$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ab519a8-30a7-3662-b133-9a4028e98d2d.roa File: 2ab519a8-30a7-3662-b133-9a4028e98d2d.roa (raw, json) Hash identifier: pjumamLqrMEF136paa/5UhMrkPILnhj7TeQNX+AeGfs= Subject key identifier: 02:14:95:F2:1C:D0:43:A8:B3:92:1B:F3:5A:AC:BB:6C:32:F8:3E:B4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BBA0F0B596841D2E89600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ab519a8-30a7-3662-b133-9a4028e98d2d.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.99.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:ba:0f:0b:59:68:41:d2:e8:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=855cd579-a47f-48b0-84fc-7cd278092c80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:04:36:25:ce:d0:e3:ad:50:99:7d:4f:7c:58: 41:cf:f4:b0:2f:cf:d1:6d:cb:18:28:63:49:00:e2: cd:35:98:ae:df:86:9a:52:6f:d1:2d:fa:4e:13:c4: 47:2f:bb:20:ec:3f:89:63:4e:73:1a:0c:14:16:72: b5:e5:ee:59:34:5f:eb:6d:45:7c:13:49:00:07:fb: 45:12:e2:89:32:1b:ea:d5:b3:61:cf:ef:8e:e1:ab: 19:3b:93:54:9c:f7:ad:2b:e5:c8:a4:4c:34:6e:13: e7:ae:f8:24:c7:ba:a8:97:e2:43:3b:46:2e:f9:8e: 93:ea:71:67:48:f7:e8:36:9e:5c:8b:da:d2:cd:9d: c5:3f:35:af:47:92:34:09:f5:88:f0:28:85:64:7c: 8b:8d:b0:f1:a1:67:f1:a5:57:c7:ac:a8:b1:bf:70: 30:6c:bd:f9:26:be:28:31:a0:91:82:1a:c2:06:ef: f8:82:aa:5b:09:e6:d1:06:88:a8:6b:ae:38:b4:f0: d2:51:51:91:ea:c3:51:5e:73:30:01:75:90:9f:e0: 30:9a:fb:c9:56:4a:e0:b4:7e:7e:cf:8e:e0:f8:a7: 38:f7:b1:3a:de:0d:96:a2:fe:dd:f6:62:e4:0e:8c: d5:d0:8a:44:8d:f1:70:9d:a9:6c:81:d2:0a:19:89: 3e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:14:95:F2:1C:D0:43:A8:B3:92:1B:F3:5A:AC:BB:6C:32:F8:3E:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ab519a8-30a7-3662-b133-9a4028e98d2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.99.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:a9:b9:77:6f:60:64:da:52:69:61:68:df:7c:98:5d:1f:6f: 33:ef:77:b7:e0:8f:f4:86:a6:bb:86:28:5e:90:c2:21:9f:d6: 2a:10:74:77:3e:98:5b:9f:dc:3f:1e:9f:11:3f:77:d2:dc:68: 6e:86:e6:1c:66:68:ef:4d:1b:02:df:42:b5:56:91:e4:ea:d2: 9d:ac:80:39:f5:6b:ae:4a:28:a2:fc:35:c0:3d:dd:9f:83:14: bb:cf:c6:c5:ad:87:e2:06:ce:d2:d2:6c:38:c6:ec:f4:c8:32: 36:1b:58:73:98:cc:cf:71:6b:ed:74:b5:24:07:f0:b8:a2:41: ba:49:d0:13:e7:7b:84:fc:ed:0c:3a:aa:2d:93:64:6f:23:9b: 9e:d1:91:ab:a2:db:cf:e5:97:58:bd:a8:b8:a5:ae:e6:fb:ef: 60:d0:29:e8:63:e8:36:81:ee:37:6a:ce:b6:e7:dd:ad:5e:14: 48:58:3b:de:bc:9d:61:32:60:36:56:fb:73:a4:2d:c0:ed:23: e7:54:82:c9:39:c1:96:7f:d1:b0:d6:f5:ce:40:dc:26:81:89: 84:3b:b3:bc:9c:8b:40:56:64:a3:bc:d8:9c:cd:0e:17:d8:b8: eb:82:0a:d0:8e:1e:80:8e:aa:e1:a6:2b:72:8f:84:af:80:3e: b7:d1:8c:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS7oPC1loQdLolgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ODU1Y2Q1NzktYTQ3Zi00OGIwLTg0ZmMtN2NkMjc4MDkyYzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwQ2Jc7Q461QmX1PfFhBz/SwL8/RbcsYKGNJ AOLNNZiu34aaUm/RLfpOE8RHL7sg7D+JY05zGgwUFnK15e5ZNF/rbUV8E0kAB/tF EuKJMhvq1bNhz++O4asZO5NUnPetK+XIpEw0bhPnrvgkx7qol+JDO0Yu+Y6T6nFn SPfoNp5ci9rSzZ3FPzWvR5I0CfWI8CiFZHyLjbDxoWfxpVfHrKixv3AwbL35Jr4o MaCRghrCBu/4gqpbCebRBoioa644tPDSUVGR6sNRXnMwAXWQn+AwmvvJVkrgtH5+ z47g+Kc497E63g2Wov7d9mLkDozV0IpEjfFwnalsgdIKGYk+DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIUlfIc0EOos5Ib81qsu2wy+D60MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmFiNTE5YTgtMzBhNy0z NjYyLWIxMzMtOWE0MDI4ZTk4ZDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmpuXdvYGTaUmlhaN98mF0fbzPvd7fgj/SGpruGKF6QwiGf1ioQdHc+ mFuf3D8enxE/d9LcaG6G5hxmaO9NGwLfQrVWkeTq0p2sgDn1a65KKKL8NcA93Z+D FLvPxsWth+IGztLSbDjG7PTIMjYbWHOYzM9xa+10tSQH8LiiQbpJ0BPne4T87Qw6 qi2TZG8jm57Rkaui28/ll1i9qLilrub772DQKehj6DaB7jdqzrbn3a1eFEhYO968 nWEyYDZW+3OkLcDtI+dUgsk5wZZ/0bDW9c5A3CaBiYQ7s7yci0BWZKO82JzNDhfY uOuCCtCOHoCOquGmK3KPhK+APrfRjFo= -----END CERTIFICATE-----Generated at Sat Apr 26 14:54:04 2025 by rpki-client