$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/839e0e55-123b-3665-bb2c-36be8897a21f.roa File: 839e0e55-123b-3665-bb2c-36be8897a21f.roa (raw, json) Hash identifier: Sys01o6JhyhX871g+cIsZEKad0I6oaxt5ng75/HO4i4= Subject key identifier: 71:68:6E:37:F4:78:84:71:4C:73:90:CA:B8:81:77:A1:4A:DB:61:09 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C151F90CC6AA5ED0A2180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/839e0e55-123b-3665-bb2c-36be8897a21f.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.38.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:15:1f:90:cc:6a:a5:ed:0a:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=0d7bde77-7d1a-43e9-a13f-3c3a6ea9952b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0c:7c:14:de:f2:45:fb:ec:bf:9f:f5:fa:51: 72:a0:e4:ec:f6:78:d7:c1:0f:57:e9:81:5b:7e:22: 81:64:d7:af:e8:1b:61:b7:4a:6b:2e:5c:45:2b:32: 4b:43:34:6e:15:00:6d:d5:d4:ff:ae:c2:3e:8f:dd: 2f:b5:e7:21:30:c6:38:3d:bb:0d:e4:f5:df:69:d8: a9:6b:d6:a6:ba:36:ff:bf:85:d7:f4:af:a6:8d:29: f0:e8:4a:0a:aa:eb:af:2a:be:1a:73:e4:6b:11:01: 90:df:7e:97:03:27:19:e5:3c:66:3b:7b:d1:d5:19: b4:21:ca:a7:1c:c1:85:5c:bf:fb:6b:64:ee:24:2b: 87:1b:ab:d6:7b:9d:e8:82:0f:54:47:24:3b:73:8a: b6:14:71:04:94:59:01:72:e6:c3:8b:e8:44:3e:43: f7:01:a5:4e:72:ee:17:36:3e:cd:d9:32:75:06:98: 06:b8:13:b4:f9:bd:58:ff:86:9c:6e:21:31:a4:38: 57:67:ca:67:74:03:c9:1e:91:ee:52:b0:dc:f3:09: c8:e3:07:12:60:8d:82:aa:58:47:ac:2c:34:2e:0f: 37:d5:21:30:a5:b2:bf:4c:1a:8c:6d:df:e9:2c:84: 77:07:d1:c3:66:28:30:79:94:60:fb:e0:71:af:de: 04:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:68:6E:37:F4:78:84:71:4C:73:90:CA:B8:81:77:A1:4A:DB:61:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/839e0e55-123b-3665-bb2c-36be8897a21f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.38.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:21:48:8a:29:1d:46:0b:81:40:ef:d4:9c:65:d9:da:11:19: af:09:ae:01:9a:8f:ac:58:a0:1c:58:13:e9:58:71:9d:5f:e2: b3:92:78:b8:d0:81:55:75:7e:f3:bd:14:6c:3b:d2:04:1e:ea: e3:dd:99:55:a6:7c:17:bf:ef:c4:19:54:37:d6:cf:01:65:3a: c3:3f:a1:bc:19:ce:53:82:14:e4:47:eb:78:01:73:9b:3c:92: a5:60:00:a9:de:a1:39:04:9b:6c:1a:ae:11:ec:e8:3c:0a:83: 6e:eb:aa:3f:68:ca:f1:51:a0:b5:95:62:3e:4d:0f:68:4e:a0: bf:a6:50:18:fe:91:6b:32:10:a3:ff:04:50:42:d5:bc:5e:9c: 63:50:8f:42:fc:68:89:89:39:10:da:aa:b8:47:9e:82:ee:92: a7:cb:3d:02:96:28:ea:d4:a5:46:dc:1f:68:51:32:27:9a:60: 67:de:b9:fe:3c:e3:c8:fb:8e:9d:ec:df:7b:53:bf:5e:a8:48: b2:3a:a8:95:90:29:88:19:ba:6f:fe:b4:9a:6a:f5:3d:f2:bd: bb:24:24:33:77:5e:42:68:0d:0f:a4:a9:e1:44:b9:8f:a0:3b: 1b:e8:13:b1:0b:1d:4d:7d:79:e3:42:40:a6:93:c4:b8:aa:7e: 56:a5:7f:59 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjITBUfkMxqpe0KIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MGQ3YmRlNzctN2QxYS00M2U5LWExM2YtM2MzYTZlYTk5NTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgx8FN7yRfvsv5/1+lFyoOTs9njXwQ9X6YFb fiKBZNev6Btht0prLlxFKzJLQzRuFQBt1dT/rsI+j90vtechMMY4PbsN5PXfadip a9amujb/v4XX9K+mjSnw6EoKquuvKr4ac+RrEQGQ336XAycZ5TxmO3vR1Rm0Icqn HMGFXL/7a2TuJCuHG6vWe53ogg9URyQ7c4q2FHEElFkBcubDi+hEPkP3AaVOcu4X Nj7N2TJ1BpgGuBO0+b1Y/4acbiExpDhXZ8pndAPJHpHuUrDc8wnI4wcSYI2CqlhH rCw0Lg831SEwpbK/TBqMbd/pLIR3B9HDZigweZRg++Bxr94EPQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHFobjf0eIRxTHOQyriBd6FK22EJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODM5ZTBlNTUtMTIzYi0z NjY1LWJiMmMtMzZiZTg4OTdhMjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIiYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAWSFIiikdRguBQO/UnGXZ2hEZrwmuAZqPrFigHFgT6VhxnV/is5J4uNCB VXV+870UbDvSBB7q492ZVaZ8F7/vxBlUN9bPAWU6wz+hvBnOU4IU5EfreAFzmzyS pWAAqd6hOQSbbBquEezoPAqDbuuqP2jK8VGgtZViPk0PaE6gv6ZQGP6RazIQo/8E UELVvF6cY1CPQvxoiYk5ENqquEeegu6Sp8s9ApYo6tSlRtwfaFEyJ5pgZ965/jzj yPuOnezfe1O/XqhIsjqolZApiBm6b/60mmr1PfK9uyQkM3deQmgND6Sp4US5j6A7 G+gTsQsdTX1540JAppPEuKp+VqV/WQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:59 2025 by rpki-client