:4a:eb:e2:4a:31:41:20:86:7b:e2:49:24:33: 24:f6:15:46:6b:57:5b:0d:22:c7:93:db:59:bd:2e: af:a4:f4:fc:48:7e:b1:07:93:0b:25:6a:88:8f:14: f3:41:29:ec:a5:f6:35:79:02:30:71:b2:5c:62:24: a3:f1:dd:32:dc:87:b5:f0:4a:74:6d:d2:bd:d4:93: 2e:40:03:25:9b:e3:1e:b6:a1:9c:88:83:3b:83:aa: 01:24:ad:5a:04:bb:db:da:47:e6:cd:00:5e:33:8f: f2:f4:98:b8:e6:04:48:ed:cb:5e:b5:6f:80:24:24: 63:c4:0f:5f:86:5a:a1:be:c6:8e:a5:2b:ea:7f:56: f9:b1:fb:7b:1b:5c:a7:e6:a5:ba:75:0c:02:0b:ea: d7:50:ab:a5:fe:a0:2b:16:59:15:dd:65:87:61:0a: 14:a9:8e:36:d2:f2:0c:4b:26:86:4a:48:4f:fc:2e: dc:63:9f:19:4f:14:46:12:d8:26:46:e9:8d:59:b2: e7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E5:5A:2B:E9:D0:AA:29:21:B7:F7:28:CE:7E:D8:BE:87:A5:06:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e7a9b488-4222-36d6-9f9a-bab7325bea60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.66.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:de:b2:30:33:0f:98:9d:f4:a9:31:17:08:68:9d:9d:9e:70: 08:4f:2f:5d:76:6c:45:95:9d:dc:57:71:ac:fd:b7:37:65:38: 9e:7a:e8:8b:50:5e:27:1e:20:1e:cb:27:a2:ec:83:8c:d9:7c: 63:90:6f:6c:70:54:a9:27:7c:01:18:f0:7a:86:0d:cd:ce:0d: 58:79:3f:a5:89:77:43:92:ce:d0:d6:b9:00:e1:1d:51:24:fa: 9b:69:f2:f0:1d:c2:ae:6c:68:a3:8f:bc:63:5a:b4:8d:51:0f: 8a:06:42:ba:57:d3:23:e2:4c:f0:8d:ab:b6:d3:a1:15:9d:69: 04:49:a4:f7:d6:6a:1e:95:df:ca:7d:bf:a0:0e:72:a6:9e:ce: 2a:5e:38:51:64:0e:eb:df:b3:f4:af:e3:60:25:17:49:2d:f7: 46:76:9f:9d:ae:1c:82:b3:fb:14:35:87:fa:e8:38:5a:d8:a2: 21:43:59:3f:d8:51:0c:5c:5e:a1:9a:04:ab:85:1a:7a:d3:77: 4a:fd:6c:42:9b:c5:33:03:d4:07:fc:cf:d7:29:20:52:92:cc: 00:5e:29:31:77:c8:c1:f9:a9:7e:19:7b:5c:ad:f3:aa:83:8a: 83:29:71:62:a4:8e:81:28:02:2f:f0:e4:9a:6e:df:c4:2a:fa: f4:5f:5f:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITBJ5X32HZ5sYWcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZjZhY2Y3NTYtNTQzOC00NWE5LWJkMmQtM2FhMWYyYjQ5YzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrHWp/xdcvfz+9Ivny9csw0S1fKTfSjOYFqI TkJAqpE9SQGOmA2QXJSMpHxQ34F+eKn35yGxTKmJsyV93Err4koxQSCGe+JJJDMk 9hVGa1dbDSLHk9tZvS6vpPT8SH6xB5MLJWqIjxTzQSnspfY1eQIwcbJcYiSj8d0y 3Ie18Ep0bdK91JMuQAMlm+MetqGciIM7g6oBJK1aBLvb2kfmzQBeM4/y9Ji45gRI 7ctetW+AJCRjxA9fhlqhvsaOpSvqf1b5sft7G1yn5qW6dQwCC+rXUKul/qArFlkV 3WWHYQoUqY420vIMSyaGSkhP/C7cY58ZTxRGEtgmRumNWbLnxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzlWivp0KopIbf3KM5+2L6HpQZ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTdhOWI0ODgtNDIyMi0z NmQ2LTlmOWEtYmFiNzMyNWJlYTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkIwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7esjAzD5id9KkxFwhonZ2ecAhPL112bEWVndxXcaz9tzdlOJ566ItQ XiceIB7LJ6Lsg4zZfGOQb2xwVKknfAEY8HqGDc3ODVh5P6WJd0OSztDWuQDhHVEk +ptp8vAdwq5saKOPvGNatI1RD4oGQrpX0yPiTPCNq7bToRWdaQRJpPfWah6V38p9 v6AOcqaezipeOFFkDuvfs/Sv42AlF0kt90Z2n52uHIKz+xQ1h/roOFrYoiFDWT/Y UQxcXqGaBKuFGnrTd0r9bEKbxTMD1Af8z9cpIFKSzABeKTF3yMH5qX4Ze1yt86qD ioMpcWKkjoEoAi/w5Jpu38Qq+vRfX/Q= -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:16 2025 by rpki-client