$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/37aa20a3-d298-328e-a4e1-d6a27654c657.roa File: 37aa20a3-d298-328e-a4e1-d6a27654c657.roa (raw, json) Hash identifier: 9NshIvAofK2pCYTzZxxOYsmJnoOJoxA5OH2/+IOKYw8= Subject key identifier: 59:B2:FF:D5:4C:47:E0:94:FF:26:0C:69:27:42:41:46:CB:A1:C3:B7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BFFEF47A725ECFC948380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/37aa20a3-d298-328e-a4e1-d6a27654c657.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.173.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:ff:ef:47:a7:25:ec:fc:94:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=4ae1e567-aeb1-4907-b45a-7533c774aab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:10:90:46:39:aa:32:92:83:a4:ee:c4:7c:f0: b9:20:47:d8:cd:29:8f:eb:32:89:08:95:6f:5c:61: dc:87:64:bd:fd:33:2e:8e:fa:b5:e3:57:c7:ec:ce: e5:7d:82:e2:bd:22:69:62:72:50:ef:e5:ef:2c:eb: be:6c:fc:71:0d:0c:fd:9d:d5:11:10:b9:78:17:d8: 0d:39:f6:06:d8:87:95:4d:96:b0:82:8c:79:c0:03: 03:7f:78:d2:a7:40:68:3e:53:25:82:95:b4:e9:f8: ce:3d:2e:b6:5f:3a:d0:41:0a:c5:19:ff:50:2a:43: 1a:12:13:84:20:86:35:38:10:a7:65:78:9a:d9:65: b2:81:96:11:e3:1e:27:49:95:06:5d:ae:a9:1c:b9: 04:5a:da:46:c9:e4:aa:05:3c:6a:f1:34:e5:8d:2a: ce:06:01:b8:c2:b1:72:d5:ab:e7:17:63:10:d1:dd: 83:f5:8d:18:5d:06:10:b6:bc:82:c0:0e:dd:83:36: f3:96:60:e9:84:ec:98:31:6a:8a:eb:c0:57:84:56: 3e:60:0a:ff:44:34:b7:43:cc:1d:5d:74:0d:5d:64: 73:a9:ae:df:8f:5d:17:31:fd:97:d3:0f:34:87:5c: e4:d7:9a:b6:5a:62:41:56:e0:ad:be:da:2a:5b:22: c0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B2:FF:D5:4C:47:E0:94:FF:26:0C:69:27:42:41:46:CB:A1:C3:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/37aa20a3-d298-328e-a4e1-d6a27654c657.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.173.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:93:9d:26:c0:f0:bd:bb:89:4d:56:c5:e3:f3:da:5d:8b:73: 37:6f:2a:65:ea:c5:59:2b:73:85:06:3e:a2:97:8d:4d:1f:bc: 86:ba:99:86:ec:1b:8b:39:fa:d9:5f:11:a0:3f:64:c5:32:98: 0b:5a:b2:bf:98:94:7c:b3:56:5a:f6:87:d0:62:26:ba:39:94: 72:f6:17:01:cc:89:af:18:49:1c:a1:24:2b:e2:a6:65:f7:dd: 8f:93:34:d0:71:c5:82:a9:d5:0e:d0:be:08:c9:0a:d5:9c:94: f4:0a:24:ea:2a:d9:a8:15:50:56:eb:54:c4:0f:a5:85:fc:98: c3:6c:50:39:b3:5d:b3:17:7d:0f:0d:20:04:a9:5e:d4:00:53: cf:e0:23:0f:13:ce:ae:98:19:a1:57:04:c1:ff:91:e3:45:d1: 0f:8c:31:48:8d:f3:a4:ee:f1:72:cd:6d:45:21:63:9b:2a:53: 1a:65:05:aa:42:27:8c:7e:28:2d:05:19:f7:d9:04:80:ee:79: 15:57:bb:bc:e7:91:b0:9f:02:6b:76:58:8e:06:98:1d:e6:33: dd:24:22:d1:53:e4:ed:5a:1f:e9:0a:89:e9:8e:84:ac:f6:75: eb:54:d8:2c:0c:e0:8a:58:fe:57:a7:12:88:a2:ba:03:25:e8: 7b:04:0d:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS//vR6cl7PyUg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NGFlMWU1NjctYWViMS00OTA3LWI0NWEtNzUzM2M3NzRhYWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhCQRjmqMpKDpO7EfPC5IEfYzSmP6zKJCJVv XGHch2S9/TMujvq141fH7M7lfYLivSJpYnJQ7+XvLOu+bPxxDQz9ndURELl4F9gN OfYG2IeVTZawgox5wAMDf3jSp0BoPlMlgpW06fjOPS62XzrQQQrFGf9QKkMaEhOE IIY1OBCnZXia2WWygZYR4x4nSZUGXa6pHLkEWtpGyeSqBTxq8TTljSrOBgG4wrFy 1avnF2MQ0d2D9Y0YXQYQtryCwA7dgzbzlmDphOyYMWqK68BXhFY+YAr/RDS3Q8wd XXQNXWRzqa7fj10XMf2X0w80h1zk15q2WmJBVuCtvtoqWyLA0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmy/9VMR+CU/yYMaSdCQUbLocO3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzdhYTIwYTMtZDI5OC0z MjhlLWE0ZTEtZDZhMjc2NTRjNjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIq0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyTnSbA8L27iU1WxePz2l2LczdvKmXqxVkrc4UGPqKXjU0fvIa6mYbs G4s5+tlfEaA/ZMUymAtasr+YlHyzVlr2h9BiJro5lHL2FwHMia8YSRyhJCvipmX3 3Y+TNNBxxYKp1Q7QvgjJCtWclPQKJOoq2agVUFbrVMQPpYX8mMNsUDmzXbMXfQ8N IASpXtQAU8/gIw8Tzq6YGaFXBMH/keNF0Q+MMUiN86Tu8XLNbUUhY5sqUxplBapC J4x+KC0FGffZBIDueRVXu7znkbCfAmt2WI4GmB3mM90kItFT5O1aH+kKiemOhKz2 detU2CwM4IpY/lenEoiiugMl6HsEDfw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:53 2025 by rpki-client