$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/574bcfe5-1be8-3d1c-961d-e76c84f05148.roa File: 574bcfe5-1be8-3d1c-961d-e76c84f05148.roa (raw, json) Hash identifier: 1XjxpuUoiMnV9Ewfmew0JWpyFun80Ic/Oq6GvLy9kqs= Subject key identifier: 14:92:2B:A5:1D:CD:1B:36:20:07:89:71:F1:C9:93:08:67:E3:0B:56 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BEE9A34189B83E430ED80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/574bcfe5-1be8-3d1c-961d-e76c84f05148.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.124.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:ee:9a:34:18:9b:83:e4:30:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=70ee3fd5-058b-47f8-91ff-0344cf4d5b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:80:0f:75:ac:d8:40:c7:33:63:ea:2d:02:2b: de:a2:2b:5d:a4:52:ef:a4:66:74:0e:91:3c:0d:e4: e9:29:b1:26:c6:46:ed:8f:40:23:e2:8c:cd:e9:7d: 43:33:b1:92:58:96:f1:ef:28:50:16:8f:9b:10:19: fe:83:78:15:17:10:f0:a5:35:c9:3d:70:53:b9:75: d7:5e:e8:d8:b9:95:cd:37:32:6c:19:13:74:e9:0f: b4:15:be:59:46:ce:b9:1f:c8:d4:3a:b7:3c:06:f0: 07:69:f3:53:3d:ee:31:d5:c5:58:39:1a:92:5b:90: 88:fe:b6:a8:46:1d:47:63:71:ec:17:0d:72:f6:62: 89:e0:68:39:c1:12:70:e3:d2:89:61:bb:b6:8e:cf: 61:10:bf:81:6b:89:59:f5:03:09:dc:78:1e:56:64: 44:e5:3d:82:f5:7d:62:f6:e5:82:1e:f3:0e:c1:f7: 0c:c8:0f:09:40:46:08:19:66:f6:29:6a:0d:cc:54: 8e:64:b4:92:c0:7f:66:5e:ee:ad:46:aa:f8:39:df: a8:fc:5f:a6:69:91:fb:c0:fa:6b:df:8a:2a:8f:1c: f2:a7:e1:3a:0e:ef:5d:8a:e9:5d:68:cf:f4:3a:74: 33:e3:d3:81:c6:2a:59:8e:36:78:05:ba:24:c2:39: d8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:92:2B:A5:1D:CD:1B:36:20:07:89:71:F1:C9:93:08:67:E3:0B:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/574bcfe5-1be8-3d1c-961d-e76c84f05148.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.124.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:60:77:aa:a6:02:23:94:20:47:a2:61:a2:07:c9:da:29:30: 9e:cf:cc:cb:af:53:80:4a:12:b4:9c:fe:38:3a:da:54:62:b9: 16:96:ca:f3:39:eb:99:c3:4e:63:1b:1e:cf:8b:a0:18:64:00: df:4d:12:43:9b:87:cb:0e:6a:53:9f:a9:8b:16:57:fb:03:6e: 13:21:42:c3:de:8c:97:bf:55:c7:19:ea:93:4f:48:12:a5:60: 77:f8:87:a2:5e:79:b6:a5:2b:fb:2d:95:7a:db:55:b6:d9:bf: 16:4e:fb:da:a0:22:46:6a:16:44:95:5f:c6:2b:d5:15:6c:4b: 0b:72:e7:f7:9c:c7:48:3f:56:c7:97:35:95:85:1a:9c:a2:49: 55:3b:05:72:bb:32:5c:96:29:7a:b5:1e:6b:bc:69:4a:e3:4b: 16:1b:95:5e:60:9c:95:02:31:51:9b:81:de:30:2f:2b:ef:8a: c5:5d:fe:4d:d1:72:e6:cd:36:54:1a:ad:ac:90:0e:1c:09:04: 30:c9:19:40:54:6a:03:ee:de:44:4c:45:ba:bb:40:4c:c2:c2: 71:cb:9a:be:c1:92:a4:1d:d8:18:84:aa:b6:bb:21:3d:ca:fb: f5:3b:9c:84:c2:c7:de:75:7a:08:c0:57:68:4e:c8:82:73:b0: fe:86:16:25 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjIS+6aNBibg+Qw7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NzBlZTNmZDUtMDU4Yi00N2Y4LTkxZmYtMDM0NGNmNGQ1YjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4APdazYQMczY+otAiveoitdpFLvpGZ0DpE8 DeTpKbEmxkbtj0Aj4ozN6X1DM7GSWJbx7yhQFo+bEBn+g3gVFxDwpTXJPXBTuXXX XujYuZXNNzJsGRN06Q+0Fb5ZRs65H8jUOrc8BvAHafNTPe4x1cVYORqSW5CI/rao Rh1HY3HsFw1y9mKJ4Gg5wRJw49KJYbu2js9hEL+Ba4lZ9QMJ3HgeVmRE5T2C9X1i 9uWCHvMOwfcMyA8JQEYIGWb2KWoNzFSOZLSSwH9mXu6tRqr4Od+o/F+maZH7wPpr 34oqjxzyp+E6Du9diuldaM/0OnQz49OBxipZjjZ4BbokwjnYpQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBSSK6UdzRs2IAeJcfHJkwhn4wtWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTc0YmNmZTUtMWJlOC0z ZDFjLTk2MWQtZTc2Yzg0ZjA1MTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCInwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAdmB3qqYCI5QgR6JhogfJ2ikwns/My69TgEoStJz+ODraVGK5FpbK8znr mcNOYxsez4ugGGQA300SQ5uHyw5qU5+pixZX+wNuEyFCw96Ml79Vxxnqk09IEqVg d/iHol55tqUr+y2VettVttm/Fk772qAiRmoWRJVfxivVFWxLC3Ln95zHSD9Wx5c1 lYUanKJJVTsFcrsyXJYperUea7xpSuNLFhuVXmCclQIxUZuB3jAvK++KxV3+TdFy 5s02VBqtrJAOHAkEMMkZQFRqA+7eRExFurtATMLCccuavsGSpB3YGISqtrshPcr7 9TuchMLH3nV6CMBXaE7IgnOw/oYWJQ== -----END CERTIFICATE-----Generated at Fri Apr 4 20:59:57 2025 by rpki-client