$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3196f3c2-e23b-367a-a9bf-96a1f1c497ab.roa File: 3196f3c2-e23b-367a-a9bf-96a1f1c497ab.roa (raw, json) Hash identifier: Tdhbfh3km5Hsh4tBAdpcMm61EWwjvW+u9zLtIYbjKvM= Subject key identifier: 4A:14:45:02:DC:73:DD:C7:39:5A:E7:8A:62:1E:5B:C6:29:8B:E4:33 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C214CA49B803DFA3FB100 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3196f3c2-e23b-367a-a9bf-96a1f1c497ab.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.34.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:21:4c:a4:9b:80:3d:fa:3f:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=81576cff-4e8a-4abc-aade-55a7f131c980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9d:7c:2c:4b:c4:96:9f:f4:ec:73:c3:a8:aa: 22:99:66:0f:fe:a2:5d:13:17:35:c5:3e:87:84:d7: ab:ac:98:bd:10:42:0c:93:83:b2:8e:0e:11:c6:d4: 72:bf:be:6c:57:8c:9d:7e:77:3a:58:43:b7:9c:6c: e9:8b:6d:9b:b1:ee:3c:93:a0:2c:67:33:0f:ca:0b: 2e:d5:a5:04:f7:5f:4b:f6:b7:9d:5b:67:b7:62:e5: 1a:87:3f:da:7a:5d:5f:47:06:1e:5c:c1:30:81:6d: f2:1a:b2:e0:1f:5c:c7:17:99:79:7f:e0:f7:46:36: df:5e:0a:ac:ee:c7:dd:72:02:29:43:de:5b:ab:1f: a8:4e:b5:76:13:d0:55:02:e4:b0:9d:ff:10:2a:4c: 38:f6:fb:94:19:dc:d6:19:e7:42:95:c6:0d:cf:78: 4a:7c:45:aa:c4:52:69:75:a3:e1:3b:c4:11:72:ae: 4f:04:cc:c3:2f:aa:e4:ef:b7:82:d3:63:d2:da:48: 0a:85:04:a9:bf:60:28:d4:d5:a3:dd:16:e8:52:82: 5c:8c:c2:5c:58:71:1a:b5:cf:3a:39:2e:12:e0:ab: 5e:93:56:0a:b0:51:80:6d:5a:31:81:6c:34:b0:d4: 39:5e:79:a1:fb:bf:cf:e6:23:da:30:19:84:99:99: ea:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:14:45:02:DC:73:DD:C7:39:5A:E7:8A:62:1E:5B:C6:29:8B:E4:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3196f3c2-e23b-367a-a9bf-96a1f1c497ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.34.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ee:18:09:d4:24:86:33:ab:33:27:42:b5:d7:0f:5e:8c:a0: bd:c2:a9:31:34:38:97:f7:f1:29:a4:22:f6:c4:29:7d:0e:20: 10:d9:c9:e9:be:ae:ae:fa:63:27:d9:f8:07:85:02:97:9c:37: d3:10:26:0d:1c:1d:0d:75:24:91:e3:37:59:f4:c1:a7:1a:7c: 22:0c:5a:94:0b:91:65:3c:f5:f6:aa:cc:7f:b8:bc:ca:55:07: fb:52:64:f8:e7:c5:26:9f:b2:8e:be:ec:df:a1:dc:3c:4f:92: 63:77:d3:ee:2e:e2:b4:c6:a7:7a:12:2b:bf:a5:34:93:21:a2: 87:e0:44:8a:e0:69:51:3f:ad:00:aa:53:35:e0:1a:fe:63:da: a8:e5:59:ae:b2:f4:71:e7:d2:40:3b:ee:e5:eb:34:c6:76:5a: b5:b9:6c:07:8a:f3:a5:81:2a:33:a6:13:4d:da:7b:1d:34:2d: ba:e3:06:a5:45:c4:69:07:9b:c2:f9:e7:c2:12:cb:51:62:5b: d2:ed:ba:be:c7:f2:11:3d:3d:38:af:f8:af:31:db:4b:44:bf: 88:5e:98:8a:b0:39:ae:c6:8a:e7:75:53:46:9f:55:e6:1d:0e: 56:8d:7c:68:38:c6:cd:13:35:97:fd:05:dd:9e:59:7a:ee:ff: 46:d0:86:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITCFMpJuAPfo/sQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ODE1NzZjZmYtNGU4YS00YWJjLWFhZGUtNTVhN2YxMzFjOTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup18LEvElp/07HPDqKoimWYP/qJdExc1xT6H hNerrJi9EEIMk4Oyjg4RxtRyv75sV4ydfnc6WEO3nGzpi22bse48k6AsZzMPygsu 1aUE919L9redW2e3YuUahz/ael1fRwYeXMEwgW3yGrLgH1zHF5l5f+D3RjbfXgqs 7sfdcgIpQ95bqx+oTrV2E9BVAuSwnf8QKkw49vuUGdzWGedClcYNz3hKfEWqxFJp daPhO8QRcq5PBMzDL6rk77eC02PS2kgKhQSpv2Ao1NWj3RboUoJcjMJcWHEatc86 OS4S4Ktek1YKsFGAbVoxgWw0sNQ5Xnmh+7/P5iPaMBmEmZnq+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoURQLcc93HOVrnimIeW8Ypi+QzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzE5NmYzYzItZTIzYi0z NjdhLWE5YmYtOTZhMWYxYzQ5N2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIiIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPuGAnUJIYzqzMnQrXXD16MoL3CqTE0OJf38SmkIvbEKX0OIBDZyem+ rq76YyfZ+AeFApecN9MQJg0cHQ11JJHjN1n0wacafCIMWpQLkWU89faqzH+4vMpV B/tSZPjnxSafso6+7N+h3DxPkmN30+4u4rTGp3oSK7+lNJMhoofgRIrgaVE/rQCq UzXgGv5j2qjlWa6y9HHn0kA77uXrNMZ2WrW5bAeK86WBKjOmE03aex00LbrjBqVF xGkHm8L558ISy1FiW9Ltur7H8hE9PTiv+K8x20tEv4hemIqwOa7Giud1U0afVeYd DlaNfGg4xs0TNZf9Bd2eWXru/0bQhoM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:12:17 2025 by rpki-client