$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa65b408-608c-368d-8bb9-fb1f574bcc42.roa File: fa65b408-608c-368d-8bb9-fb1f574bcc42.roa (raw, json) Hash identifier: OzQwG08uk63pxsKkz7RGkbxRELM2JcStDinEueOnY7U= Subject key identifier: 2A:88:04:C6:D3:6B:51:E4:7F:D7:EB:EA:CC:F9:D7:F4:08:F6:82:17 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BCB841A41D0D44F8D9780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa65b408-608c-368d-8bb9-fb1f574bcc42.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.134.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:cb:84:1a:41:d0:d4:4f:8d:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=81c1ef73-2bee-4aa4-9387-73e883c19a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:21:34:47:77:25:a8:40:77:3e:b5:34:0e:1f: 12:11:fd:8a:8f:05:9d:40:80:d8:7f:7c:a5:c4:05: f6:42:80:76:35:d3:50:02:89:54:78:43:b3:67:f4: 18:f9:2e:b5:9a:59:91:0f:0e:39:0a:3f:a2:25:9c: 4c:8f:e8:a6:4d:96:6c:f9:cc:39:09:46:3d:e2:c1: ec:94:5d:74:2a:02:d4:e4:ea:11:8a:a5:3b:ec:21: a5:f4:3c:34:71:db:eb:03:9f:1a:53:9a:64:f5:d5: cc:c5:ff:4b:67:07:4b:9f:2d:32:df:47:a3:61:73: ac:33:3e:51:88:71:f6:0b:ae:68:09:11:dc:42:09: 19:00:0f:5b:85:f1:83:6b:60:0f:8d:5f:b9:83:65: f4:7e:d5:5c:ba:2d:b8:30:67:57:13:d8:82:60:ef: b6:18:c3:c5:f2:83:df:f6:39:3c:c1:51:f8:cd:e7: b2:3d:ae:f0:a3:fd:1f:b6:fd:d3:5f:db:e2:fa:e8: 77:46:67:19:87:c3:56:c8:b8:db:ce:7c:d2:0e:cf: 11:27:41:d9:ec:33:aa:3e:eb:6c:6a:44:7a:d6:3a: 55:d9:4d:f3:b3:bd:66:6f:01:dd:19:3b:f9:22:d7: 04:06:40:ef:73:68:92:5c:70:cc:69:2e:ec:e8:92: 02:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:88:04:C6:D3:6B:51:E4:7F:D7:EB:EA:CC:F9:D7:F4:08:F6:82:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa65b408-608c-368d-8bb9-fb1f574bcc42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.134.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:bb:65:5d:4a:a9:70:51:a9:5d:6d:e5:44:9a:ea:b1:32:88: 89:b9:88:7a:87:6a:0f:d9:32:42:0d:49:68:db:ee:2b:c4:ca: ff:36:10:e7:2b:57:5d:b5:8d:3b:d3:8c:71:9b:e1:13:7a:61: 3f:d3:ed:cf:36:0e:c7:b4:c2:63:51:9a:b4:e9:42:ae:6e:49: f8:5a:b7:99:5c:de:3a:97:5c:34:8f:2c:9b:46:2c:cc:2d:06: 43:44:ff:9b:f0:14:4a:76:1c:37:a4:01:a3:62:3e:e9:ba:51: 08:c0:90:dd:3c:c5:e0:e8:0a:f2:35:34:16:ea:da:0c:44:ca: dc:99:52:03:8b:f5:f1:fd:aa:dc:2d:da:78:67:51:e5:35:a2: 68:95:9c:92:64:61:b8:96:99:32:fd:b3:1b:cd:6a:f3:f0:39: ef:77:44:3a:1d:2c:71:04:cd:18:2c:73:fb:02:73:42:0b:f1: e1:75:5b:c1:a8:a5:77:b9:e1:ca:52:1b:ee:a2:cf:ea:8c:ce: 48:d9:b4:60:55:9b:b9:3c:d2:d0:89:09:07:f1:10:4d:8e:0a: 6b:a0:46:18:7d:9d:96:b3:e6:5c:25:b7:f5:62:28:98:6f:22: f2:70:00:88:84:fa:b4:e4:bf:63:67:95:94:63:1e:1f:70:4c: 0c:b8:99:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8uEGkHQ1E+Nl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ODFjMWVmNzMtMmJlZS00YWE0LTkzODctNzNlODgzYzE5YTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSE0R3clqEB3PrU0Dh8SEf2KjwWdQIDYf3yl xAX2QoB2NdNQAolUeEOzZ/QY+S61mlmRDw45Cj+iJZxMj+imTZZs+cw5CUY94sHs lF10KgLU5OoRiqU77CGl9Dw0cdvrA58aU5pk9dXMxf9LZwdLny0y30ejYXOsMz5R iHH2C65oCRHcQgkZAA9bhfGDa2APjV+5g2X0ftVcui24MGdXE9iCYO+2GMPF8oPf 9jk8wVH4zeeyPa7wo/0ftv3TX9vi+uh3RmcZh8NWyLjbznzSDs8RJ0HZ7DOqPuts akR61jpV2U3zs71mbwHdGTv5ItcEBkDvc2iSXHDMaS7s6JICSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqIBMbTa1Hkf9fr6sz51/QI9oIXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmE2NWI0MDgtNjA4Yy0z NjhkLThiYjktZmIxZjU3NGJjYzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGq7ZV1KqXBRqV1t5USa6rEyiIm5iHqHag/ZMkINSWjb7ivEyv82EOcr V121jTvTjHGb4RN6YT/T7c82Dse0wmNRmrTpQq5uSfhat5lc3jqXXDSPLJtGLMwt BkNE/5vwFEp2HDekAaNiPum6UQjAkN08xeDoCvI1NBbq2gxEytyZUgOL9fH9qtwt 2nhnUeU1omiVnJJkYbiWmTL9sxvNavPwOe93RDodLHEEzRgsc/sCc0IL8eF1W8Go pXe54cpSG+6iz+qMzkjZtGBVm7k80tCJCQfxEE2OCmugRhh9nZaz5lwlt/ViKJhv IvJwAIiE+rTkv2NnlZRjHh9wTAy4mXs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:12 2025 by rpki-client