$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/291f0c07-656e-3b2b-b9b3-a77de7909e9a.roa File: 291f0c07-656e-3b2b-b9b3-a77de7909e9a.roa (raw, json) Hash identifier: sAanS7Gc/eLHTFndnhcDugprNorPga6j+x03K3jSNtI= Subject key identifier: 9E:82:3F:AD:D1:D7:B1:0B:51:76:0A:9C:AB:2F:26:89:6D:19:7E:4E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BA939DD1093AFADEC6900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/291f0c07-656e-3b2b-b9b3-a77de7909e9a.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.23.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:a9:39:dd:10:93:af:ad:ec:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=ce64cd8f-3f63-4a7d-897b-188b09b9d155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4a:e8:96:dc:c3:de:79:1c:cb:b0:8b:d2:55: 59:9c:03:73:ec:8e:e6:bb:12:58:1e:c3:44:f1:04: df:97:7c:67:40:d4:6a:53:3b:14:7a:d2:b8:95:34: 52:4e:6b:92:30:c1:42:9e:2a:fd:1d:8f:2e:d4:88: 0f:2c:12:21:aa:55:8d:38:5a:4b:67:d0:45:55:6c: 3d:ff:f5:22:b0:15:6d:7c:f8:36:ad:de:0d:83:aa: f2:76:99:9c:55:1b:72:e4:3e:0f:3f:f6:62:d5:11: 47:4a:d9:75:0d:51:ef:dd:77:25:5e:c7:a2:43:b5: 2f:4e:3e:90:1c:0f:8f:c7:5c:bf:d0:d6:b5:ac:63: db:9c:be:cf:9b:81:c9:d7:a8:e3:d1:4c:50:a1:46: 4b:c2:55:ca:97:ca:d9:0c:95:bb:39:6c:99:7e:5e: ee:b3:45:20:3f:6c:cc:d9:f8:af:6f:0a:19:3b:38: 17:6e:84:fd:82:1c:64:08:95:75:19:2c:62:27:7b: 5d:eb:d5:a6:9b:5a:67:23:4d:61:c4:e2:e9:17:f0: 87:1f:e2:d4:6a:5c:61:b4:05:4f:3c:bf:e4:c3:ed: 81:4e:a6:45:0b:d9:03:e6:5f:05:cf:5b:2f:48:8e: 3e:24:57:ab:20:6a:ec:8a:c1:22:48:b1:77:14:97: 01:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:82:3F:AD:D1:D7:B1:0B:51:76:0A:9C:AB:2F:26:89:6D:19:7E:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/291f0c07-656e-3b2b-b9b3-a77de7909e9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.23.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:a0:9f:24:04:1b:be:c8:30:bc:85:c2:77:ed:f9:fb:27:65: 48:fb:85:02:25:20:3e:57:98:ac:1e:7e:4c:cc:92:f1:41:92: e3:6c:81:c8:13:c4:8e:84:7d:3a:7d:46:c6:99:df:0a:23:8c: 3a:08:cb:0d:4c:35:04:fc:4d:1b:9e:56:0f:5c:6c:db:29:1d: fa:7d:78:09:de:01:d4:17:40:2f:fb:db:d8:49:fc:83:8f:0b: 45:70:c1:28:97:14:10:9c:5b:85:84:11:bb:ce:3c:e9:87:d7: 85:41:60:d4:02:82:20:65:12:d3:ec:21:e6:56:0f:df:cc:a6: 4c:a0:60:f8:4c:c5:36:fa:db:ef:b1:3b:99:ba:43:a6:e1:d9: 1f:c9:30:1c:6c:a7:e6:68:89:98:fe:3d:fb:b7:62:c5:6a:22: 3b:73:b1:53:c7:dd:32:fe:b1:e7:c8:2e:f7:d4:16:1a:28:82: 5c:be:72:53:6c:33:3a:ee:3e:32:00:38:1d:4e:f6:0c:54:70: c1:b7:d8:39:ce:8a:49:b4:42:af:85:71:a2:c8:ab:c5:18:c8: 0d:f4:1f:2d:10:b0:74:3a:12:53:04:59:ea:0c:7a:00:e2:ff: f9:0a:d9:89:6f:cd:28:35:84:41:0b:53:a7:f4:a6:f5:ed:2a: 2f:94:1c:c2 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjIS6k53RCTr63saQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk Y2U2NGNkOGYtM2Y2My00YTdkLTg5N2ItMTg4YjA5YjlkMTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkroltzD3nkcy7CL0lVZnANz7I7muxJYHsNE 8QTfl3xnQNRqUzsUetK4lTRSTmuSMMFCnir9HY8u1IgPLBIhqlWNOFpLZ9BFVWw9 //UisBVtfPg2rd4Ng6rydpmcVRty5D4PP/Zi1RFHStl1DVHv3XclXseiQ7UvTj6Q HA+Px1y/0Na1rGPbnL7Pm4HJ16jj0UxQoUZLwlXKl8rZDJW7OWyZfl7us0UgP2zM 2fivbwoZOzgXboT9ghxkCJV1GSxiJ3td69Wmm1pnI01hxOLpF/CHH+LUalxhtAVP PL/kw+2BTqZFC9kD5l8Fz1svSI4+JFerIGrsisEiSLF3FJcBLQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJ6CP63R17ELUXYKnKsvJoltGX5OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjkxZjBjMDctNjU2ZS0z YjJiLWI5YjMtYTc3ZGU3OTA5ZTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIhcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAGaCfJAQbvsgwvIXCd+35+ydlSPuFAiUgPleYrB5+TMyS8UGS42yByBPE joR9On1GxpnfCiOMOgjLDUw1BPxNG55WD1xs2ykd+n14Cd4B1BdAL/vb2En8g48L RXDBKJcUEJxbhYQRu8486YfXhUFg1AKCIGUS0+wh5lYP38ymTKBg+EzFNvrb77E7 mbpDpuHZH8kwHGyn5miJmP49+7dixWoiO3OxU8fdMv6x58gu99QWGiiCXL5yU2wz Ou4+MgA4HU72DFRwwbfYOc6KSbRCr4VxosirxRjIDfQfLRCwdDoSUwRZ6gx6AOL/ +QrZiW/NKDWEQQtTp/Sm9e0qL5Qcwg== -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:47 2025 by rpki-client