$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff3aee79-8070-308b-b5fe-5fa46bfa664f.roa File: ff3aee79-8070-308b-b5fe-5fa46bfa664f.roa (raw, json) Hash identifier: CR3OHP5Brc+gVm06kke6SlUFA2UCqku2SoJt1lrus6E= Subject key identifier: 16:5C:51:06:4D:B4:BC:FC:BA:71:7F:9B:D0:9B:F6:22:32:FD:1F:1F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BFCA08336B79A36C8B140 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff3aee79-8070-308b-b5fe-5fa46bfa664f.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.88.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:fc:a0:83:36:b7:9a:36:c8:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=fa219301-5011-4d2a-84f5-dfe48513250b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d6:3c:60:0e:18:8b:9f:f5:2e:8d:70:92:56: aa:97:7f:e6:99:10:35:c1:4a:d7:f8:9c:e2:4a:25: 86:4d:65:02:98:b3:b5:4d:38:79:9f:0d:98:79:aa: 1b:51:02:f1:97:22:9d:c8:68:40:93:6d:f3:99:13: 4c:03:bb:ee:6e:3e:a5:4e:bc:27:ec:c7:33:52:44: db:09:26:ff:68:a0:3f:32:52:d8:7c:79:71:28:d0: e9:2a:1d:dd:6e:25:38:ed:d5:19:a4:86:7a:51:b8: d3:d8:0e:97:e2:01:cd:7a:3e:7d:c8:15:6f:2b:99: 5c:40:02:8d:bf:58:70:ca:6f:35:2e:a0:ef:07:82: a1:6f:88:7f:e4:b9:17:4e:47:07:ce:f2:22:6a:c7: bc:4c:0b:94:0a:00:15:43:06:24:dc:e0:b0:99:19: f2:2f:38:7d:75:dd:c5:0a:8a:7a:2f:a4:cb:9a:70: b2:2a:40:e9:03:f6:db:4c:95:56:5d:f9:42:52:f5: bb:f6:3f:c6:29:a1:c7:fd:9e:87:d2:e4:96:04:65: 2c:91:cc:52:fd:eb:87:da:ce:0d:75:12:01:30:81: 28:83:de:d7:da:64:2e:7f:6b:b9:88:80:d5:a8:98: 77:17:54:5f:bc:12:b4:f9:69:90:bb:f7:0d:44:bb: d3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:5C:51:06:4D:B4:BC:FC:BA:71:7F:9B:D0:9B:F6:22:32:FD:1F:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ff3aee79-8070-308b-b5fe-5fa46bfa664f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.88.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:87:e6:19:ff:14:56:cb:67:d4:ac:ec:eb:50:bd:94:6d:7c: 90:5e:db:cc:36:ae:86:66:cc:fd:34:27:92:2d:23:8e:82:11: 4a:9a:40:2b:d1:2c:69:47:d6:75:fb:7d:a2:b0:2e:6e:ca:6f: 23:fe:0e:40:0a:9b:50:61:6e:d9:dc:4e:ca:4b:ac:03:a7:98: 9e:83:ba:f6:ef:dc:72:52:3f:b7:f9:f7:8f:90:37:af:bb:87: 02:11:81:b2:2e:b8:0e:4b:fc:59:88:cb:91:03:09:37:be:89: c6:a3:a7:37:bf:6c:c6:3d:e6:8c:6d:fc:8c:9d:f2:c8:44:08: 40:95:43:72:79:fe:9a:2c:00:0a:6d:e3:dc:46:3c:f5:6e:b1: 5c:04:64:90:f3:c8:63:b5:56:8a:b8:bf:8b:dd:23:d1:cc:9d: 38:e0:8b:3f:04:27:ed:17:46:85:a3:eb:b2:af:0a:63:3a:ee: 4b:40:d2:6e:23:fc:42:0c:40:47:23:13:d0:60:6e:7f:23:97: 0e:28:4c:49:b5:58:17:ac:99:9a:ad:6f:0b:e6:eb:cd:e6:f3: 9c:c4:dd:a6:6d:d1:dc:fc:18:f4:d6:b7:89:65:4c:c7:3e:d4: 03:d9:1b:fb:1c:fb:92:91:29:4d:6f:aa:7d:75:0c:22:d9:83: 60:e8:95:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS/yggza3mjbIsUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZmEyMTkzMDEtNTAxMS00ZDJhLTg0ZjUtZGZlNDg1MTMyNTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNY8YA4Yi5/1Lo1wklaql3/mmRA1wUrX+Jzi SiWGTWUCmLO1TTh5nw2YeaobUQLxlyKdyGhAk23zmRNMA7vubj6lTrwn7MczUkTb CSb/aKA/MlLYfHlxKNDpKh3dbiU47dUZpIZ6UbjT2A6X4gHNej59yBVvK5lcQAKN v1hwym81LqDvB4Khb4h/5LkXTkcHzvIiase8TAuUCgAVQwYk3OCwmRnyLzh9dd3F Cop6L6TLmnCyKkDpA/bbTJVWXflCUvW79j/GKaHH/Z6H0uSWBGUskcxS/euH2s4N dRIBMIEog97X2mQuf2u5iIDVqJh3F1RfvBK0+WmQu/cNRLvTyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZcUQZNtLz8unF/m9Cb9iIy/R8fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmYzYWVlNzktODA3MC0z MDhiLWI1ZmUtNWZhNDZiZmE2NjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGH5hn/FFbLZ9Ss7OtQvZRtfJBe28w2roZmzP00J5ItI46CEUqaQCvR LGlH1nX7faKwLm7KbyP+DkAKm1BhbtncTspLrAOnmJ6Duvbv3HJSP7f594+QN6+7 hwIRgbIuuA5L/FmIy5EDCTe+icajpze/bMY95oxt/Iyd8shECECVQ3J5/posAApt 49xGPPVusVwEZJDzyGO1Voq4v4vdI9HMnTjgiz8EJ+0XRoWj67KvCmM67ktA0m4j /EIMQEcjE9Bgbn8jlw4oTEm1WBesmZqtbwvm683m85zE3aZt0dz8GPTWt4llTMc+ 1APZG/sc+5KRKU1vqn11DCLZg2DolWA= -----END CERTIFICATE-----Generated at Fri Apr 4 21:43:01 2025 by rpki-client