$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22d05331-2e03-3d73-a0e2-a8e20f5e4975.roa File: 22d05331-2e03-3d73-a0e2-a8e20f5e4975.roa (raw, json) Hash identifier: Frq+OvfudLc2SBAIvhdi+8+jKB9/kuS8MTyVhTxpVI4= Subject key identifier: 11:C4:DB:1F:4F:2F:F9:45:78:73:76:FA:8D:91:42:71:2A:F0:73:96 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C58231656E1788B8103D2A80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22d05331-2e03-3d73-a0e2-a8e20f5e4975.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 34.118.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:31:65:6e:17:88:b8:10:3d:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=3aaf8fac-99da-4b00-afd1-d029bce3f025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:df:fe:60:cd:1a:0c:6c:a8:79:92:6b:40:db: 6b:f8:d1:7b:88:76:37:2d:2e:d6:ac:0d:21:5d:9e: 01:68:6c:5b:e4:89:e9:62:34:6a:bc:45:57:b6:0e: 4a:56:cf:b3:8c:9d:92:5b:31:71:5c:a3:7c:38:cd: 5c:08:a5:19:fd:70:b2:5d:9f:03:5b:29:58:65:81: ba:e5:7e:31:62:6b:d9:53:b1:28:0b:7d:cf:53:bc: a9:0f:1b:c6:e6:b9:15:7f:7b:e5:37:86:a7:3a:40: 31:31:c8:fd:9b:9e:e5:23:c9:a5:f7:e1:6b:4b:4f: 59:0d:8f:71:7a:65:0f:4d:25:57:45:0b:f8:c1:84: e7:ac:e1:6b:21:0a:c5:04:40:60:82:1d:f0:19:43: e9:65:9c:4a:be:17:ad:a1:db:76:27:82:59:5c:01: 4c:dc:b8:ee:2d:bb:c8:62:82:2e:e6:6f:f2:e3:20: bf:47:19:21:c9:f7:68:f4:89:0d:62:d6:de:c2:42: 34:d5:b9:a8:07:11:01:3c:21:0f:bd:d7:62:2b:a8: 66:06:e4:c4:fe:e8:7c:d7:c3:f9:5a:81:dc:3b:0a: 26:39:42:9a:61:50:8c:d5:4f:a8:7c:0b:1b:1b:55: 67:45:e5:e0:12:ae:1b:03:8b:b8:55:61:25:56:71: 3a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C4:DB:1F:4F:2F:F9:45:78:73:76:FA:8D:91:42:71:2A:F0:73:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22d05331-2e03-3d73-a0e2-a8e20f5e4975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.118.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:c1:26:55:e5:db:f0:3d:5b:41:e9:21:7a:82:71:aa:c2:47: be:82:b2:90:77:32:b8:3b:d3:7d:81:54:0f:27:96:d2:09:4c: 4d:b3:db:26:88:10:44:e4:2e:09:97:98:31:1f:07:7a:78:c8: 19:7c:2a:a0:69:32:94:85:7b:6a:20:96:eb:57:9c:b2:82:ff: 18:1c:d3:db:80:e2:59:02:e5:c7:f3:c4:90:f3:d8:13:91:b4: 81:b8:0d:d0:c0:7e:88:a3:ba:b7:4a:86:6f:3a:34:91:4b:04: 9c:40:b7:c6:4b:3b:c2:eb:12:eb:93:b6:f0:3c:ad:2a:17:b4: f0:bf:e7:85:5f:09:4f:0c:7f:e7:9c:90:5e:b3:55:34:10:e4: 54:4d:b2:e5:32:e3:52:12:c3:41:f0:23:66:45:19:58:aa:4b: 1c:b7:1f:a5:fc:2f:c9:87:5b:a9:d7:5d:6b:f7:8c:ad:d4:3e: 29:6a:e4:30:f5:e1:f7:dc:79:be:33:b4:84:83:57:f3:29:d2: 18:97:fa:a8:a0:99:b1:68:c0:f7:ce:55:92:c9:1b:16:f0:88: 50:c5:4b:5e:ec:33:e6:25:38:9b:22:75:36:9d:46:3b:3f:16: ab:57:3f:fc:ae:e2:0a:dd:76:89:49:68:54:88:9a:1e:db:f4: a5:b6:74:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgjFlbheIuBA9KoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk M2FhZjhmYWMtOTlkYS00YjAwLWFmZDEtZDAyOWJjZTNmMDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9/+YM0aDGyoeZJrQNtr+NF7iHY3LS7WrA0h XZ4BaGxb5InpYjRqvEVXtg5KVs+zjJ2SWzFxXKN8OM1cCKUZ/XCyXZ8DWylYZYG6 5X4xYmvZU7EoC33PU7ypDxvG5rkVf3vlN4anOkAxMcj9m57lI8ml9+FrS09ZDY9x emUPTSVXRQv4wYTnrOFrIQrFBEBggh3wGUPpZZxKvhetodt2J4JZXAFM3LjuLbvI YoIu5m/y4yC/Rxkhyfdo9IkNYtbewkI01bmoBxEBPCEPvddiK6hmBuTE/uh818P5 WoHcOwomOUKaYVCM1U+ofAsbG1VnReXgEq4bA4u4VWElVnE6RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHE2x9PL/lFeHN2+o2RQnEq8HOWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjJkMDUzMzEtMmUwMy0z ZDczLWEwZTItYThlMjBmNWU0OTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDInbIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALBJlXl2/A9W0HpIXqCcarCR76CspB3Mrg7032BVA8nltIJTE2z2yaI EETkLgmXmDEfB3p4yBl8KqBpMpSFe2oglutXnLKC/xgc09uA4lkC5cfzxJDz2BOR tIG4DdDAfoijurdKhm86NJFLBJxAt8ZLO8LrEuuTtvA8rSoXtPC/54VfCU8Mf+ec kF6zVTQQ5FRNsuUy41ISw0HwI2ZFGViqSxy3H6X8L8mHW6nXXWv3jK3UPilq5DD1 4ffceb4ztISDV/Mp0hiX+qigmbFowPfOVZLJGxbwiFDFS17sM+YlOJsidTadRjs/ FqtXP/yu4grddolJaFSImh7b9KW2dGM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:19 2025 by rpki-client