$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/09cfcecb-dd85-3278-8558-2a47690bd6da.roa File: 09cfcecb-dd85-3278-8558-2a47690bd6da.roa (raw, json) Hash identifier: 3ZWCOEG0ln4DTU8BiLBk7J8MQsdWqO9+4dCQOBc3rkg= Subject key identifier: 68:2F:93:B1:DC:36:25:9B:C7:AC:96:EB:E8:F9:05:B9:30:4E:BE:9B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C0769735656586FA54280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/09cfcecb-dd85-3278-8558-2a47690bd6da.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 34.169.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:07:69:73:56:56:58:6f:a5:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=6d2ae913-e215-42ef-b3dd-1761cb89f85a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c8:bc:71:36:8c:fb:a9:71:b4:a5:2e:6e:ed: 49:cd:70:87:68:20:f1:4c:47:fc:24:49:a2:74:31: 08:35:42:37:89:01:9b:be:71:18:37:b7:7d:12:79: 6c:06:f5:c4:5d:14:e1:9b:19:7e:13:f2:c9:4a:ba: 83:7f:37:67:fc:3a:14:f7:99:42:de:a9:b8:ca:ff: 9e:1c:53:b0:10:8a:5b:b1:71:e8:58:9f:6e:ef:83: 3c:9e:d9:ad:2e:22:11:58:e7:86:80:e3:0a:4c:f2: 0f:a2:19:f8:25:7e:1f:04:5a:6f:8d:72:34:e9:59: 24:7a:3e:e9:ee:28:9e:e6:bf:75:e9:5b:ce:48:f4: cf:e4:54:ba:03:df:19:f7:0b:05:7f:6d:01:16:7e: 19:26:a1:01:95:b7:63:56:1a:bf:4e:3e:c2:7a:b9: 4a:ee:ad:dd:a0:0a:37:26:5b:0a:c0:4e:63:00:5b: 52:49:eb:ea:31:ad:4b:74:59:d3:b0:a2:7f:22:dd: 10:ea:7f:2b:26:5a:1e:1b:31:07:69:f5:f7:79:41: 59:ed:77:dc:99:26:16:f7:39:80:53:15:52:e5:55: 34:55:37:1c:93:06:e7:9a:d2:1e:65:a3:ea:57:fd: 2a:e4:7c:7f:c9:c5:d0:4b:07:73:e0:91:d0:04:21: 1c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:2F:93:B1:DC:36:25:9B:C7:AC:96:EB:E8:F9:05:B9:30:4E:BE:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/09cfcecb-dd85-3278-8558-2a47690bd6da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.169.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ee:ad:36:a3:af:49:50:c9:82:b1:74:67:98:b6:22:df:bc: 04:b5:48:08:c8:b3:11:16:87:c2:47:58:4a:37:0b:14:8e:1e: fb:1a:0d:64:82:8d:86:99:ed:42:17:b1:ba:bd:47:ed:8b:7b: 93:64:f5:eb:36:ef:17:78:73:fd:af:f9:5f:8b:e1:9b:ed:f2: bc:ca:4d:9d:d0:7d:d2:79:9d:51:de:b0:61:f4:3d:06:fd:bd: e0:d2:a9:30:66:47:4a:03:57:23:75:2a:45:85:bf:76:16:df: 37:d7:df:8c:47:55:4f:87:5e:78:0b:0a:1e:5e:d7:ab:9d:30: 66:bf:f5:d0:97:97:e8:3e:02:e6:33:5d:3e:27:48:e7:f4:7e: e7:1a:4c:26:52:d1:a4:30:9f:d3:84:39:e4:62:58:ac:9a:67: b9:ee:de:30:ff:71:f3:21:21:56:a2:3a:b6:8d:e6:9f:94:0e: ab:d2:29:20:cc:74:d7:88:00:79:d1:bf:be:92:01:0e:35:63: 12:35:3c:e5:3c:b1:83:0a:00:e0:a8:36:73:6b:c0:56:2b:c3: 2a:6f:6d:39:0c:96:4e:b9:92:74:77:b6:db:1d:54:76:18:5d: 8f:2e:ef:7f:98:dc:b3:5d:53:07:99:2f:df:f0:36:77:5d:fb: cf:63:bd:18 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjITAdpc1ZWWG+lQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NmQyYWU5MTMtZTIxNS00MmVmLWIzZGQtMTc2MWNiODlmODVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMi8cTaM+6lxtKUubu1JzXCHaCDxTEf8JEmi dDEINUI3iQGbvnEYN7d9EnlsBvXEXRThmxl+E/LJSrqDfzdn/DoU95lC3qm4yv+e HFOwEIpbsXHoWJ9u74M8ntmtLiIRWOeGgOMKTPIPohn4JX4fBFpvjXI06Vkkej7p 7iie5r916VvOSPTP5FS6A98Z9wsFf20BFn4ZJqEBlbdjVhq/Tj7CerlK7q3doAo3 JlsKwE5jAFtSSevqMa1LdFnTsKJ/It0Q6n8rJloeGzEHafX3eUFZ7XfcmSYW9zmA UxVS5VU0VTcckwbnmtIeZaPqV/0q5Hx/ycXQSwdz4JHQBCEcPwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGgvk7HcNiWbx6yW6+j5BbkwTr6bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDljZmNlY2ItZGQ4NS0z Mjc4LTg1NTgtMmE0NzY5MGJkNmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIqkwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAGu6tNqOvSVDJgrF0Z5i2It+8BLVICMizERaHwkdYSjcLFI4e+xoNZIKN hpntQhexur1H7Yt7k2T16zbvF3hz/a/5X4vhm+3yvMpNndB90nmdUd6wYfQ9Bv29 4NKpMGZHSgNXI3UqRYW/dhbfN9ffjEdVT4deeAsKHl7Xq50wZr/10JeX6D4C5jNd PidI5/R+5xpMJlLRpDCf04Q55GJYrJpnue7eMP9x8yEhVqI6to3mn5QOq9IpIMx0 14gAedG/vpIBDjVjEjU85TyxgwoA4Kg2c2vAVivDKm9tOQyWTrmSdHe22x1Udhhd jy7vf5jcs11TB5kv3/A2d137z2O9GA== -----END CERTIFICATE-----Generated at Fri Mar 14 09:31:14 2025 by rpki-client