$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ff4225f-b763-3763-95f8-5a6dc3486459.roa File: 3ff4225f-b763-3763-95f8-5a6dc3486459.roa (raw, json) Hash identifier: 0ZGhRpzY3Gbs16quE6raBjvUDS4eq2HCQNno9Smneq8= Subject key identifier: 55:D0:24:14:2F:E4:0D:02:B4:9B:D8:EF:94:42:90:E3:98:07:A9:67 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BBC7053862EC61F2FE700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ff4225f-b763-3763-95f8-5a6dc3486459.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 34.152.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:bc:70:53:86:2e:c6:1f:2f:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=5a81c7b0-1d69-4075-b22c-72b15407c221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:53:9b:51:ea:a7:ef:00:49:f8:b0:3e:70:59: 99:c2:11:7b:d1:36:01:ea:8d:17:90:d2:78:85:92: 2d:2c:72:d7:d0:77:bd:98:4c:75:c5:b0:93:db:3f: 32:c4:b3:12:fb:db:48:40:0d:ab:67:e4:c4:e6:ac: a8:c9:29:71:56:58:75:c2:ff:fa:88:11:1f:28:99: 96:8f:1c:aa:dd:eb:05:01:6f:20:76:04:57:ed:14: 88:94:a2:c8:ef:94:95:b4:77:88:6a:5c:62:2f:59: ad:92:a8:fd:aa:97:cb:a9:0b:51:d4:68:25:bd:3b: 59:ca:04:d9:4d:08:8d:74:6b:16:53:38:68:c3:ef: 55:47:0f:1a:89:64:65:00:e1:5e:23:60:7a:75:a0: 7a:37:a7:bc:06:24:22:19:7a:39:8f:c8:ca:05:40: f8:d7:f0:92:b5:78:bf:01:5f:bb:67:6f:63:eb:f3: 06:af:59:7f:eb:ac:1d:95:73:e0:24:4b:61:52:6e: 2f:65:f8:88:71:e1:9e:6c:ee:f6:62:bf:7a:cd:e5: 4f:c8:b1:1c:d1:47:65:f7:d6:06:18:52:68:79:b7: 6b:3b:21:e4:f4:d9:47:aa:d4:b0:11:a3:5c:8e:95: 0c:db:57:c4:c2:2f:09:16:10:fe:33:80:55:3f:82: a6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D0:24:14:2F:E4:0D:02:B4:9B:D8:EF:94:42:90:E3:98:07:A9:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ff4225f-b763-3763-95f8-5a6dc3486459.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.152.0.0/13 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:e0:75:50:05:79:a0:9b:d7:e8:04:72:73:e5:6a:90:9e:ef: 08:84:c7:d0:f5:4b:05:4c:fe:97:90:4d:5f:87:a5:e2:32:32: ed:a5:dd:ff:8a:0c:41:dd:90:fb:48:49:98:3a:46:27:e1:87: ab:00:bc:8b:c9:66:94:01:0a:26:be:68:88:c6:c6:d2:17:f7: 93:b0:c7:84:0e:f3:89:50:21:9a:86:a8:22:d7:48:8a:de:87: 97:42:db:c1:51:81:94:5b:80:b9:c2:b8:6b:35:26:c9:36:46: 74:3a:8a:df:4c:0a:ae:0b:36:55:be:f3:51:fe:ff:32:62:a5: 17:d6:b3:dc:f8:79:a2:60:a9:d9:94:75:c2:70:bb:e2:c9:ce: bc:36:0a:47:a2:fb:8c:6c:76:5c:b0:ff:84:29:1f:1b:2b:2a: cc:63:0d:a4:29:b2:7a:7a:54:72:71:f2:a8:11:65:07:e4:7c: f1:85:83:3e:f4:bb:39:0a:ea:0c:50:9a:d8:0d:26:ec:35:07: 62:46:cc:b2:4d:b4:92:5a:5b:d2:dc:be:fe:e7:12:f0:47:19: b9:ba:32:e7:54:22:fd:bb:07:cd:9b:06:84:aa:fe:1c:db:dc: 26:7e:9f:b0:34:1b:b4:d0:13:eb:39:0c:d8:bb:e0:e0:e4:f6: 30:69:e5:19 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjIS7xwU4Yuxh8v5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NWE4MWM3YjAtMWQ2OS00MDc1LWIyMmMtNzJiMTU0MDdjMjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVObUeqn7wBJ+LA+cFmZwhF70TYB6o0XkNJ4 hZItLHLX0He9mEx1xbCT2z8yxLMS+9tIQA2rZ+TE5qyoySlxVlh1wv/6iBEfKJmW jxyq3esFAW8gdgRX7RSIlKLI75SVtHeIalxiL1mtkqj9qpfLqQtR1GglvTtZygTZ TQiNdGsWUzhow+9VRw8aiWRlAOFeI2B6daB6N6e8BiQiGXo5j8jKBUD41/CStXi/ AV+7Z29j6/MGr1l/66wdlXPgJEthUm4vZfiIceGebO72Yr96zeVPyLEc0Udl99YG GFJoebdrOyHk9NlHqtSwEaNcjpUM21fEwi8JFhD+M4BVP4KmVQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFXQJBQv5A0CtJvY75RCkOOYB6lnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2ZmNDIyNWYtYjc2My0z NzYzLTk1ZjgtNWE2ZGMzNDg2NDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDIpgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAhOB1UAV5oJvX6ARyc+VqkJ7vCITH0PVLBUz+l5BNX4el4jIy7aXd/4oM Qd2Q+0hJmDpGJ+GHqwC8i8lmlAEKJr5oiMbG0hf3k7DHhA7ziVAhmoaoItdIit6H l0LbwVGBlFuAucK4azUmyTZGdDqK30wKrgs2Vb7zUf7/MmKlF9az3Ph5omCp2ZR1 wnC74snOvDYKR6L7jGx2XLD/hCkfGysqzGMNpCmyenpUcnHyqBFlB+R88YWDPvS7 OQrqDFCa2A0m7DUHYkbMsk20klpb0ty+/ucS8EcZuboy51Qi/bsHzZsGhKr+HNvc Jn6fsDQbtNAT6zkM2Lvg4OT2MGnlGQ== -----END CERTIFICATE-----Generated at Fri Apr 4 09:03:46 2025 by rpki-client