$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a31a4b3-2c44-3d93-8e9e-6b3e13054591.roa File: 1a31a4b3-2c44-3d93-8e9e-6b3e13054591.roa (raw, json) Hash identifier: D9ba4pJa0gGfgjEmWyadYM5z5ujqyKVZISXwbTsfue4= Subject key identifier: 85:16:E3:72:4C:61:6B:FD:15:CE:63:1C:4C:47:2D:AE:5C:41:07:83 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C03DCE449CD5679009000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a31a4b3-2c44-3d93-8e9e-6b3e13054591.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 34.184.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:03:dc:e4:49:cd:56:79:00:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=79a26377-1b50-4b44-bd08-58c70ff4766a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7b:5e:3e:19:a9:a0:1b:3b:f7:fc:e3:6d:df: 38:ee:36:72:a8:bb:29:e3:64:0b:31:fd:30:5f:50: e5:c2:ac:3e:b9:d8:de:de:02:5d:58:da:bc:fd:70: 50:d6:ea:c2:bb:26:43:84:64:16:48:b6:4a:a5:7f: 13:05:5d:c3:0c:cc:3c:96:29:be:f3:b8:b4:a5:10: ec:f5:d8:c3:6f:59:45:db:c4:5e:08:87:c9:0c:4d: f0:f5:d0:0f:96:6d:ae:4d:bf:82:5f:56:f7:fd:5e: b8:fd:f8:a0:d5:9b:a3:0f:74:68:a1:ee:26:48:e9: 46:9a:66:9f:85:ed:6b:ae:00:0a:ea:6c:e1:f8:5d: 2d:3a:23:81:ca:e1:00:55:0d:db:37:05:c2:24:01: 53:0b:d9:63:b1:87:03:bb:0f:33:63:03:c3:e9:b7: 5a:92:65:76:0e:ff:e0:21:67:c8:f0:fb:40:fd:6d: be:81:6a:15:d8:de:2b:84:87:e0:37:f4:87:84:22: d6:a6:28:95:4c:e2:f2:dc:2a:78:74:b6:40:2c:60: ea:a8:01:ae:6c:e3:16:42:eb:dd:bf:89:03:aa:ed: 7f:be:17:df:3d:f8:30:18:80:86:38:d0:a3:43:23: ba:4d:cb:b7:f1:8e:42:79:03:dc:e1:bb:32:1c:c2: bb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:16:E3:72:4C:61:6B:FD:15:CE:63:1C:4C:47:2D:AE:5C:41:07:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a31a4b3-2c44-3d93-8e9e-6b3e13054591.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.184.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:7c:7a:cb:0d:b7:6b:47:66:ba:c8:f2:a5:2f:d8:4b:6a:e7: 56:e1:97:36:7a:a1:ca:f7:d0:df:3b:76:88:56:57:63:5c:c6: 5b:e6:07:76:dc:dd:a3:bc:4a:df:04:92:5d:a1:88:fe:3a:7d: fb:7d:03:1b:8f:70:92:78:65:a9:e4:6b:46:a3:0f:1b:f3:73: ba:04:cc:ef:06:be:3d:96:b4:cd:9a:ef:b0:7e:69:43:6b:f2: bf:b5:d1:40:d5:00:6a:3b:0e:31:11:06:c4:fe:ae:0c:17:9e: 23:3b:dc:a1:f4:4b:56:f2:9b:f3:09:69:b9:45:5b:9e:fc:97: 8b:1b:ca:84:52:16:5a:f5:ac:38:0e:7d:85:40:75:1e:b4:01: 44:20:b3:2d:da:2f:89:1c:57:10:d8:45:5c:c6:8c:06:51:a4: aa:60:b6:db:05:71:fb:9c:f4:a1:1f:d8:d1:af:c2:a5:08:cd: 4e:d9:6c:ab:69:c1:fc:f1:61:3c:23:c6:05:7e:59:8a:33:f0: d6:0f:b8:f3:10:ea:3a:62:a4:d6:88:f6:d3:4d:8f:8c:88:46: 57:1f:2f:dd:e0:13:db:c6:75:06:f3:ea:eb:e5:d2:7c:37:2a: 45:52:f9:96:49:30:7a:cd:27:f9:cb:3b:9a:8a:6d:20:58:7a: ab:ba:0b:20 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjITAPc5EnNVnkAkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NzlhMjYzNzctMWI1MC00YjQ0LWJkMDgtNThjNzBmZjQ3NjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXtePhmpoBs79/zjbd847jZyqLsp42QLMf0w X1Dlwqw+udje3gJdWNq8/XBQ1urCuyZDhGQWSLZKpX8TBV3DDMw8lim+87i0pRDs 9djDb1lF28ReCIfJDE3w9dAPlm2uTb+CX1b3/V64/fig1ZujD3Rooe4mSOlGmmaf he1rrgAK6mzh+F0tOiOByuEAVQ3bNwXCJAFTC9ljsYcDuw8zYwPD6bdakmV2Dv/g IWfI8PtA/W2+gWoV2N4rhIfgN/SHhCLWpiiVTOLy3Cp4dLZALGDqqAGubOMWQuvd v4kDqu1/vhffPfgwGICGONCjQyO6Tcu38Y5CeQPc4bsyHMK7nQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIUW43JMYWv9Fc5jHExHLa5cQQeDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWEzMWE0YjMtMmM0NC0z ZDkzLThlOWUtNmIzZTEzMDU0NTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCIrgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAhnx6yw23a0dmusjypS/YS2rnVuGXNnqhyvfQ3zt2iFZXY1zGW+YHdtzd o7xK3wSSXaGI/jp9+30DG49wknhlqeRrRqMPG/NzugTM7wa+PZa0zZrvsH5pQ2vy v7XRQNUAajsOMREGxP6uDBeeIzvcofRLVvKb8wlpuUVbnvyXixvKhFIWWvWsOA59 hUB1HrQBRCCzLdoviRxXENhFXMaMBlGkqmC22wVx+5z0oR/Y0a/CpQjNTtlsq2nB /PFhPCPGBX5ZijPw1g+48xDqOmKk1oj2002PjIhGVx8v3eAT28Z1BvPq6+XSfDcq RVL5lkkwes0n+cs7moptIFh6q7oLIA== -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:46 2025 by rpki-client