$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/40cc30de-d6b0-3ee6-8367-33e297a46642.roa File: 40cc30de-d6b0-3ee6-8367-33e297a46642.roa (raw, json) Hash identifier: MHJDRpsPzla8vmX+vCuYMfJxJQabXUG5t4g7lKjpRE0= Subject key identifier: 9A:E2:B2:EF:AE:96:30:D6:B8:F5:76:D6:4B:23:A5:AC:56:EE:B4:8E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BCF8E7529F68193A48880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/40cc30de-d6b0-3ee6-8367-33e297a46642.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.163.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:cf:8e:75:29:f6:81:93:a4:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=c078b66a-52b2-4532-bbab-9181fdf476f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:eb:0a:0f:d7:c2:b9:b0:34:f6:0e:ac:06:89: 89:de:58:6f:2d:88:1c:70:29:77:11:5c:ef:b6:64: 19:bc:78:a5:bb:58:4c:3b:aa:b7:7b:04:ec:83:32: d7:35:4a:30:dc:78:e7:b1:16:b2:4d:41:03:4c:24: f4:37:b1:6a:c5:ed:5e:4d:e1:36:c5:93:e0:39:34: 26:06:f4:9a:de:c1:7c:0d:59:2d:73:36:86:33:88: 38:fb:7c:e6:82:71:9f:7d:07:c2:da:e7:07:6f:f7: 20:e2:63:43:f4:61:1d:ea:5a:38:ad:c3:5d:69:ca: 90:e2:ee:32:33:27:6e:43:35:35:68:ff:66:e7:8c: 30:22:da:f8:9e:84:8b:24:70:17:00:0c:10:09:eb: 9c:ba:1f:c8:ba:7f:8a:7d:80:a1:59:0e:f7:01:a4: 03:57:a8:b2:d5:99:be:bc:83:c5:50:70:77:c5:da: 8c:44:2b:90:7d:e7:8d:46:7c:d9:e1:52:5b:67:29: ac:2d:09:4a:a7:40:37:bc:67:28:fd:bf:dc:6a:1d: 5d:c3:f8:8b:a8:b0:70:ed:1d:ea:56:a9:91:ca:9d: c2:37:28:41:b5:91:1f:cc:8a:58:48:34:9d:80:a5: 79:cb:7c:c6:bf:c0:24:83:79:68:5d:52:35:d7:d6: 14:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E2:B2:EF:AE:96:30:D6:B8:F5:76:D6:4B:23:A5:AC:56:EE:B4:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/40cc30de-d6b0-3ee6-8367-33e297a46642.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.163.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:59:33:2f:7e:07:85:6e:a2:e2:08:84:a4:32:fe:50:7e:fa: 45:de:1f:d3:0e:1a:29:ab:da:72:1f:43:14:4b:82:f5:4e:ea: 6d:cb:35:28:34:db:27:01:e9:cf:5d:5b:85:c6:c1:1a:f0:68: 98:6c:a2:bb:3a:f0:cd:e8:22:5d:06:e5:6d:c6:53:f8:74:23: f0:c3:ab:fa:dc:50:b9:49:c6:3e:77:a6:e3:7f:e8:c9:fb:72: 62:aa:cd:b3:94:7c:94:4a:25:db:3b:d8:87:4a:0f:2a:72:28: 91:e0:43:bd:87:cb:e9:87:9f:cc:88:0d:31:3b:d5:08:34:e3: 4e:c1:4b:25:61:fe:68:0f:03:e3:20:4a:b4:62:89:82:8e:17: 7d:26:4d:a1:9d:e0:66:64:70:d5:88:29:53:1e:6f:51:61:68: 40:46:45:4b:e0:fc:df:9b:c4:4d:05:ae:3e:61:fc:8a:bf:38: 08:60:f2:8d:ed:4f:01:27:78:d2:80:1e:13:69:85:84:2b:41: 12:7e:32:50:16:37:d2:19:7c:cb:3b:98:70:52:60:33:ab:09: d0:a2:a0:9e:6c:28:0e:b2:35:38:e7:ef:ae:eb:7c:62:d7:d9: cd:74:b0:6a:28:79:b0:21:e2:ec:40:56:eb:fe:17:59:4b:39: 5c:2f:34:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8+OdSn2gZOkiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YzA3OGI2NmEtNTJiMi00NTMyLWJiYWItOTE4MWZkZjQ3NmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlusKD9fCubA09g6sBomJ3lhvLYgccCl3EVzv tmQZvHilu1hMO6q3ewTsgzLXNUow3HjnsRayTUEDTCT0N7Fqxe1eTeE2xZPgOTQm BvSa3sF8DVktczaGM4g4+3zmgnGffQfC2ucHb/cg4mND9GEd6lo4rcNdacqQ4u4y MyduQzU1aP9m54wwItr4noSLJHAXAAwQCeucuh/Iun+KfYChWQ73AaQDV6iy1Zm+ vIPFUHB3xdqMRCuQfeeNRnzZ4VJbZymsLQlKp0A3vGco/b/cah1dw/iLqLBw7R3q VqmRyp3CNyhBtZEfzIpYSDSdgKV5y3zGv8Akg3loXVI119YUZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrisu+uljDWuPV21ksjpaxW7rSOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDBjYzMwZGUtZDZiMC0z ZWU2LTgzNjctMzNlMjk3YTQ2NjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGIqNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVZMy9+B4VuouIIhKQy/lB++kXeH9MOGimr2nIfQxRLgvVO6m3LNSg0 2ycB6c9dW4XGwRrwaJhsors68M3oIl0G5W3GU/h0I/DDq/rcULlJxj53puN/6Mn7 cmKqzbOUfJRKJds72IdKDypyKJHgQ72Hy+mHn8yIDTE71Qg0407BSyVh/mgPA+Mg SrRiiYKOF30mTaGd4GZkcNWIKVMeb1FhaEBGRUvg/N+bxE0Frj5h/Iq/OAhg8o3t TwEneNKAHhNphYQrQRJ+MlAWN9IZfMs7mHBSYDOrCdCioJ5sKA6yNTjn767rfGLX 2c10sGooebAh4uxAVuv+F1lLOVwvNGo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:03:59 2025 by rpki-client