$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f9cacea0-9218-3446-aa8a-8e3d5a8f1e5d.roa File: f9cacea0-9218-3446-aa8a-8e3d5a8f1e5d.roa (raw, json) Hash identifier: FlAhQ9FC7snVzV4UMxCWq2g8wFu30f3YrOrfHMLWF+c= Subject key identifier: 48:21:77:B9:FD:9B:EB:03:B7:84:54:88:7B:51:0A:4E:8A:9B:82:D9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BBF77093A46FB70F0AE80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f9cacea0-9218-3446-aa8a-8e3d5a8f1e5d.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.87.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:bf:77:09:3a:46:fb:70:f0:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=1f9f10d0-228c-4774-8359-827edd4109e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9a:74:89:66:42:83:ec:39:b8:27:9b:c8:5f: a6:f4:28:d9:b2:d7:b9:25:ad:ce:58:52:2d:a7:5a: 55:b9:91:94:b3:29:68:36:9f:a7:28:72:6c:6b:1c: 47:5e:8d:34:7d:2c:50:0a:ea:df:a1:ab:d5:bb:91: 76:01:6e:52:06:d6:ae:5a:da:d7:50:ea:ee:f9:5f: 30:24:96:a6:97:5a:02:ae:39:f8:38:4b:e2:77:f1: ce:09:22:8e:9f:fd:32:3b:e4:3f:03:96:06:e3:40: a6:4c:70:bf:97:14:4d:b1:fd:25:da:ff:83:3b:bc: d6:11:b4:a9:3b:58:8b:0c:be:32:c5:be:17:48:61: 6d:1a:f5:0f:71:0e:8e:25:e0:45:68:c2:4f:59:12: 50:41:44:c4:9d:5a:25:c4:83:21:43:96:8e:c4:fd: 45:d9:b8:5f:79:7a:cd:76:c9:11:51:9b:62:c2:7f: b8:de:95:d7:57:96:9e:37:ed:82:d6:f7:79:13:0f: c4:e1:55:45:8d:d0:5b:11:b5:a7:a5:2e:c2:ea:06: 87:88:a2:7c:6e:42:e2:61:b7:59:91:6e:65:ea:0e: da:b9:16:07:20:49:0c:51:fd:b8:19:fa:47:2c:89: 13:de:b7:e7:6c:f3:a4:ee:3b:59:58:c0:b6:54:2f: 90:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:21:77:B9:FD:9B:EB:03:B7:84:54:88:7B:51:0A:4E:8A:9B:82:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f9cacea0-9218-3446-aa8a-8e3d5a8f1e5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.87.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:a1:84:6a:fd:0b:a4:2b:8a:d2:df:f5:cc:ce:11:d3:b5:8e: d7:d1:89:6a:6a:0a:56:cc:d3:e3:ff:de:00:51:e2:fb:d0:08: 5c:9f:59:cc:60:df:38:ec:7f:4c:81:d2:b9:8d:7c:53:58:eb: 63:52:49:c3:0d:ec:d1:79:ae:b6:89:9d:79:e0:d6:23:c1:39: dc:0b:b8:6e:bd:82:1b:60:52:d9:0b:3d:d5:90:62:71:e0:d4: 89:60:50:fa:88:da:70:77:54:fc:b4:f0:a6:36:a9:15:3c:a2: 2f:01:b3:2a:f3:da:4e:02:ee:8d:83:f9:a8:a6:91:17:82:2b: 3a:bb:55:aa:c9:1a:bd:74:a5:a3:e5:e3:c5:b0:36:ee:74:f4: 9c:0e:a7:5f:b7:d4:55:c3:16:31:7c:3b:66:06:40:3f:ab:be: 38:f6:b7:1a:ee:52:e3:c4:de:5e:d4:a0:c9:08:06:be:88:f4: 1a:e7:ef:ca:e2:48:9e:0e:fb:20:0a:59:51:69:3d:c8:68:8f: fb:82:29:c2:45:7c:38:2d:f2:e7:fc:7e:37:d0:ef:5e:0a:ab: 11:31:c6:a8:b8:46:bf:97:a1:3c:5e:35:1c:bd:19:be:3b:e7: 9c:b5:b4:6d:a7:58:74:12:cc:16:0a:47:01:6f:5e:c1:e9:b3: df:17:9e:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS793CTpG+3DwroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MWY5ZjEwZDAtMjI4Yy00Nzc0LTgzNTktODI3ZWRkNDEwOWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZp0iWZCg+w5uCebyF+m9CjZste5Ja3OWFIt p1pVuZGUsyloNp+nKHJsaxxHXo00fSxQCurfoavVu5F2AW5SBtauWtrXUOru+V8w JJaml1oCrjn4OEvid/HOCSKOn/0yO+Q/A5YG40CmTHC/lxRNsf0l2v+DO7zWEbSp O1iLDL4yxb4XSGFtGvUPcQ6OJeBFaMJPWRJQQUTEnVolxIMhQ5aOxP1F2bhfeXrN dskRUZtiwn+43pXXV5aeN+2C1vd5Ew/E4VVFjdBbEbWnpS7C6gaHiKJ8bkLiYbdZ kW5l6g7auRYHIEkMUf24GfpHLIkT3rfnbPOk7jtZWMC2VC+QXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEghd7n9m+sDt4RUiHtRCk6Km4LZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjljYWNlYTAtOTIxOC0z NDQ2LWFhOGEtOGUzZDVhOGYxZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6hhGr9C6QritLf9czOEdO1jtfRiWpqClbM0+P/3gBR4vvQCFyfWcxg 3zjsf0yB0rmNfFNY62NSScMN7NF5rraJnXng1iPBOdwLuG69ghtgUtkLPdWQYnHg 1IlgUPqI2nB3VPy08KY2qRU8oi8Bsyrz2k4C7o2D+aimkReCKzq7VarJGr10paPl 48WwNu509JwOp1+31FXDFjF8O2YGQD+rvjj2txruUuPE3l7UoMkIBr6I9Brn78ri SJ4O+yAKWVFpPchoj/uCKcJFfDgt8uf8fjfQ714KqxExxqi4Rr+XoTxeNRy9Gb47 55y1tG2nWHQSzBYKRwFvXsHps98Xnp0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:31:23 2025 by rpki-client