$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e8a6f764-8d13-33ef-8862-36bada8b9865.roa File: e8a6f764-8d13-33ef-8862-36bada8b9865.roa (raw, json) Hash identifier: b4Cpc4lIGMgL+U7m699xdTSaY9qmEXMxoGMatJW5geM= Subject key identifier: 26:FD:DE:C9:13:78:3D:10:5B:7B:60:AB:03:D4:DE:07:F4:9F:F6:B9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BCEFB884368028B559900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e8a6f764-8d13-33ef-8862-36bada8b9865.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.125.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:ce:fb:88:43:68:02:8b:55:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=73818f6f-e325-453f-b3dd-6938c4a57646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e4:cb:13:3c:f6:3d:d1:f0:49:e9:63:24:95: c7:26:f7:3b:a4:e8:06:4a:6a:c6:d1:04:16:90:77: f5:72:04:d9:7f:0b:dd:47:3c:9c:ee:24:d4:e7:1c: 34:eb:c1:dd:d8:02:f3:0a:0c:5b:d2:95:e2:02:d4: 4b:df:fd:4c:0b:d3:bd:2b:22:cc:9f:d2:ef:f7:19: b8:bb:f1:cb:d9:f4:2c:10:5a:f9:bc:27:0c:fa:1b: 7c:b3:a3:36:ab:1d:25:0b:9a:38:fa:bc:97:70:ec: 52:c7:36:7d:e8:fb:6b:bc:0d:22:a2:b4:4b:ce:7c: 01:d7:00:ca:6c:7e:e6:1c:37:14:5d:df:9d:5e:82: 28:44:3c:43:d9:0e:d2:d3:4c:b8:71:41:4e:45:48: 77:7f:b1:b8:47:a9:94:82:1b:f6:9b:cf:51:db:5d: 70:0c:71:e4:9e:ac:4d:81:9b:fe:46:e4:34:e3:74: 73:ae:25:d0:17:77:79:ab:9e:d2:74:7b:45:54:7d: 2f:1e:01:8d:6f:73:22:ad:f1:22:aa:1b:4b:c0:40: 26:34:7f:83:fe:63:9b:5c:fe:17:0c:28:94:b2:f8: cb:c0:4a:f4:93:0f:eb:13:2f:95:7d:d3:17:d5:55: 5f:25:0f:07:2d:06:40:21:f3:3b:5a:5b:5f:f4:57: 54:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:FD:DE:C9:13:78:3D:10:5B:7B:60:AB:03:D4:DE:07:F4:9F:F6:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e8a6f764-8d13-33ef-8862-36bada8b9865.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.125.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:39:32:99:e1:2b:5d:3d:4b:f8:44:9f:92:9a:4a:68:ab:44: bd:49:59:8e:cf:7b:d2:1e:0a:3b:9f:b4:59:17:27:65:48:f4: b1:ea:cb:d6:79:97:56:d5:09:47:3c:59:12:30:72:d4:35:77: ee:6a:8b:ed:d8:9a:a9:fb:c9:a7:06:d1:a5:fa:cc:cd:7c:81: ad:4c:9a:51:d9:25:7e:4a:76:3c:35:05:b3:0a:98:a6:cb:18: 76:e1:6e:91:d2:38:fe:d3:d6:a3:15:5b:1a:0b:f2:a9:9f:db: 07:49:bf:2a:1c:57:47:26:93:ff:31:8e:6a:65:6d:2a:5b:23: 0e:31:61:c4:96:ca:b2:52:98:82:f8:10:af:62:e0:d0:64:55: 7d:97:17:83:52:02:71:ec:b4:21:7b:1e:18:be:01:3e:9f:76: e7:e6:65:c4:c5:e9:89:08:c6:d0:4d:c4:06:97:e2:c0:41:0e: f8:1e:eb:c1:d0:23:f5:f0:ce:70:42:e0:6f:13:91:09:df:51: 14:27:8e:56:45:1b:d5:21:c7:ab:7a:27:91:47:ed:85:79:b6: 09:60:8a:ea:2e:d9:73:22:d0:e3:f0:ce:96:63:de:41:89:e5: f5:79:1a:d2:e6:de:e9:7e:f6:03:46:81:9d:90:9c:ef:d7:41: 67:0f:20:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS877iENoAotVmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NzM4MThmNmYtZTMyNS00NTNmLWIzZGQtNjkzOGM0YTU3NjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreTLEzz2PdHwSeljJJXHJvc7pOgGSmrG0QQW kHf1cgTZfwvdRzyc7iTU5xw068Hd2ALzCgxb0pXiAtRL3/1MC9O9KyLMn9Lv9xm4 u/HL2fQsEFr5vCcM+ht8s6M2qx0lC5o4+ryXcOxSxzZ96PtrvA0iorRLznwB1wDK bH7mHDcUXd+dXoIoRDxD2Q7S00y4cUFORUh3f7G4R6mUghv2m89R211wDHHknqxN gZv+RuQ043RzriXQF3d5q57SdHtFVH0vHgGNb3MirfEiqhtLwEAmNH+D/mObXP4X DCiUsvjLwEr0kw/rEy+VfdMX1VVfJQ8HLQZAIfM7Wltf9FdUvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCb93skTeD0QW3tgqwPU3gf0n/a5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZThhNmY3NjQtOGQxMy0z M2VmLTg4NjItMzZiYWRhOGI5ODY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIn2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD45MpnhK109S/hEn5KaSmirRL1JWY7Pe9IeCjuftFkXJ2VI9LHqy9Z5 l1bVCUc8WRIwctQ1d+5qi+3Ymqn7yacG0aX6zM18ga1MmlHZJX5Kdjw1BbMKmKbL GHbhbpHSOP7T1qMVWxoL8qmf2wdJvyocV0cmk/8xjmplbSpbIw4xYcSWyrJSmIL4 EK9i4NBkVX2XF4NSAnHstCF7Hhi+AT6fdufmZcTF6YkIxtBNxAaX4sBBDvge68HQ I/XwznBC4G8TkQnfURQnjlZFG9Uhx6t6J5FH7YV5tglgiuou2XMi0OPwzpZj3kGJ 5fV5GtLm3ul+9gNGgZ2QnO/XQWcPIE0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:46 2025 by rpki-client