$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7074368d-460b-3f85-a9e5-6b3bc2b66edc.roa File: 7074368d-460b-3f85-a9e5-6b3bc2b66edc.roa (raw, json) Hash identifier: alDfe8LGHzmsk8jpMr8GBlZoOp6cisuHZyABxWF+Pto= Subject key identifier: 60:73:92:54:62:1B:04:A6:93:05:85:76:CE:45:DC:02:FC:93:04:B4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BE44F910AE17F4372CF40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7074368d-460b-3f85-a9e5-6b3bc2b66edc.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 34.98.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:e4:4f:91:0a:e1:7f:43:72:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=70b09110-076a-44ba-b0bf-135ca8c4462d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c9:f6:ba:c8:48:17:2e:d6:cf:86:c5:ab:87: 51:0c:4e:9d:74:e3:59:d8:69:cd:76:ba:19:7e:01: b7:33:f4:cd:3c:86:82:45:df:03:e3:b3:90:50:e7: f9:c4:f7:eb:18:b6:cc:e4:97:6c:59:2a:75:f5:d4: 8a:c8:cd:70:c0:ec:3d:64:9c:60:35:dc:c4:2f:f0: da:09:4d:5e:ab:c0:8f:7c:19:a7:e1:5a:dd:8b:a2: e2:97:01:6a:76:cc:5c:a6:91:ec:14:64:01:74:d0: 84:80:65:4b:02:fa:fb:a3:1d:a8:06:37:d2:e4:63: f3:12:6b:82:53:b2:0a:a5:df:b8:cf:f7:42:aa:0b: aa:72:d3:80:d2:79:72:bb:69:c9:8a:8e:17:43:e2: 60:1f:51:88:1e:66:30:46:d9:ff:41:0e:fc:a1:bf: 84:cf:cf:2a:d1:67:a6:a8:41:f1:49:d0:1d:63:35: fc:98:73:db:2a:6d:93:e7:80:3a:8a:79:b5:3f:cb: 89:a0:f2:e3:7d:34:67:de:6a:a3:67:00:b5:42:b6: 58:69:08:81:3c:0d:20:f6:42:3e:00:7b:06:37:99: b7:ef:a8:64:9c:70:1f:91:cc:78:81:45:5e:8c:6c: c4:9a:66:71:ed:32:64:72:4a:94:9e:76:51:a3:de: 63:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:73:92:54:62:1B:04:A6:93:05:85:76:CE:45:DC:02:FC:93:04:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7074368d-460b-3f85-a9e5-6b3bc2b66edc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.98.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:d4:c8:70:43:af:c3:c0:06:9c:f0:74:66:69:d4:99:9f:11: d5:10:5e:58:05:30:4f:8b:40:ae:ce:c1:94:c2:6f:50:5f:55: 4c:c0:d2:4d:1d:dc:00:52:a5:e4:01:8e:00:9a:ef:17:ea:16: 8b:57:89:0e:ae:0a:75:0a:e4:7c:c6:51:8e:6d:e5:1c:14:93: 0d:31:f1:85:d1:9d:76:68:0e:c7:67:33:40:71:4a:fa:b8:ee: 51:61:05:31:53:69:04:29:5e:29:ba:0d:c4:cf:04:b5:cc:8e: 48:47:88:76:0a:1b:8f:34:66:ff:24:eb:68:55:2c:08:37:48: 4b:e9:26:f9:6d:9b:ca:28:0a:38:a4:d4:86:77:f1:2c:bf:31: 33:29:36:ef:ef:67:50:06:27:f2:9f:0c:63:51:0b:d0:b9:f9: d4:a1:fe:85:47:8f:0f:5a:46:1c:1d:83:cf:49:a6:80:79:2c: f8:69:4f:c6:d6:f7:74:75:76:5a:d8:a0:8f:d9:a1:c9:bc:46: 2f:41:95:26:ca:89:31:89:7b:5a:6f:d1:b3:62:16:b2:e9:26: e4:60:73:19:e8:80:2c:5e:de:0f:e5:77:3b:18:81:8b:aa:49: 9a:e6:9b:91:91:48:60:1e:0d:0f:5a:04:0a:17:e8:6a:4a:1a: 20:80:a1:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+RPkQrhf0Nyz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NzBiMDkxMTAtMDc2YS00NGJhLWIwYmYtMTM1Y2E4YzQ0NjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8n2ushIFy7Wz4bFq4dRDE6ddONZ2GnNdroZ fgG3M/TNPIaCRd8D47OQUOf5xPfrGLbM5JdsWSp19dSKyM1wwOw9ZJxgNdzEL/Da CU1eq8CPfBmn4Vrdi6LilwFqdsxcppHsFGQBdNCEgGVLAvr7ox2oBjfS5GPzEmuC U7IKpd+4z/dCqguqctOA0nlyu2nJio4XQ+JgH1GIHmYwRtn/QQ78ob+Ez88q0Wem qEHxSdAdYzX8mHPbKm2T54A6inm1P8uJoPLjfTRn3mqjZwC1QrZYaQiBPA0g9kI+ AHsGN5m376hknHAfkcx4gUVejGzEmmZx7TJkckqUnnZRo95jzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBzklRiGwSmkwWFds5F3AL8kwS0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzA3NDM2OGQtNDYwYi0z Zjg1LWE5ZTUtNmIzYmMyYjY2ZWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAImKQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrUyHBDr8PABpzwdGZp1JmfEdUQXlgFME+LQK7OwZTCb1BfVUzA0k0d 3ABSpeQBjgCa7xfqFotXiQ6uCnUK5HzGUY5t5RwUkw0x8YXRnXZoDsdnM0BxSvq4 7lFhBTFTaQQpXim6DcTPBLXMjkhHiHYKG480Zv8k62hVLAg3SEvpJvltm8ooCjik 1IZ38Sy/MTMpNu/vZ1AGJ/KfDGNRC9C5+dSh/oVHjw9aRhwdg89JpoB5LPhpT8bW 93R1dlrYoI/Zocm8Ri9BlSbKiTGJe1pv0bNiFrLpJuRgcxnogCxe3g/ldzsYgYuq SZrmm5GRSGAeDQ9aBAoX6GpKGiCAoQo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:27 2025 by rpki-client