$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ffd4d11b-7be4-3453-ad82-0b71adf00095.roa File: ffd4d11b-7be4-3453-ad82-0b71adf00095.roa (raw, json) Hash identifier: RRXo875vNzMIim390Cua4GmeesnrtE5Amnk4ZxL9WuA= Subject key identifier: 84:35:A4:12:D1:54:5C:54:0E:01:8C:04:45:FF:3F:A7:44:07:5B:60 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C0FA6BD302D9A2114E520 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ffd4d11b-7be4-3453-ad82-0b71adf00095.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.94.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:0f:a6:bd:30:2d:9a:21:14:e5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=b71e83dd-b3d3-4d36-9a49-de58f0dff358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:25:0f:de:a0:06:5b:f9:16:1c:d9:a6:01:b3: a1:61:2b:2e:fd:6a:99:2c:a9:b5:8b:c7:d5:d5:ab: dc:5d:67:e2:eb:ee:5b:16:28:80:d0:ac:64:21:64: 35:3b:ae:d7:69:f4:77:76:4a:0c:97:96:bf:2e:45: c4:59:4b:db:60:89:bb:5e:d7:7b:c6:c0:cf:1a:a0: 46:12:86:2b:b7:35:44:f5:e4:c6:df:5f:57:d5:5f: bc:c4:01:4f:95:89:26:d3:de:ef:f8:53:00:f0:8a: 5b:61:83:b0:32:6c:b8:92:75:ed:a0:07:3f:a3:81: 1b:0b:90:5d:b8:8d:48:05:06:dd:49:27:43:9b:56: 47:e8:c7:eb:4f:31:04:45:08:18:2c:b4:9d:8e:fe: 60:19:85:b9:c5:17:66:6d:31:c6:9e:37:b1:fc:52: 57:d6:89:0a:81:f6:80:64:e8:8d:b1:da:47:52:20: c9:be:98:37:91:14:33:e8:b8:78:98:e4:66:3c:12: 54:2e:a6:ef:a3:0d:bd:83:ce:c5:4a:b0:4b:32:9d: eb:18:85:a0:db:2c:14:8c:0d:34:d9:5d:23:4d:b3: 42:f8:43:fa:6f:f9:72:4e:46:10:b3:45:d6:19:e7: 6c:fe:b6:dc:64:3a:64:ee:4b:b9:31:8e:ef:6c:bf: 21:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:35:A4:12:D1:54:5C:54:0E:01:8C:04:45:FF:3F:A7:44:07:5B:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ffd4d11b-7be4-3453-ad82-0b71adf00095.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.94.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:1a:5e:70:c0:de:83:22:98:fa:40:80:98:d0:5c:fa:13:89: bf:db:c3:25:30:5f:87:49:cd:b8:8a:af:aa:29:72:ef:77:e2: d3:70:f7:dd:6e:15:f6:e4:c7:23:df:24:2f:45:d5:5e:70:6f: 78:15:0a:1f:2e:1d:b7:88:09:9a:ec:05:e1:17:68:ca:97:d0: 53:75:16:5f:10:ac:7f:f4:0f:d5:7f:60:25:29:79:91:f9:56: fa:61:39:db:56:b2:ab:af:10:37:ea:25:44:12:9e:c5:c5:7e: 5b:82:de:f2:b3:5c:83:bb:cf:2d:0e:cc:bf:f3:14:45:d8:18: d8:ca:d6:4e:61:9e:8e:71:1e:f0:18:32:23:f4:76:ce:58:5e: 5c:a5:3d:67:6c:e2:db:66:c7:82:2a:36:18:97:2b:1e:fc:85: 9e:86:77:d9:08:98:64:dc:cd:3f:de:ad:45:59:ad:88:e5:97: 75:f0:ec:84:b4:0a:55:e6:a3:98:52:bb:50:e5:fe:a5:a5:d9: 7b:4c:b2:47:4b:41:e9:56:cf:a1:11:27:de:e7:66:42:cf:25: 3c:39:12:b3:90:ff:78:d6:78:ee:be:a3:af:32:9b:42:89:ae: b5:4e:7a:0e:c6:c7:8f:8e:bb:73:0b:c7:a2:4d:3d:c2:a1:e5: 13:e8:b7:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITA+mvTAtmiEU5SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YjcxZTgzZGQtYjNkMy00ZDM2LTlhNDktZGU1OGYwZGZmMzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyUP3qAGW/kWHNmmAbOhYSsu/WqZLKm1i8fV 1avcXWfi6+5bFiiA0KxkIWQ1O67XafR3dkoMl5a/LkXEWUvbYIm7Xtd7xsDPGqBG EoYrtzVE9eTG319X1V+8xAFPlYkm097v+FMA8IpbYYOwMmy4knXtoAc/o4EbC5Bd uI1IBQbdSSdDm1ZH6MfrTzEERQgYLLSdjv5gGYW5xRdmbTHGnjex/FJX1okKgfaA ZOiNsdpHUiDJvpg3kRQz6Lh4mORmPBJULqbvow29g87FSrBLMp3rGIWg2ywUjA00 2V0jTbNC+EP6b/lyTkYQs0XWGeds/rbcZDpk7ku5MY7vbL8hVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQ1pBLRVFxUDgGMBEX/P6dEB1tgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmZkNGQxMWItN2JlNC0z NDUzLWFkODItMGI3MWFkZjAwMDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIl4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUaXnDA3oMimPpAgJjQXPoTib/bwyUwX4dJzbiKr6opcu934tNw991u FfbkxyPfJC9F1V5wb3gVCh8uHbeICZrsBeEXaMqX0FN1Fl8QrH/0D9V/YCUpeZH5 VvphOdtWsquvEDfqJUQSnsXFfluC3vKzXIO7zy0OzL/zFEXYGNjK1k5hno5xHvAY MiP0ds5YXlylPWds4ttmx4IqNhiXKx78hZ6Gd9kImGTczT/erUVZrYjll3Xw7IS0 ClXmo5hSu1Dl/qWl2XtMskdLQelWz6ERJ97nZkLPJTw5ErOQ/3jWeO6+o68ym0KJ rrVOeg7Gx4+Ou3MLx6JNPcKh5RPot9M= -----END CERTIFICATE-----Generated at Fri Apr 4 21:45:39 2025 by rpki-client