$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/37a1fb14-854d-30c0-a525-97ae57eb2931.roa File: 37a1fb14-854d-30c0-a525-97ae57eb2931.roa (raw, json) Hash identifier: dIxOUNShP6CnuSm7VR8OYYiNqWjr1lF1Vgc0rgT4qDY= Subject key identifier: 53:84:36:16:E3:44:8C:E1:B8:CD:2C:8B:0D:8B:52:6E:A4:16:40:D5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C582253036D083B5DE1E3080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/37a1fb14-854d-30c0-a525-97ae57eb2931.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 34.108.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:25:30:36:d0:83:b5:de:1e:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=50ac89d6-4a9c-48c9-b973-0379fdd1e596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:58:f5:b0:9e:7f:a9:24:09:3a:99:a4:50:63: 65:c6:33:26:de:34:ea:15:a4:47:f7:a5:bf:ac:a8: bc:26:67:d3:ba:d4:29:54:af:06:02:9c:4c:9c:f1: 4f:74:99:30:bf:9a:a6:a0:27:d9:d5:c4:fb:11:3f: 53:58:8c:5f:92:fc:d0:a4:a9:53:1a:24:52:da:a5: 36:fd:88:7f:c3:c6:9c:21:66:2f:4e:6c:d7:24:3e: 68:58:6a:3b:17:32:80:4d:c9:8b:9e:40:fd:ba:05: fa:0f:1e:e2:e2:f7:28:43:46:ae:df:f5:6c:65:98: 26:a6:2c:39:43:c7:e5:db:3d:5f:10:da:93:22:96: d4:c4:96:e9:66:df:e7:1e:0a:2f:95:4c:8c:26:7d: 4f:c5:3a:7e:45:fe:0e:dd:14:f7:67:e4:bf:00:1f: 50:b2:32:12:f1:61:75:56:1b:11:e2:93:20:f9:f6: a3:3c:8d:d1:94:d2:5a:c2:7a:93:f6:dc:34:f1:61: 8a:94:9a:c4:27:23:35:bf:0f:0f:80:f2:f8:f6:8b: 06:8a:97:1e:15:06:81:ab:48:93:cf:74:f5:f8:64: 8d:17:35:5a:6d:c5:33:3c:33:3b:71:16:e3:67:f0: e4:56:19:4b:57:3b:cc:ab:aa:15:6e:66:d6:ca:fe: 2a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:84:36:16:E3:44:8C:E1:B8:CD:2C:8B:0D:8B:52:6E:A4:16:40:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/37a1fb14-854d-30c0-a525-97ae57eb2931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.108.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:4b:bc:61:47:c1:2d:51:3c:91:a0:c8:e7:40:14:9e:b7:90: f7:55:18:68:0e:22:2c:cc:fe:53:2d:fb:9c:aa:5b:98:5a:3d: 2a:1a:79:9a:8c:78:e8:89:02:52:c0:a1:d6:84:27:27:7b:44: 5b:40:05:55:a0:0a:ee:53:28:a8:3d:7f:a9:c3:1c:90:a4:05: d0:0c:97:ad:45:1e:da:af:b6:0f:10:d1:9a:7e:0d:10:34:41: f8:1f:cb:aa:55:6e:70:67:3a:a2:b5:56:91:f1:ba:f1:c6:dc: 39:64:59:65:87:e7:82:9d:a2:e7:0f:15:1d:a5:4b:d6:d1:96: b7:fa:a6:50:46:34:03:10:62:83:2f:46:aa:05:b3:43:79:1e: 10:91:b2:73:dc:8a:52:ff:e8:ad:fd:a0:90:55:62:bb:7c:1a: e1:d9:99:45:1f:e2:da:a5:c6:e1:f4:d6:83:a1:06:1e:23:43: 01:30:c1:76:51:1d:76:c7:3e:08:b6:44:2a:e1:ad:e9:30:e4: 6b:a7:a7:b0:fe:f4:87:19:ee:39:d1:0d:4c:a9:cc:86:8c:f2: 43:28:51:d4:1c:c9:af:ea:98:91:5f:6e:a3:8f:b7:0b:20:a1: 98:5e:7b:d1:74:9a:a5:20:d3:0f:e7:50:a9:3c:69:d7:64:79: b7:cb:dd:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgiUwNtCDtd4eMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NTBhYzg5ZDYtNGE5Yy00OGM5LWI5NzMtMDM3OWZkZDFlNTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVj1sJ5/qSQJOpmkUGNlxjMm3jTqFaRH96W/ rKi8JmfTutQpVK8GApxMnPFPdJkwv5qmoCfZ1cT7ET9TWIxfkvzQpKlTGiRS2qU2 /Yh/w8acIWYvTmzXJD5oWGo7FzKATcmLnkD9ugX6Dx7i4vcoQ0au3/VsZZgmpiw5 Q8fl2z1fENqTIpbUxJbpZt/nHgovlUyMJn1PxTp+Rf4O3RT3Z+S/AB9QsjIS8WF1 VhsR4pMg+fajPI3RlNJawnqT9tw08WGKlJrEJyM1vw8PgPL49osGipceFQaBq0iT z3T1+GSNFzVabcUzPDM7cRbjZ/DkVhlLVzvMq6oVbmbWyv4q0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOENhbjRIzhuM0siw2LUm6kFkDVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzdhMWZiMTQtODU0ZC0z MGMwLWE1MjUtOTdhZTU3ZWIyOTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtLvGFHwS1RPJGgyOdAFJ63kPdVGGgOIizM/lMt+5yqW5haPSoaeZqM eOiJAlLAodaEJyd7RFtABVWgCu5TKKg9f6nDHJCkBdAMl61FHtqvtg8Q0Zp+DRA0 Qfgfy6pVbnBnOqK1VpHxuvHG3DlkWWWH54KdoucPFR2lS9bRlrf6plBGNAMQYoMv RqoFs0N5HhCRsnPcilL/6K39oJBVYrt8GuHZmUUf4tqlxuH01oOhBh4jQwEwwXZR HXbHPgi2RCrhrekw5Gunp7D+9IcZ7jnRDUypzIaM8kMoUdQcya/qmJFfbqOPtwsg oZhee9F0mqUg0w/nUKk8addkebfL3aA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:34 2025 by rpki-client