$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f1db5b23-e8e2-376c-9b23-b925e54d133a.roa File: f1db5b23-e8e2-376c-9b23-b925e54d133a.roa (raw, json) Hash identifier: B9cHq6a+il3ZoyX6a2nrt37rgUW8t25XRnP1pgB2DVg= Subject key identifier: 7F:90:01:9F:CE:08:E3:C1:73:4B:EA:B0:18:64:AC:BD:34:46:45:83 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BDFE299DDE86A9607FB00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f1db5b23-e8e2-376c-9b23-b925e54d133a.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.136.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:df:e2:99:dd:e8:6a:96:07:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=ef845b85-9db7-45ec-b979-d1b21f2bd4f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c7:ca:2f:d5:0f:2f:00:73:c1:ee:a6:14:8e: e7:5a:0e:ba:a8:86:c1:55:70:88:56:83:aa:fc:ac: 29:c0:83:3c:6b:2d:39:8f:3e:0d:50:0a:96:3c:6f: 37:fc:08:f1:77:dc:d1:91:90:7e:17:ec:18:65:8b: 05:f8:c2:56:28:f8:85:80:f8:23:c2:e3:55:be:c4: 0c:cc:df:db:dd:30:c0:73:bc:aa:c8:bb:1a:93:45: ec:ea:dc:d8:fa:39:ec:47:84:ec:88:bb:4a:a9:b0: 44:b9:cf:6d:29:dc:4d:06:aa:70:02:0b:46:b0:1f: 0b:9f:70:e8:b3:d1:5b:5a:4b:99:a6:e6:db:33:1a: b0:58:c0:25:bd:8a:29:35:f7:a2:22:59:f9:6d:e9: 69:8b:01:5e:1c:de:1f:e8:36:e4:10:f0:fe:ae:c6: 4b:4c:6a:40:8a:9d:88:f2:ff:6d:87:41:17:58:05: ab:50:29:e8:13:4a:3e:34:15:e6:d4:00:b5:a7:47: 62:aa:9e:50:9e:ad:c7:3f:ec:eb:ed:97:7c:3e:55: d9:f4:2b:54:a0:6d:70:d5:50:7f:4e:a5:2d:59:71: ff:ac:2d:e7:d9:7c:8f:09:11:0a:08:bd:70:bc:de: 39:8b:2f:3f:1b:11:b0:63:98:a1:90:8f:32:8e:3b: f7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:90:01:9F:CE:08:E3:C1:73:4B:EA:B0:18:64:AC:BD:34:46:45:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f1db5b23-e8e2-376c-9b23-b925e54d133a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.136.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:8e:05:f4:9d:24:98:b3:20:b1:15:0b:df:54:d6:c4:32:fb: 4e:e3:31:87:14:8f:f4:de:f3:1b:26:d0:63:60:f5:1a:c8:75: d8:71:c7:64:fb:59:f4:59:a5:c9:47:86:17:13:0d:0c:1c:e5: 5a:eb:89:bf:eb:40:3e:20:44:f7:99:99:d8:ff:7e:f2:be:b5: f8:52:aa:9c:99:8c:f3:7a:9c:18:54:c9:aa:08:41:b6:0d:dc: 2b:74:d2:b6:6b:6d:61:ce:b8:06:07:f8:86:4c:d8:21:75:2a: 3b:bd:16:64:cc:68:55:04:8a:fa:ed:f4:6d:99:9a:7a:ca:b4: ea:da:ba:c1:35:3b:3d:15:cc:b4:7b:5f:9c:90:02:1f:6a:b2: f4:54:45:93:a9:2e:09:5b:d0:c0:13:51:75:9d:78:84:0b:40: 3c:2c:e0:c3:83:e1:51:34:4b:3f:5a:9a:ba:53:6f:f8:e9:7e: b8:58:d4:5f:0d:69:6f:12:19:e3:72:09:a3:3d:44:a8:72:8e: 94:18:a3:5e:4d:82:66:17:6f:58:4a:22:76:6c:43:12:d8:97: ff:42:f8:f8:93:33:f7:6c:98:f0:f3:db:ac:1b:1b:f5:0a:c2: 60:4d:93:03:c8:7e:ee:a1:78:f3:57:bd:86:d8:c9:0e:25:8a: e3:82:f3:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS9/imd3oapYH+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZWY4NDViODUtOWRiNy00NWVjLWI5NzktZDFiMjFmMmJkNGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8fKL9UPLwBzwe6mFI7nWg66qIbBVXCIVoOq /KwpwIM8ay05jz4NUAqWPG83/Ajxd9zRkZB+F+wYZYsF+MJWKPiFgPgjwuNVvsQM zN/b3TDAc7yqyLsak0Xs6tzY+jnsR4TsiLtKqbBEuc9tKdxNBqpwAgtGsB8Ln3Do s9FbWkuZpubbMxqwWMAlvYopNfeiIln5belpiwFeHN4f6DbkEPD+rsZLTGpAip2I 8v9th0EXWAWrUCnoE0o+NBXm1AC1p0diqp5Qnq3HP+zr7Zd8PlXZ9CtUoG1w1VB/ TqUtWXH/rC3n2XyPCREKCL1wvN45iy8/GxGwY5ihkI8yjjv3yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+QAZ/OCOPBc0vqsBhkrL00RkWDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjFkYjViMjMtZThlMi0z NzZjLTliMjMtYjkyNWU1NGQxMzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoiwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKaOBfSdJJizILEVC99U1sQy+07jMYcUj/Te8xsm0GNg9RrIddhxx2T7 WfRZpclHhhcTDQwc5Vrrib/rQD4gRPeZmdj/fvK+tfhSqpyZjPN6nBhUyaoIQbYN 3Ct00rZrbWHOuAYH+IZM2CF1Kju9FmTMaFUEivrt9G2ZmnrKtOrausE1Oz0VzLR7 X5yQAh9qsvRURZOpLglb0MATUXWdeIQLQDws4MOD4VE0Sz9amrpTb/jpfrhY1F8N aW8SGeNyCaM9RKhyjpQYo15NgmYXb1hKInZsQxLYl/9C+PiTM/dsmPDz26wbG/UK wmBNkwPIfu6hePNXvYbYyQ4liuOC86I= -----END CERTIFICATE-----Generated at Fri Apr 4 21:40:41 2025 by rpki-client