$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/78a16851-d999-3754-937b-aaa25bf9f0c2.roa File: 78a16851-d999-3754-937b-aaa25bf9f0c2.roa (raw, json) Hash identifier: +aM+/EPEIuEwLo/M/ahakkShROR1XFQz2S8RjfUEjsc= Subject key identifier: A0:5F:09:D4:2D:B7:BE:EC:DB:7E:BC:45:60:D2:3E:5A:CC:4A:11:7D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C0BDBD883C47630DCD2C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/78a16851-d999-3754-937b-aaa25bf9f0c2.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 34.156.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:0b:db:d8:83:c4:76:30:dc:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=4957a488-a9e4-4e04-b2a9-ece5d96f2839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:51:40:cd:71:df:c4:ec:17:98:a6:fe:b0:b8: 9f:15:3c:bf:8c:91:ed:bd:cf:4e:62:5b:7e:cc:ef: 87:a4:89:97:cb:0d:f5:91:2e:3e:8f:97:f6:e7:d7: ee:4e:34:97:2c:5a:d6:e6:d4:1e:2d:72:9d:4d:03: aa:24:a4:ab:5d:a7:ea:73:70:6c:48:d2:8d:0b:17: ee:4e:c7:82:92:95:9b:91:64:56:b1:f5:81:98:16: fb:89:d3:db:58:e2:a6:f5:7f:7c:33:81:78:3e:eb: 84:07:96:8b:3f:f1:52:52:9c:52:97:e8:09:30:98: 23:28:87:7a:ed:3d:3f:88:9a:62:6d:74:b6:e2:38: da:60:49:5f:d9:2f:fb:e0:32:9c:8a:9a:7a:2d:69: f1:2b:53:6c:db:f3:d5:96:5a:4c:a8:9a:6a:61:2f: b4:0c:c9:93:8a:32:75:17:5d:81:90:7c:09:2a:81: 29:00:45:d3:6d:51:76:45:28:28:21:30:42:6b:a0: 57:43:a7:95:3b:f2:29:46:06:0c:73:06:96:63:12: 83:6e:1e:43:4a:52:48:14:ee:65:2b:27:e7:06:ba: c0:89:78:52:c6:e6:be:5b:f1:d3:84:c2:34:62:11: cb:96:38:0f:a6:cf:61:70:d6:29:ed:ad:7a:ed:ab: c3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:5F:09:D4:2D:B7:BE:EC:DB:7E:BC:45:60:D2:3E:5A:CC:4A:11:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/78a16851-d999-3754-937b-aaa25bf9f0c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.156.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:a3:5d:73:50:42:ee:e3:a8:76:78:76:4c:b6:fa:ee:55:e4: f5:29:bc:cd:a4:c0:e5:6d:af:43:a6:99:a0:44:20:65:fa:0e: d6:05:24:13:50:3b:d7:aa:04:d3:1e:a9:d7:40:d1:6b:ed:2a: 1a:11:a2:23:61:06:9f:26:eb:6f:db:90:5a:d5:b6:e8:26:99: e6:d8:3c:c9:59:71:16:90:fe:83:2e:2d:39:4e:cf:fe:bf:45: fa:78:97:d7:40:4b:5f:4f:2a:86:0f:12:fc:7d:fa:d3:23:4e: d4:79:e9:37:be:c5:93:93:fd:34:fc:ce:15:46:90:27:3e:36: f0:28:b2:57:ab:c2:b6:5b:13:61:8a:95:85:c6:f7:57:97:7f: 3e:7b:d6:10:fe:36:3d:cf:d6:4d:21:e4:c4:b8:08:3a:76:f6: 0d:98:0b:ec:47:92:5c:82:eb:93:77:8f:ec:58:08:8e:10:b5: 3e:d2:69:bc:26:44:91:ad:ce:e0:75:af:e3:7a:f3:0e:02:37: 3a:05:1e:6a:f8:ed:9a:38:78:73:67:a8:3f:9c:31:33:ee:91: d4:01:c1:6d:b4:92:eb:af:17:0b:f5:fe:b0:7b:81:07:9e:12: 36:88:5f:3d:9d:a6:39:bc:eb:d0:ee:0b:82:0c:5b:1c:ce:b4: 1c:3d:73:70 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjITAvb2IPEdjDc0sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NDk1N2E0ODgtYTllNC00ZTA0LWIyYTktZWNlNWQ5NmYyODM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lFAzXHfxOwXmKb+sLifFTy/jJHtvc9OYlt+ zO+HpImXyw31kS4+j5f259fuTjSXLFrW5tQeLXKdTQOqJKSrXafqc3BsSNKNCxfu TseCkpWbkWRWsfWBmBb7idPbWOKm9X98M4F4PuuEB5aLP/FSUpxSl+gJMJgjKId6 7T0/iJpibXS24jjaYElf2S/74DKcipp6LWnxK1Ns2/PVllpMqJpqYS+0DMmTijJ1 F12BkHwJKoEpAEXTbVF2RSgoITBCa6BXQ6eVO/IpRgYMcwaWYxKDbh5DSlJIFO5l KyfnBrrAiXhSxua+W/HThMI0YhHLljgPps9hcNYp7a167avDIQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKBfCdQtt77s2368RWDSPlrMShF9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzhhMTY4NTEtZDk5OS0z NzU0LTkzN2ItYWFhMjViZjlmMGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIpwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAE6Ndc1BC7uOodnh2TLb67lXk9Sm8zaTA5W2vQ6aZoEQgZfoO1gUkE1A7 16oE0x6p10DRa+0qGhGiI2EGnybrb9uQWtW26CaZ5tg8yVlxFpD+gy4tOU7P/r9F +niX10BLX08qhg8S/H360yNO1HnpN77Fk5P9NPzOFUaQJz428CiyV6vCtlsTYYqV hcb3V5d/PnvWEP42Pc/WTSHkxLgIOnb2DZgL7EeSXILrk3eP7FgIjhC1PtJpvCZE ka3O4HWv43rzDgI3OgUeavjtmjh4c2eoP5wxM+6R1AHBbbSS668XC/X+sHuBB54S NohfPZ2mObzr0O4LggxbHM60HD1zcA== -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:16 2025 by rpki-client