$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5febbf69-69b9-3a01-9a9a-209d8b943f0b.roa File: 5febbf69-69b9-3a01-9a9a-209d8b943f0b.roa (raw, json) Hash identifier: neEzLJJkDJcxx0nda1daK7kFyM7enmLKk4Gay+U8kdE= Subject key identifier: 08:BD:60:3A:24:52:64:CD:06:D5:1D:31:B7:B0:05:BB:CB:FF:59:9E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BB9D6AA1769121A9F3300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5febbf69-69b9-3a01-9a9a-209d8b943f0b.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.152.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:b9:d6:aa:17:69:12:1a:9f:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=5a1b98f4-dfdc-46c4-ba87-27f8ccfbaa38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:78:59:97:ea:9c:d2:e6:46:1b:8f:f0:64:bd: 06:0e:ff:fd:80:7e:83:7b:e3:13:ed:5e:9f:6b:75: 11:02:f5:06:a0:ff:f6:94:58:bd:4d:ce:bd:62:2e: b3:41:9e:78:3d:d0:21:fe:2a:9c:ca:f6:ce:4d:44: ad:5a:d4:1e:97:bf:63:23:a2:88:21:ef:cc:f0:f9: 0a:58:97:35:45:76:0a:4a:53:53:6e:52:24:1d:40: b3:7f:dc:7c:9a:90:8b:61:4b:6b:78:5a:51:31:66: 0b:b3:2a:51:34:5c:88:e2:4e:0d:98:e4:90:aa:d3: 27:ac:33:75:62:a3:b2:b2:c8:03:fd:af:6c:f4:00: bc:c3:8f:eb:91:77:9c:fe:2b:d3:e4:65:8c:cf:79: fd:13:c1:8c:aa:bb:78:90:d1:ac:67:d6:d7:90:66: f4:80:66:15:d9:b2:e3:3a:81:90:81:4e:8a:50:34: 17:9c:02:6b:bc:df:85:41:3b:7b:6a:94:2c:ab:bf: 00:cb:a5:b7:88:70:94:fa:13:25:41:b6:1b:b4:c7: 01:4e:c9:40:01:f8:f9:3e:dc:c3:de:2c:16:1b:84: 3a:0b:94:60:eb:dc:d4:4f:f9:50:7b:aa:0f:01:71: 32:52:6a:ed:1d:26:8a:b9:e4:1f:11:43:b9:3f:15: b5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BD:60:3A:24:52:64:CD:06:D5:1D:31:B7:B0:05:BB:CB:FF:59:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5febbf69-69b9-3a01-9a9a-209d8b943f0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.152.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:ec:c7:f4:c3:61:ff:2a:ec:bd:18:43:1e:32:7e:4f:30:09: a8:6a:6e:e2:b5:c7:49:04:f4:7c:cb:ba:76:f1:71:3e:ea:bd: 02:9c:b3:0a:99:37:95:b9:c8:d2:44:e4:ed:f3:8e:a2:16:1a: bc:65:80:bd:7d:8e:5a:d6:20:53:77:e5:1a:09:d6:e1:be:db: bf:15:28:24:54:c0:d0:9b:3c:4f:6d:be:0d:fe:5c:a1:09:d8: 7e:ca:e2:a1:ef:81:c1:b1:b2:2e:1c:bc:36:6b:4f:92:d7:85: e6:b1:e2:7b:8c:49:bd:7d:6f:a7:ea:00:22:01:a6:60:fc:05: 56:7a:23:5d:09:e9:c6:03:65:32:40:f4:b9:fd:2d:fa:ee:c9: df:1f:e2:3a:64:ce:ac:a8:d5:9b:77:3d:93:bc:de:8f:a6:81: 54:af:1e:80:e5:ab:3a:df:09:1e:c0:ac:dc:5c:ed:43:25:dc: 0a:61:7f:a0:fb:e4:ed:8a:2d:5e:21:e4:57:22:ba:95:3d:ae: b6:b0:8a:d6:51:7e:53:7e:46:fe:c1:1e:f9:46:8f:aa:7f:d9: 53:2c:48:8e:c9:1d:cb:a5:12:35:24:63:74:62:09:9a:81:cf: 41:98:ce:ab:90:53:15:ca:77:91:cd:79:4c:0e:9d:97:ef:43: 27:50:9b:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS7nWqhdpEhqfMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NWExYjk4ZjQtZGZkYy00NmM0LWJhODctMjdmOGNjZmJhYTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnhZl+qc0uZGG4/wZL0GDv/9gH6De+MT7V6f a3URAvUGoP/2lFi9Tc69Yi6zQZ54PdAh/iqcyvbOTUStWtQel79jI6KIIe/M8PkK WJc1RXYKSlNTblIkHUCzf9x8mpCLYUtreFpRMWYLsypRNFyI4k4NmOSQqtMnrDN1 YqOyssgD/a9s9AC8w4/rkXec/ivT5GWMz3n9E8GMqrt4kNGsZ9bXkGb0gGYV2bLj OoGQgU6KUDQXnAJrvN+FQTt7apQsq78Ay6W3iHCU+hMlQbYbtMcBTslAAfj5PtzD 3iwWG4Q6C5Rg69zUT/lQe6oPAXEyUmrtHSaKueQfEUO5PxW1UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAi9YDokUmTNBtUdMbewBbvL/1meMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWZlYmJmNjktNjliOS0z YTAxLTlhOWEtMjA5ZDhiOTQzZjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPsx/TDYf8q7L0YQx4yfk8wCahqbuK1x0kE9HzLunbxcT7qvQKcswqZ N5W5yNJE5O3zjqIWGrxlgL19jlrWIFN35RoJ1uG+278VKCRUwNCbPE9tvg3+XKEJ 2H7K4qHvgcGxsi4cvDZrT5LXheax4nuMSb19b6fqACIBpmD8BVZ6I10J6cYDZTJA 9Ln9Lfruyd8f4jpkzqyo1Zt3PZO83o+mgVSvHoDlqzrfCR7ArNxc7UMl3Aphf6D7 5O2KLV4h5FciupU9rrawitZRflN+Rv7BHvlGj6p/2VMsSI7JHculEjUkY3RiCZqB z0GYzquQUxXKd5HNeUwOnZfvQydQm8U= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:15 2025 by rpki-client