$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/72b7c435-0d2c-3bed-80cc-aaf5873b052e.roa File: 72b7c435-0d2c-3bed-80cc-aaf5873b052e.roa (raw, json) Hash identifier: 4DwjXd9qRdPA1DWb90SvLch6k4n5jnBwVG10Yj06XCw= Subject key identifier: 4B:97:94:55:D2:B1:C9:9F:52:10:CC:7F:26:E2:4E:5F:9B:C5:46:D6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C0A23251F8F93DA5B3180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/72b7c435-0d2c-3bed-80cc-aaf5873b052e.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.148.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:0a:23:25:1f:8f:93:da:5b:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=9b1f29de-be27-44be-aa7d-d0d03f56567c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6f:69:b5:72:26:9e:83:ac:7e:46:ee:d7:8a: e1:30:d6:49:84:b0:69:28:dd:80:30:e8:e2:b4:18: c9:41:04:32:de:70:d9:98:29:c4:7c:a8:37:d9:e2: a0:7b:6f:ca:06:1a:01:60:1c:f9:a5:8c:20:e7:3a: 0e:8b:be:f7:d2:50:4c:72:98:d0:3a:89:4b:2f:d9: 42:43:ee:00:9f:15:c2:30:7f:4b:b4:30:80:7a:7d: e6:86:be:90:f1:a1:a9:69:ed:31:ac:84:5a:cd:47: 1d:92:02:eb:d9:8d:24:fe:ed:5d:bd:1c:e8:85:0c: 18:65:5b:70:0d:02:1a:9b:ed:ad:05:90:f3:40:85: 1f:67:f9:b5:65:d1:cb:00:97:de:31:2d:c1:5a:bc: 74:75:49:ed:e1:92:c0:05:89:fb:fb:e5:e1:ad:d6: 8e:16:4d:9c:95:67:b3:03:b4:65:bf:02:e7:59:44: 94:85:3e:d8:fd:54:aa:d6:72:71:32:b8:5f:37:0b: fe:6f:db:2c:8b:db:7b:ee:c7:b2:35:e8:fc:29:19: 62:3c:9d:42:f3:19:af:ee:d0:3f:f1:03:e9:44:e2: 74:24:9f:d3:72:6e:5f:76:3d:f2:02:a2:32:7e:96: e7:9f:6d:e2:7f:5e:83:94:a3:71:33:91:a6:69:c7: b5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:97:94:55:D2:B1:C9:9F:52:10:CC:7F:26:E2:4E:5F:9B:C5:46:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/72b7c435-0d2c-3bed-80cc-aaf5873b052e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.148.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:24:44:98:a4:fb:b2:91:10:93:c3:db:9a:08:50:b8:6b:ab: fb:90:ec:10:d7:a9:32:16:b8:87:2a:bf:c2:07:8d:d0:fc:44: 57:1e:a3:7d:37:0d:0b:ef:3e:b6:aa:c1:6a:94:90:5d:ae:62: fd:0d:a4:df:56:e0:fc:4e:6b:11:8d:a1:7c:4d:2d:0e:5e:5f: 27:ac:19:6e:fc:b3:f5:6b:2a:d8:6c:8d:c1:0b:a0:70:c2:07: 30:46:d0:ca:69:87:ac:7f:0d:57:70:89:d9:85:51:34:02:95: 80:cc:fc:31:54:d2:f0:07:5e:76:e5:f6:e3:1d:97:37:ef:01: 43:71:02:5e:6d:09:97:4d:d5:e5:9e:c1:8e:32:28:df:10:da: 27:f5:88:c7:c5:75:a1:f3:d8:93:09:20:57:43:f0:bf:71:22: 8e:2f:91:32:93:9f:98:c0:fb:73:ea:47:54:35:db:57:8e:b8: 84:5e:f0:dc:7d:97:15:ac:6c:f9:b9:29:ab:90:62:a5:96:08: 52:a4:59:8d:ad:73:94:15:d9:30:08:a3:a0:fe:05:65:8d:6f: ec:e8:ce:82:d1:6d:81:65:54:69:b3:f5:8d:75:85:8a:7b:82: dc:b1:9f:01:55:7d:dc:37:25:b1:cb:4e:8d:0f:b6:f6:b0:ef: c5:e3:a7:85 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjITAojJR+Pk9pbMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk OWIxZjI5ZGUtYmUyNy00NGJlLWFhN2QtZDBkMDNmNTY1NjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm9ptXImnoOsfkbu14rhMNZJhLBpKN2AMOji tBjJQQQy3nDZmCnEfKg32eKge2/KBhoBYBz5pYwg5zoOi7730lBMcpjQOolLL9lC Q+4AnxXCMH9LtDCAen3mhr6Q8aGpae0xrIRazUcdkgLr2Y0k/u1dvRzohQwYZVtw DQIam+2tBZDzQIUfZ/m1ZdHLAJfeMS3BWrx0dUnt4ZLABYn7++XhrdaOFk2clWez A7RlvwLnWUSUhT7Y/VSq1nJxMrhfNwv+b9ssi9t77seyNej8KRliPJ1C8xmv7tA/ 8QPpROJ0JJ/Tcm5fdj3yAqIyfpbnn23if16DlKNxM5Gmace1dQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEuXlFXSscmfUhDMfybiTl+bxUbWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzJiN2M0MzUtMGQyYy0z YmVkLTgwY2MtYWFmNTg3M2IwNTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCIpQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEALyREmKT7spEQk8PbmghQuGur+5DsENepMha4hyq/wgeN0PxEVx6jfTcN C+8+tqrBapSQXa5i/Q2k31bg/E5rEY2hfE0tDl5fJ6wZbvyz9Wsq2GyNwQugcMIH MEbQymmHrH8NV3CJ2YVRNAKVgMz8MVTS8AdeduX24x2XN+8BQ3ECXm0Jl03V5Z7B jjIo3xDaJ/WIx8V1ofPYkwkgV0Pwv3Eiji+RMpOfmMD7c+pHVDXbV464hF7w3H2X Faxs+bkpq5BipZYIUqRZja1zlBXZMAijoP4FZY1v7OjOgtFtgWVUabP1jXWFinuC 3LGfAVV93DclsctOjQ+29rDvxeOnhQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:28 2025 by rpki-client