$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5aed7b40-c545-3782-b870-971b4f8dbd28.roa File: 5aed7b40-c545-3782-b870-971b4f8dbd28.roa (raw, json) Hash identifier: bdw3uLSoSa1kOIn5j8490udEc8S2wATt3GtxTsjvrCo= Subject key identifier: 74:DC:3C:4B:08:0F:FE:DB:C5:4F:5F:44:E0:9A:BA:39:FC:1C:F9:C3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C1E8F296398434BB29980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5aed7b40-c545-3782-b870-971b4f8dbd28.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.176.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:1e:8f:29:63:98:43:4b:b2:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=60cfb88d-6e03-4dcc-a10e-92fd4f22bfcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ec:7f:a4:f8:84:74:65:32:ff:c0:11:56:be: 8e:fb:49:75:d8:7c:8a:07:42:9b:e4:9b:70:5c:a5: ec:94:cb:d4:21:88:11:a5:73:3c:ef:1b:ae:19:86: 90:c9:5a:1a:a2:a3:49:79:d3:7d:0b:35:69:c1:ab: 74:88:51:08:52:19:55:55:89:5c:8c:fc:92:3a:5c: 06:a2:3e:73:cd:db:ea:1e:ed:ee:c8:38:e8:ad:72: 9e:b0:7c:a4:24:dc:84:8b:bd:d8:2e:13:ea:ab:a5: a0:e3:cd:e7:fb:dc:d3:ae:54:48:ca:96:e2:62:18: be:de:18:32:28:24:25:97:ae:25:aa:c2:fc:81:1f: c1:df:5d:48:a6:19:d3:3c:22:5d:78:19:f5:8e:af: c0:89:f0:ad:ad:dd:26:89:38:f1:68:4c:d6:2a:65: 26:53:ce:5f:c1:8f:3f:1a:7d:53:00:cc:08:cf:34: ad:14:38:53:09:3e:3a:bc:c9:66:ab:39:5d:f4:9a: c6:cc:ea:db:fc:07:51:e8:46:84:7d:38:ce:09:87: b4:13:3d:19:45:f6:40:0d:01:d2:26:c8:cf:ac:ae: 72:3b:a6:fa:21:93:92:15:b9:97:6d:5b:f5:a5:3f: b1:67:9a:5f:af:4b:ff:f5:53:a8:67:26:3c:41:eb: 30:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:DC:3C:4B:08:0F:FE:DB:C5:4F:5F:44:E0:9A:BA:39:FC:1C:F9:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5aed7b40-c545-3782-b870-971b4f8dbd28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.176.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:17:c4:48:0c:1f:9e:f6:46:a0:dd:98:98:9c:19:f8:55:8d: e6:b8:64:d6:b3:1a:74:cd:94:8d:0f:3f:30:e2:84:ff:6e:7d: 03:af:61:64:92:ca:9a:b8:d1:9e:b5:d2:b1:fd:39:2f:9f:ec: 6b:4f:c7:a7:13:25:b0:04:cb:9b:86:3d:47:5b:41:5a:61:bc: e4:78:38:78:cc:e7:b9:b0:b3:f3:c2:90:25:cf:9a:f0:97:0f: e8:16:33:b2:46:b6:ab:46:38:00:2e:d6:fe:f6:d5:b5:40:99: bf:d6:56:f3:c2:2b:be:3d:0f:cb:27:f7:fb:00:e9:da:7e:53: c3:b1:19:87:26:ef:d8:19:f4:2c:13:45:7d:97:8a:40:42:1f: de:fe:58:61:1a:3d:3b:43:9e:a0:5b:32:8d:d5:15:7b:9f:fd: 91:2d:f8:f1:9a:f8:02:46:b3:6f:cd:fa:3c:3a:65:cb:06:19: 84:f4:ee:79:e5:0e:5e:4d:45:70:7d:17:7a:4c:df:c9:dd:6b: 4f:35:41:97:69:5a:aa:7b:cf:9a:0d:b6:56:43:e9:03:33:aa: 80:7f:a4:a1:74:6e:e1:c1:b4:7d:a7:6b:4c:bc:d3:3d:94:37: 28:0d:d2:72:d9:34:60:d7:58:37:1a:a8:46:f1:74:c4:91:77: 27:34:4a:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITB6PKWOYQ0uymYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NjBjZmI4OGQtNmUwMy00ZGNjLWExMGUtOTJmZDRmMjJiZmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOx/pPiEdGUy/8ARVr6O+0l12HyKB0Kb5Jtw XKXslMvUIYgRpXM87xuuGYaQyVoaoqNJedN9CzVpwat0iFEIUhlVVYlcjPySOlwG oj5zzdvqHu3uyDjorXKesHykJNyEi73YLhPqq6Wg483n+9zTrlRIypbiYhi+3hgy KCQll64lqsL8gR/B311IphnTPCJdeBn1jq/AifCtrd0miTjxaEzWKmUmU85fwY8/ Gn1TAMwIzzStFDhTCT46vMlmqzld9JrGzOrb/AdR6EaEfTjOCYe0Ez0ZRfZADQHS JsjPrK5yO6b6IZOSFbmXbVv1pT+xZ5pfr0v/9VOoZyY8QeswqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTcPEsID/7bxU9fROCaujn8HPnDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWFlZDdiNDAtYzU0NS0z NzgyLWI4NzAtOTcxYjRmOGRiZDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIrDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwXxEgMH572RqDdmJicGfhVjea4ZNazGnTNlI0PPzDihP9ufQOvYWSS ypq40Z610rH9OS+f7GtPx6cTJbAEy5uGPUdbQVphvOR4OHjM57mws/PCkCXPmvCX D+gWM7JGtqtGOAAu1v721bVAmb/WVvPCK749D8sn9/sA6dp+U8OxGYcm79gZ9CwT RX2XikBCH97+WGEaPTtDnqBbMo3VFXuf/ZEt+PGa+AJGs2/N+jw6ZcsGGYT07nnl Dl5NRXB9F3pM38nda081QZdpWqp7z5oNtlZD6QMzqoB/pKF0buHBtH2na0y80z2U NygN0nLZNGDXWDcaqEbxdMSRdyc0SlM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:12 2025 by rpki-client