$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa4957f0-ada2-3e65-94a0-bd8d1b84bb3f.roa File: fa4957f0-ada2-3e65-94a0-bd8d1b84bb3f.roa (raw, json) Hash identifier: XEjvWOYb+6X+5SvqVGjOAf1Z5zsqNdRETsfbwxKf8aU= Subject key identifier: 3E:04:AE:82:34:07:53:27:8F:3E:28:55:9E:04:19:28:D6:76:63:1E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BE72EAC458257ED50D080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa4957f0-ada2-3e65-94a0-bd8d1b84bb3f.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.98.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:e7:2e:ac:45:82:57:ed:50:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=983104b9-1b24-46ae-a2bf-cc35f87433a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:51:39:14:03:f7:42:70:2f:39:d2:06:7e:97: 56:23:dd:55:b2:a9:1c:23:f6:b8:ae:dc:a9:af:a5: b5:04:3d:77:b3:01:09:52:47:aa:ef:c1:05:dc:8a: 18:6c:ac:72:a8:d0:4d:84:ef:d8:73:5a:4d:1d:9c: a3:02:cf:67:e3:be:5e:a7:85:ca:d2:3e:c9:a2:a5: 9a:16:78:70:af:3c:a7:be:93:6a:96:ef:e1:b0:42: 3a:a6:bb:75:8e:54:a1:bd:42:a2:0a:de:b4:34:23: 00:26:7a:f7:3d:b2:2b:82:b4:2d:ed:0f:5a:38:48: 95:d5:48:a1:6d:25:0b:88:24:a7:09:5f:9f:87:f6: b7:5f:f3:3c:0f:19:1d:0b:7d:1d:07:c7:71:0d:88: 40:07:06:42:d7:14:48:51:94:82:86:10:66:b1:7d: 12:fd:d0:df:21:4e:e3:fa:c9:be:aa:36:09:5f:fe: 4c:6c:ea:19:8b:49:5b:0e:42:a4:6a:d1:1a:6c:ea: 4d:59:a0:d5:58:ea:ea:95:f0:0b:ed:52:21:ab:57: 43:1a:bf:d4:5e:f6:2f:40:cd:4c:11:b9:06:c7:04: 46:19:03:2b:9e:2c:a3:af:a0:0a:18:6b:45:18:8f: 70:56:a9:d0:65:2b:3c:05:7d:a9:33:ff:ac:5e:be: 4e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:04:AE:82:34:07:53:27:8F:3E:28:55:9E:04:19:28:D6:76:63:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa4957f0-ada2-3e65-94a0-bd8d1b84bb3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.98.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:85:65:4b:71:92:6c:fd:d4:a6:78:32:5a:51:4b:0f:8c:09: f6:59:b5:fa:65:b6:f0:ca:20:0f:cf:5f:a8:90:ab:61:72:1a: 07:d1:e3:47:63:45:3e:8e:f9:97:16:bf:8d:ea:fd:4e:ca:06: 1d:e9:f5:8f:c8:5d:a6:dd:32:12:95:2c:54:52:86:e6:aa:64: 61:6e:a2:a4:72:79:ff:98:4c:fd:fa:5a:eb:5a:8c:60:44:c9: 80:eb:e7:5c:f5:ed:15:fe:ce:76:9f:32:92:13:b3:bc:98:44: 7b:6f:4c:86:c7:55:5c:d4:cb:71:0d:00:ca:31:ce:7a:30:96: e1:5e:8c:95:c6:c9:ec:35:3d:38:1c:19:e1:c6:8b:25:5c:96: 9f:98:60:b8:fb:b4:10:88:f0:05:13:38:7a:22:37:d0:74:93: 95:5b:25:13:d5:70:8e:49:a0:e8:9f:cb:e0:72:3e:a6:9a:7d: 1e:b0:56:05:83:e0:f6:35:b8:69:54:06:72:05:86:b5:11:16: 0b:36:91:57:0f:85:ed:b3:8b:eb:82:d4:23:29:03:35:54:af: 22:91:34:f7:5d:d8:12:5f:04:3c:08:3b:c8:f8:d4:2a:d9:46: 75:bc:00:e9:22:25:d4:7d:3f:38:a6:f5:0c:73:ba:e7:34:80: 25:0d:b9:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+curEWCV+1Q0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk OTgzMTA0YjktMWIyNC00NmFlLWEyYmYtY2MzNWY4NzQzM2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFE5FAP3QnAvOdIGfpdWI91VsqkcI/a4rtyp r6W1BD13swEJUkeq78EF3IoYbKxyqNBNhO/Yc1pNHZyjAs9n475ep4XK0j7JoqWa FnhwrzynvpNqlu/hsEI6prt1jlShvUKiCt60NCMAJnr3PbIrgrQt7Q9aOEiV1Uih bSULiCSnCV+fh/a3X/M8DxkdC30dB8dxDYhABwZC1xRIUZSChhBmsX0S/dDfIU7j +sm+qjYJX/5MbOoZi0lbDkKkatEabOpNWaDVWOrqlfAL7VIhq1dDGr/UXvYvQM1M EbkGxwRGGQMrniyjr6AKGGtFGI9wVqnQZSs8BX2pM/+sXr5ODQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4EroI0B1Mnjz4oVZ4EGSjWdmMeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmE0OTU3ZjAtYWRhMi0z ZTY1LTk0YTAtYmQ4ZDFiODRiYjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECFZUtxkmz91KZ4MlpRSw+MCfZZtfpltvDKIA/PX6iQq2FyGgfR40dj RT6O+ZcWv43q/U7KBh3p9Y/IXabdMhKVLFRShuaqZGFuoqRyef+YTP36WutajGBE yYDr51z17RX+znafMpITs7yYRHtvTIbHVVzUy3ENAMoxznowluFejJXGyew1PTgc GeHGiyVclp+YYLj7tBCI8AUTOHoiN9B0k5VbJRPVcI5JoOify+ByPqaafR6wVgWD 4PY1uGlUBnIFhrURFgs2kVcPhe2zi+uC1CMpAzVUryKRNPdd2BJfBDwIO8j41CrZ RnW8AOkiJdR9Pzim9Qxzuuc0gCUNuZw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:25 2025 by rpki-client