$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f68008f5-79e4-315c-b981-b289b04be2ab.roa File: f68008f5-79e4-315c-b981-b289b04be2ab.roa (raw, json) Hash identifier: 1uqsRpqIpUXzjy39lJdDgtUfDkNd/ZApGm6pbz1vs3Q= Subject key identifier: D4:9F:C7:54:D6:D4:5A:BC:BD:30:2C:04:6B:0D:A1:16:DA:D4:FC:B8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BF0FEBC44B340F88CE0A0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f68008f5-79e4-315c-b981-b289b04be2ab.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.139.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:f0:fe:bc:44:b3:40:f8:8c:e0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=4af4c32c-0538-4700-82b1-e309f9b74426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5c:79:1d:61:de:4b:b0:d0:47:f0:d2:c4:8a: 52:c2:76:4a:68:66:7d:81:96:e7:65:16:c8:d9:03: f3:7b:0b:1c:fa:4c:61:11:51:4c:b1:15:a8:ab:fe: 4e:6d:a9:b9:08:f8:90:4d:a7:e6:7a:ca:33:be:47: 36:5f:21:f0:4b:54:0a:9a:69:32:bd:05:48:1b:83: 83:b2:26:bc:c2:a0:0a:37:e6:2e:93:96:f8:29:07: fd:15:d5:9e:19:bb:e7:a5:31:22:97:30:16:87:52: 4b:ea:0c:3c:6e:7c:bb:3e:42:3a:c4:74:79:d2:52: 9a:2f:5e:3f:fd:3f:22:6e:36:e0:24:ed:88:3b:f0: 51:a7:d2:93:45:0b:41:6c:dc:79:e0:2b:a9:dc:1d: 69:f3:38:49:be:b2:2c:aa:84:a1:dd:89:2d:c6:13: 26:68:f9:a9:6a:03:23:f6:38:9c:c0:d3:51:81:d9: a7:46:2a:25:75:71:6c:1c:4a:85:8c:ac:dc:1c:56: ce:0c:45:30:e0:9c:f0:ea:67:83:8c:1e:20:3b:bd: e5:4a:de:c3:bd:45:26:5b:dd:c2:ca:d5:c3:71:09: 04:bc:64:d7:6f:ec:7c:4e:e5:8e:e6:10:b9:3d:c9: d3:21:ed:38:bc:44:65:bd:db:97:2c:ef:b1:3f:a7: 3f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:9F:C7:54:D6:D4:5A:BC:BD:30:2C:04:6B:0D:A1:16:DA:D4:FC:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f68008f5-79e4-315c-b981-b289b04be2ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.139.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:9e:8f:c7:b7:2e:c3:69:85:6f:49:19:2f:74:5f:43:72:42: e3:6e:e1:e1:f7:fd:ca:99:52:45:32:7e:76:4d:54:b6:e0:a5: d6:58:35:e4:92:7e:60:e7:7f:f2:c3:0a:4e:fd:8c:a3:d7:88: f8:aa:bf:e0:cc:58:2e:2d:44:7c:63:2b:fe:10:43:18:11:5c: d1:d0:72:11:63:0a:d6:53:3d:b3:a6:80:7e:a7:e4:7b:db:8e: 23:c1:22:3b:c9:4f:db:e5:8c:8a:0e:7a:6d:ef:98:96:5b:21: 63:47:dc:c1:1e:ad:3c:e5:32:c7:e4:db:c4:ae:62:b8:a3:8f: db:ac:f3:aa:6f:4b:3c:00:bd:5d:f9:c9:da:f2:89:cd:1b:5e: 15:82:27:c8:0d:94:05:08:e1:bc:1c:69:84:f7:46:44:e8:df: bd:55:fc:68:ce:74:cb:65:7a:23:7e:f9:1a:92:7d:0c:d1:fa: 43:cc:b8:55:83:7b:e1:2a:bb:07:d5:51:e4:84:65:a4:90:bd: 6b:5b:af:36:15:8e:10:44:09:30:a4:8e:44:fa:0a:96:eb:8f: f0:20:c9:8e:23:63:d7:67:2e:da:ab:5a:2a:c9:aa:d1:94:8d: 3e:30:d8:1e:a7:de:49:9f:64:90:09:e2:1d:11:f2:dc:ea:b8: f8:90:7a:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS/D+vESzQPiM4KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NGFmNGMzMmMtMDUzOC00NzAwLTgyYjEtZTMwOWY5Yjc0NDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1x5HWHeS7DQR/DSxIpSwnZKaGZ9gZbnZRbI 2QPzewsc+kxhEVFMsRWoq/5Obam5CPiQTafmesozvkc2XyHwS1QKmmkyvQVIG4OD sia8wqAKN+Yuk5b4KQf9FdWeGbvnpTEilzAWh1JL6gw8bny7PkI6xHR50lKaL14/ /T8ibjbgJO2IO/BRp9KTRQtBbNx54Cup3B1p8zhJvrIsqoSh3YktxhMmaPmpagMj 9jicwNNRgdmnRioldXFsHEqFjKzcHFbODEUw4Jzw6meDjB4gO73lSt7DvUUmW93C ytXDcQkEvGTXb+x8TuWO5hC5PcnTIe04vERlvduXLO+xP6c/twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSfx1TW1Fq8vTAsBGsNoRba1Py4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjY4MDA4ZjUtNzllNC0z MTVjLWI5ODEtYjI4OWIwNGJlMmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIotAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCej8e3LsNphW9JGS90X0NyQuNu4eH3/cqZUkUyfnZNVLbgpdZYNeSS fmDnf/LDCk79jKPXiPiqv+DMWC4tRHxjK/4QQxgRXNHQchFjCtZTPbOmgH6n5Hvb jiPBIjvJT9vljIoOem3vmJZbIWNH3MEerTzlMsfk28SuYrijj9us86pvSzwAvV35 ydryic0bXhWCJ8gNlAUI4bwcaYT3RkTo371V/GjOdMtleiN++RqSfQzR+kPMuFWD e+EquwfVUeSEZaSQvWtbrzYVjhBECTCkjkT6Cpbrj/AgyY4jY9dnLtqrWirJqtGU jT4w2B6n3kmfZJAJ4h0R8tzquPiQeiQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:17 2025 by rpki-client