$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fc8c1f5a-c4e6-351b-8e7f-e1497639a3d7.roa File: fc8c1f5a-c4e6-351b-8e7f-e1497639a3d7.roa (raw, json) Hash identifier: kSCkH6VZ2Rz6i4zgUCjA1AYpBGzMs26Vj8W7gvCgvLQ= Subject key identifier: 0E:39:88:4D:78:DF:48:16:1D:25:51:E3:02:01:51:D5:AC:9C:64:CA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C07E84C4A8FC8EC3C6B80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fc8c1f5a-c4e6-351b-8e7f-e1497639a3d7.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.66.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:07:e8:4c:4a:8f:c8:ec:3c:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=f1a070e2-bf5e-40b8-b423-c47174934ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c7:3e:14:35:4e:68:53:22:f5:38:a9:26:d6: 78:f2:bf:82:4f:c9:5c:eb:61:39:d7:5e:d0:2b:ae: a1:19:83:52:8b:1d:2d:0b:a1:8a:f8:95:61:72:78: b2:43:f4:e7:44:66:2b:84:8b:7b:50:a0:e4:44:ee: c3:0c:3e:37:99:80:33:01:cb:d6:6c:8c:7f:ad:b7: b0:ce:e8:73:55:de:30:20:73:a2:c7:76:f5:9e:c6: bf:ce:cc:7b:49:13:9f:ae:15:41:2e:47:74:48:e4: 71:36:34:90:03:dd:6d:c2:2a:46:0c:eb:f5:49:f9: 2b:4a:da:67:b4:73:40:a1:a5:ff:d0:23:15:e2:a5: 48:72:f9:ed:6b:f5:d7:de:b9:3e:c2:10:c6:00:2c: 09:c6:c4:8e:ee:f3:5a:ce:3c:9b:56:76:a3:c0:8c: 26:a3:ed:e2:e7:26:c6:77:df:2e:28:98:e2:23:90: ed:84:42:b7:0d:7e:37:fc:d8:ec:1d:f8:8d:69:5a: 0d:33:ad:df:1b:8c:68:59:e7:da:47:1c:1f:4f:a8: 36:6b:33:14:d2:ef:bd:ee:5f:84:83:ef:4c:2a:6e: 0f:6d:9e:80:03:7a:a5:f7:3b:b2:1a:2c:2a:b9:46: d1:f8:6e:e5:2d:f6:14:91:b7:de:a3:ac:d3:f5:4a: 4c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:39:88:4D:78:DF:48:16:1D:25:51:E3:02:01:51:D5:AC:9C:64:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fc8c1f5a-c4e6-351b-8e7f-e1497639a3d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.66.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:00:27:81:d4:20:ac:07:58:f9:23:ea:32:c5:f6:02:7b:0e: 57:95:0b:33:c6:4b:0b:13:b2:15:9c:79:bc:77:12:09:b3:45: e2:73:49:8a:89:0b:7d:f6:fb:f1:22:c5:84:c1:d0:89:98:88: 3b:8e:27:24:34:03:03:db:4a:03:56:42:58:e6:54:ab:b7:6a: ea:0f:b1:d6:b6:86:ea:94:fe:3c:b4:75:18:55:e0:ae:e5:ec: d8:b7:8e:16:fb:76:52:26:67:c6:92:7e:d9:62:98:e7:2f:2c: 4a:5e:d5:91:9c:01:21:48:43:e5:8d:b7:88:51:60:1c:02:78: de:d3:6c:be:e1:61:ff:57:2b:60:66:30:95:89:cb:d0:eb:f1: e8:c4:47:30:f3:d7:1f:82:54:87:6b:30:79:6e:97:d9:ec:88: 72:f9:fc:43:39:09:9f:8a:93:c0:31:3a:a5:45:54:de:8b:f2: a9:33:77:c5:e3:cd:e3:0b:0d:a5:2d:2c:d7:4c:a3:e6:bb:a6: 93:26:de:93:0f:ee:93:54:0f:a7:4b:5f:a6:ca:c4:8c:86:26: 78:4a:e9:1f:80:ec:61:35:3f:57:62:54:f1:2c:36:2d:7e:69: bf:78:64:9b:f1:4a:e4:43:87:24:40:47:38:57:e2:1f:a8:00: bb:4e:f3:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITAfoTEqPyOw8a4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZjFhMDcwZTItYmY1ZS00MGI4LWI0MjMtYzQ3MTc0OTM0ZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMc+FDVOaFMi9TipJtZ48r+CT8lc62E5117Q K66hGYNSix0tC6GK+JVhcniyQ/TnRGYrhIt7UKDkRO7DDD43mYAzAcvWbIx/rbew zuhzVd4wIHOix3b1nsa/zsx7SROfrhVBLkd0SORxNjSQA91twipGDOv1SfkrStpn tHNAoaX/0CMV4qVIcvnta/XX3rk+whDGACwJxsSO7vNazjybVnajwIwmo+3i5ybG d98uKJjiI5DthEK3DX43/NjsHfiNaVoNM63fG4xoWefaRxwfT6g2azMU0u+97l+E g+9MKm4PbZ6AA3ql9zuyGiwquUbR+G7lLfYUkbfeo6zT9UpMDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA45iE1430gWHSVR4wIBUdWsnGTKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmM4YzFmNWEtYzRlNi0z NTFiLThlN2YtZTE0OTc2MzlhM2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsAJ4HUIKwHWPkj6jLF9gJ7DleVCzPGSwsTshWcebx3EgmzReJzSYqJ C332+/EixYTB0ImYiDuOJyQ0AwPbSgNWQljmVKu3auoPsda2huqU/jy0dRhV4K7l 7Ni3jhb7dlImZ8aSftlimOcvLEpe1ZGcASFIQ+WNt4hRYBwCeN7TbL7hYf9XK2Bm MJWJy9Dr8ejERzDz1x+CVIdrMHlul9nsiHL5/EM5CZ+Kk8AxOqVFVN6L8qkzd8Xj zeMLDaUtLNdMo+a7ppMm3pMP7pNUD6dLX6bKxIyGJnhK6R+A7GE1P1diVPEsNi1+ ab94ZJvxSuRDhyRARzhX4h+oALtO8/s= -----END CERTIFICATE-----Generated at Fri Mar 14 09:36:45 2025 by rpki-client