$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea6b70c3-4c2c-340e-8a7b-c1ad8ff4c912.roa File: ea6b70c3-4c2c-340e-8a7b-c1ad8ff4c912.roa (raw, json) Hash identifier: O3ofc9yPTLlEJC6sXBeOjScEgtO4rcay7YddNjTUzH8= Subject key identifier: 88:69:BC:42:CF:7B:83:7A:FE:BF:FE:04:BE:D2:30:ED:8D:5B:0B:31 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C1FBAF168AEF8A3404800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea6b70c3-4c2c-340e-8a7b-c1ad8ff4c912.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.133.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:1f:ba:f1:68:ae:f8:a3:40:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=dbd242bf-9ebf-44f1-a668-5f7d889ff1c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2d:6f:08:06:fd:fd:92:be:aa:2f:36:7e:bd: 07:35:f6:db:c5:e7:1a:39:b2:18:8e:81:18:e7:d3: dc:47:88:db:79:11:d9:34:be:aa:7b:0d:37:45:41: 20:46:d8:f4:6e:f5:7e:bf:fb:23:ab:8b:79:0e:b9: e1:52:5b:7b:75:16:5e:99:bc:a5:44:0d:b0:c8:1b: a9:90:ba:21:04:bc:38:b2:c0:37:22:d0:92:10:5b: 28:fb:03:00:b0:6b:64:34:29:13:43:5d:b0:89:b9: cd:58:38:c2:ed:ae:67:cb:49:bc:ce:8e:09:7b:fd: 21:c2:a6:b1:f3:c3:40:d4:0a:8f:d2:22:9c:75:b6: 90:82:3a:10:df:30:4e:0a:e0:4b:1d:55:4f:73:84: 8f:e8:6f:2a:c4:4c:7c:a9:2a:a9:99:65:dd:85:78: 28:c8:9f:08:f1:93:02:e3:73:de:10:08:10:4e:c6: cb:d8:9b:7f:0e:8d:5c:2b:c1:37:20:fa:ba:bd:de: 1b:27:3f:51:7e:aa:0c:05:54:8b:5a:0c:0c:8d:7b: 56:dc:28:fb:28:86:c0:65:0d:3f:bf:8e:76:1d:ad: 54:05:18:65:bf:76:f3:a9:8e:a4:91:63:e8:a5:ef: 4f:2f:09:bc:5c:df:20:6f:e1:1e:d0:81:00:50:db: a1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:69:BC:42:CF:7B:83:7A:FE:BF:FE:04:BE:D2:30:ED:8D:5B:0B:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea6b70c3-4c2c-340e-8a7b-c1ad8ff4c912.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.133.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:13:b4:0f:10:5c:89:6b:55:a6:8c:52:a6:fa:f9:d4:f3:b9: 4d:29:f1:9a:f6:e4:70:28:f5:88:ba:56:54:f1:cf:40:5d:01: 9d:3e:74:4b:e6:74:24:5f:2d:3a:30:e0:d0:e3:cd:d3:bd:4d: 25:a3:9a:cb:1c:57:33:ae:11:ca:d1:71:6c:73:83:0e:4d:af: 7d:e9:45:e9:1f:30:a1:83:31:1b:38:5f:4a:9c:e3:c8:28:00: 97:9d:ce:40:ec:09:d9:6e:96:3e:c8:ed:4a:b4:29:d0:6f:82: 00:5c:c5:32:66:e3:a4:5c:50:f7:65:39:09:79:6e:80:da:ee: 9c:aa:74:33:87:1d:95:3c:c3:b5:71:16:94:26:fb:08:5e:12: 77:ad:a2:00:de:98:3d:61:62:5e:c8:02:01:2f:74:04:22:82: c4:12:05:66:94:fb:c9:9d:56:4e:d4:25:1f:ab:d5:6f:6d:34: 11:54:1c:d4:04:71:40:42:1c:91:70:3a:29:98:91:18:9f:8a: 66:8a:24:6a:c1:39:00:e7:5b:44:d0:b4:75:c8:a0:36:39:70: ba:56:ba:93:6b:0d:88:11:b5:76:84:4f:53:8d:f0:7b:4e:98: 48:9b:20:8a:71:9e:05:0c:bb:69:aa:0f:83:6c:df:eb:0b:ab: 49:59:f5:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITB+68Wiu+KNASAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZGJkMjQyYmYtOWViZi00NGYxLWE2NjgtNWY3ZDg4OWZmMWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhC1vCAb9/ZK+qi82fr0HNfbbxecaObIYjoEY 59PcR4jbeRHZNL6qew03RUEgRtj0bvV+v/sjq4t5DrnhUlt7dRZembylRA2wyBup kLohBLw4ssA3ItCSEFso+wMAsGtkNCkTQ12wibnNWDjC7a5ny0m8zo4Je/0hwqax 88NA1AqP0iKcdbaQgjoQ3zBOCuBLHVVPc4SP6G8qxEx8qSqpmWXdhXgoyJ8I8ZMC 43PeEAgQTsbL2Jt/Do1cK8E3IPq6vd4bJz9RfqoMBVSLWgwMjXtW3Cj7KIbAZQ0/ v452Ha1UBRhlv3bzqY6kkWPope9PLwm8XN8gb+Ee0IEAUNuhVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhpvELPe4N6/r/+BL7SMO2NWwsxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWE2YjcwYzMtNGMyYy0z NDBlLThhN2ItYzFhZDhmZjRjOTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsTtA8QXIlrVaaMUqb6+dTzuU0p8Zr25HAo9Yi6VlTxz0BdAZ0+dEvm dCRfLTow4NDjzdO9TSWjmsscVzOuEcrRcWxzgw5Nr33pRekfMKGDMRs4X0qc48go AJedzkDsCdlulj7I7Uq0KdBvggBcxTJm46RcUPdlOQl5boDa7pyqdDOHHZU8w7Vx FpQm+wheEnetogDemD1hYl7IAgEvdAQigsQSBWaU+8mdVk7UJR+r1W9tNBFUHNQE cUBCHJFwOimYkRifimaKJGrBOQDnW0TQtHXIoDY5cLpWupNrDYgRtXaET1ON8HtO mEibIIpxngUMu2mqD4Ns3+sLq0lZ9To= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:21 2025 by rpki-client