$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d5111b7-a002-3ec9-b5e4-b94fb01f2408.roa File: 2d5111b7-a002-3ec9-b5e4-b94fb01f2408.roa (raw, json) Hash identifier: mQrTTImQMOQNJhAYOttRJIIoEph2JNGBDTbmF1OMnK8= Subject key identifier: 7B:B9:CD:DE:F3:99:BB:1E:8D:E8:F5:8C:E9:85:37:43:BA:5F:7D:A5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BE77E5D0687C4375C6680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d5111b7-a002-3ec9-b5e4-b94fb01f2408.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.94.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:e7:7e:5d:06:87:c4:37:5c:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=5b8e9565-66ec-49ac-ace5-9e845fed25e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:50:28:ff:27:e4:37:cf:42:e6:e7:18:ba:66: b7:c7:02:cf:bd:2d:f6:74:e6:af:e6:19:f3:c5:cf: 6a:db:7a:68:0c:01:0f:bc:7d:6b:8d:d1:ba:c8:17: 01:d6:aa:be:e2:c4:da:71:ff:a4:3e:b8:d4:88:1d: 85:6c:aa:b6:89:76:9d:b8:85:0c:58:de:fc:da:c6: 9f:56:78:9c:31:03:57:9e:e9:49:dc:11:5d:fc:0b: 1f:16:2a:37:35:88:f8:ec:23:28:15:1c:ed:27:f7: 15:7f:08:37:5f:bf:c7:10:b9:df:37:2e:0f:8b:93: be:92:79:50:a8:47:12:2e:3b:1f:11:a3:55:9e:68: 6f:70:ab:17:ef:9a:05:39:3f:19:e8:85:68:56:42: 7d:d9:90:28:b0:65:d9:38:aa:06:a3:8a:0e:8b:ff: 71:d8:ba:ab:65:17:08:d0:cd:32:73:fc:11:f7:8b: e3:e4:69:a6:c1:c0:04:6f:b4:f9:ef:d6:f8:3c:20: ea:f8:4a:9b:1f:74:f3:44:df:31:e4:ec:45:9d:db: 05:e4:ff:ac:f5:87:d3:b0:05:cd:e9:2c:41:29:2b: a0:7a:1d:be:5f:25:0b:7e:d5:d9:c4:67:06:bd:ad: f9:ef:3b:35:44:50:97:09:6b:d7:e1:61:b2:50:eb: e9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B9:CD:DE:F3:99:BB:1E:8D:E8:F5:8C:E9:85:37:43:BA:5F:7D:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d5111b7-a002-3ec9-b5e4-b94fb01f2408.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.94.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:d5:a8:9e:31:ab:17:e3:c5:ae:b2:c7:74:b4:1b:45:92:84: c0:16:35:b6:ba:8d:bc:cd:8d:ed:b8:11:69:c0:f4:74:8f:0e: 3c:54:a7:7c:d6:9f:69:e5:9d:ec:24:f2:eb:20:18:f0:64:0f: 21:a7:ca:40:6a:20:30:d1:34:dd:6f:93:2a:aa:27:1f:f4:75: 05:79:30:3e:b9:0a:a0:85:89:c0:8d:dd:99:79:19:ea:83:34: a4:14:50:b8:8f:23:9c:53:52:2a:18:17:e0:3f:db:c1:df:e0: 1b:42:93:b6:85:34:df:49:1c:8b:b8:22:35:bc:bd:aa:12:d3: 23:8a:d0:1f:9c:40:6e:7b:f5:3f:1a:f4:2f:60:66:ec:d9:c7: 81:97:14:a0:23:ca:7e:fc:e8:50:f0:bc:8f:34:f5:c6:0d:f5: 3c:7a:7c:96:ce:18:78:a6:89:e4:aa:96:c2:6b:fe:b4:cd:10: 3b:a3:b0:18:19:9a:e9:76:0e:86:f8:1e:2c:f7:1f:01:a4:6d: 0a:32:b4:60:e2:0f:94:5f:75:9a:9c:7e:18:79:34:11:e2:7e: 22:b7:3a:d7:5a:1b:fd:eb:9d:f8:f1:56:83:c3:e8:d6:a6:2a: 88:ee:c0:6b:a8:80:36:b4:2f:26:1e:f1:a4:36:db:e3:da:8a: 08:fe:c4:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+d+XQaHxDdcZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NWI4ZTk1NjUtNjZlYy00OWFjLWFjZTUtOWU4NDVmZWQyNWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFAo/yfkN89C5ucYuma3xwLPvS32dOav5hnz xc9q23poDAEPvH1rjdG6yBcB1qq+4sTacf+kPrjUiB2FbKq2iXaduIUMWN782saf VnicMQNXnulJ3BFd/AsfFio3NYj47CMoFRztJ/cVfwg3X7/HELnfNy4Pi5O+knlQ qEcSLjsfEaNVnmhvcKsX75oFOT8Z6IVoVkJ92ZAosGXZOKoGo4oOi/9x2LqrZRcI 0M0yc/wR94vj5GmmwcAEb7T579b4PCDq+EqbH3TzRN8x5OxFndsF5P+s9YfTsAXN 6SxBKSugeh2+XyULftXZxGcGva357zs1RFCXCWvX4WGyUOvp0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHu5zd7zmbsejej1jOmFN0O6X32lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmQ1MTExYjctYTAwMi0z ZWM5LWI1ZTQtYjk0ZmIwMWYyNDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIl6wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPVqJ4xqxfjxa6yx3S0G0WShMAWNba6jbzNje24EWnA9HSPDjxUp3zW n2nlnewk8usgGPBkDyGnykBqIDDRNN1vkyqqJx/0dQV5MD65CqCFicCN3Zl5GeqD NKQUULiPI5xTUioYF+A/28Hf4BtCk7aFNN9JHIu4IjW8vaoS0yOK0B+cQG579T8a 9C9gZuzZx4GXFKAjyn786FDwvI809cYN9Tx6fJbOGHimieSqlsJr/rTNEDujsBgZ mul2Dob4Hiz3HwGkbQoytGDiD5RfdZqcfhh5NBHifiK3OtdaG/3rnfjxVoPD6Nam KojuwGuogDa0LyYe8aQ22+Paigj+xFE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:01 2025 by rpki-client