$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/316888b9-89a0-3668-a33a-4be81bd7b9a2.roa File: 316888b9-89a0-3668-a33a-4be81bd7b9a2.roa (raw, json) Hash identifier: Ky3Mxh27NH+p0uCPBNkQgEybg+5QU1SvHahEbNSNVac= Subject key identifier: AC:16:4F:4B:20:81:84:39:A8:27:2C:67:55:41:43:6D:47:26:32:57 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584913AC445CF7B0D4F7F50FEDA0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/316888b9-89a0-3668-a33a-4be81bd7b9a2.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 396982 IP address blocks: 34.11.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:44:5c:f7:b0:d4:f7:f5:0f:ed:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=1bef9e97-dbe7-43d7-b84f-f17c510e892c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:ef:19:f0:bd:d7:b3:7e:95:42:58:4b:4a:d5: 8c:51:3b:df:fe:4b:05:f8:d6:de:9c:f4:6d:11:cc: 19:90:5c:23:24:e2:c5:71:e0:37:72:2f:5e:fc:8b: ba:7b:78:82:19:d0:fe:bf:bd:8e:33:b3:1b:a1:e1: 24:fd:b2:19:55:bc:08:90:d6:07:30:fe:e0:2a:f4: 99:e8:51:1d:cd:3f:aa:51:a5:0f:bd:e1:b4:98:41: c4:37:07:7d:7a:b5:14:dc:a6:74:d8:e6:db:45:4e: 6f:a6:7a:24:e5:9b:e0:a4:22:c7:31:05:23:d7:bb: 6c:92:15:08:ee:de:9e:b9:8d:2e:0f:b9:6a:65:8f: 27:1b:10:5f:7a:ff:09:aa:ee:68:1a:33:87:91:e7: 9b:65:4e:48:2a:6f:1f:76:1f:b6:d8:c5:f1:50:a0: 79:71:ac:05:09:32:48:12:40:31:02:56:04:9f:ad: 0f:e2:dd:a4:b0:eb:b8:9e:12:22:44:4e:e3:80:06: 83:84:6f:63:d6:cd:bb:3f:8c:35:b9:93:ea:72:40: eb:f2:e2:32:2b:70:cd:fb:19:6e:f8:f8:bb:9a:10: 36:2e:54:78:3c:76:00:d7:c5:c8:00:f3:1d:98:44: 7e:db:4e:82:4c:51:4b:82:e2:15:5d:ca:82:53:14: d2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:16:4F:4B:20:81:84:39:A8:27:2C:67:55:41:43:6D:47:26:32:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/316888b9-89a0-3668-a33a-4be81bd7b9a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.11.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:03:bd:69:ff:00:29:62:3c:31:7c:8d:44:52:32:cd:ab:58: 65:50:02:1c:69:7b:01:10:11:50:52:51:6a:5f:72:40:0e:cb: dd:40:4b:3b:8b:b7:2b:eb:fb:35:0f:60:99:2e:fb:ca:16:46: 62:07:a7:2d:14:cb:2e:69:d8:29:7e:1a:09:a2:4e:b0:1b:5e: 65:65:33:39:7b:0c:64:5e:6d:93:f1:df:ef:83:d2:56:88:a5: e8:21:eb:46:ef:7e:c5:18:38:20:03:b3:01:d7:29:c6:42:51: 67:33:dc:d6:5a:3c:3f:9c:39:e5:74:a9:bb:59:19:dd:3e:67: f5:36:fc:98:1a:18:44:0a:ae:f5:0c:b3:fb:00:d3:53:52:39: f3:4c:d0:aa:d1:c9:1d:48:5e:e6:76:5a:c0:2e:85:9d:91:52: 02:5e:77:2d:04:4a:62:01:a6:d2:80:12:1e:46:47:a5:01:53: 35:fc:dc:38:09:54:57:7a:6b:0e:a8:1d:90:94:1d:11:84:80: 8c:29:86:ba:08:7d:ce:65:3e:28:c5:1f:59:b5:23:9e:f0:10: e3:fb:d5:a9:0e:fd:e1:80:32:3b:fe:41:9f:41:ad:9b:ff:bd: b1:8e:57:a1:43:d9:3a:04:e6:1f:24:6f:46:93:32:a1:a1:4c: a4:6f:43:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrERc97DU9/UP7aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk MWJlZjllOTctZGJlNy00M2Q3LWI4NGYtZjE3YzUxMGU4OTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA++8Z8L3Xs36VQlhLStWMUTvf/ksF+NbenPRt EcwZkFwjJOLFceA3ci9e/Iu6e3iCGdD+v72OM7MboeEk/bIZVbwIkNYHMP7gKvSZ 6FEdzT+qUaUPveG0mEHENwd9erUU3KZ02ObbRU5vpnok5ZvgpCLHMQUj17tskhUI 7t6euY0uD7lqZY8nGxBfev8Jqu5oGjOHkeebZU5IKm8fdh+22MXxUKB5cawFCTJI EkAxAlYEn60P4t2ksOu4nhIiRE7jgAaDhG9j1s27P4w1uZPqckDr8uIyK3DN+xlu +Pi7mhA2LlR4PHYA18XIAPMdmER+206CTFFLguIVXcqCUxTStwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwWT0sggYQ5qCcsZ1VBQ21HJjJXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzE2ODg4YjktODlhMC0z NjY4LWEzM2EtNGJlODFiZDdiOWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIgsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoDvWn/ACliPDF8jURSMs2rWGVQAhxpewEQEVBSUWpfckAOy91ASzuL tyvr+zUPYJku+8oWRmIHpy0Uyy5p2Cl+GgmiTrAbXmVlMzl7DGRebZPx3++D0laI pegh60bvfsUYOCADswHXKcZCUWcz3NZaPD+cOeV0qbtZGd0+Z/U2/JgaGEQKrvUM s/sA01NSOfNM0KrRyR1IXuZ2WsAuhZ2RUgJedy0ESmIBptKAEh5GR6UBUzX83DgJ VFd6aw6oHZCUHRGEgIwphroIfc5lPijFH1m1I57wEOP71akO/eGAMjv+QZ9BrZv/ vbGOV6FD2ToE5h8kb0aTMqGhTKRvQ2U= -----END CERTIFICATE-----Generated at Fri Mar 14 10:07:17 2025 by rpki-client