$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8af0e13f-62c4-32cd-b8e6-52e9f0fec0a1.roa File: 8af0e13f-62c4-32cd-b8e6-52e9f0fec0a1.roa (raw, json) Hash identifier: 6iyRwuFF6upYtnG9UGxvlIkDwvtjIny9GE2se6lB3fA= Subject key identifier: D0:82:C2:DD:AF:9E:E7:3B:89:E0:37:DC:CB:2D:65:3A:60:05:F6:3D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BFEB8A05CCAA387F2F76C Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8af0e13f-62c4-32cd-b8e6-52e9f0fec0a1.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.34.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:fe:b8:a0:5c:ca:a3:87:f2:f7:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=87ac16f1-cec8-4dc8-8e87-953a9c63acd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0e:1c:c1:ad:a4:2e:95:44:c2:02:5e:f1:d6: 82:59:d7:65:ff:f7:c8:22:49:71:49:c9:b4:24:ec: fc:8e:0c:44:29:2d:26:dc:e8:89:47:94:22:be:8e: 0f:60:67:e1:95:a3:d1:d9:b1:d8:c4:9a:1d:9b:1f: 2c:51:34:fe:03:dc:ac:92:19:4e:01:ad:1a:5c:71: cf:6a:2f:74:7f:b9:5d:85:d4:24:98:09:18:7d:f9: 79:09:43:5e:27:1a:15:d5:77:ef:c7:ef:9b:3d:06: 7c:c3:80:03:49:aa:75:05:7c:b9:71:b8:dc:68:98: 68:4f:d1:32:a1:32:2a:fe:50:7d:95:89:d0:15:d5: 77:51:e0:ae:af:dc:d2:f1:35:a8:9c:54:91:e3:58: 48:18:fb:82:9a:4d:ba:4b:47:5b:63:ec:dc:3b:b7: 26:f5:47:07:4f:7b:c8:45:b1:94:b9:27:9e:ab:21: 46:3f:9c:b1:2f:8b:3f:90:4b:d3:6d:7a:c7:5c:37: 2a:b6:7b:3f:85:83:6f:0f:a1:13:18:87:69:68:6d: 41:7e:97:d0:b8:46:e7:70:91:ce:f8:2e:e1:b2:b4: 4c:eb:00:96:29:13:7d:1a:aa:c6:cd:b3:82:d7:de: e7:77:06:00:c1:17:81:99:3e:ce:e3:27:4a:41:cc: 6d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:82:C2:DD:AF:9E:E7:3B:89:E0:37:DC:CB:2D:65:3A:60:05:F6:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8af0e13f-62c4-32cd-b8e6-52e9f0fec0a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.34.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:0b:5a:bc:52:93:ba:b8:e5:6f:3e:c4:35:4d:ad:d1:21:47: 2c:5e:0e:25:33:6e:d2:cd:4c:d5:c5:c9:b7:92:f2:c7:d2:5c: 5a:ff:7b:aa:18:a6:d1:34:37:fd:03:93:96:22:e5:14:bf:53: 93:1a:df:8a:7a:cf:4b:0b:11:a7:a0:8e:84:04:0a:5e:f8:33: 30:c3:8b:16:f5:de:19:63:f0:b9:4c:25:14:8d:33:cd:6e:59: 57:b1:e6:4e:a2:f2:98:bb:be:13:9a:83:c7:a4:f3:1f:bf:c0: b1:de:d3:b1:ec:de:07:74:a3:39:4b:3a:58:d3:0b:05:5b:38: 34:47:a4:c6:03:4a:ea:42:6d:65:39:ee:4e:f5:4e:8b:c1:85: 1b:ab:44:bf:e5:7b:ce:a9:57:42:5a:c9:68:cb:ce:ab:82:f5: 29:c0:fc:5a:ae:cd:e2:81:8b:44:bf:43:1b:e5:64:43:5e:6f: 95:2a:86:2d:69:bd:65:1e:0f:d5:b3:19:2e:27:8a:4c:39:e0: d9:9d:99:2b:1d:31:d8:3f:7f:12:42:30:ee:67:e1:0d:9c:e5: d7:16:8e:fc:10:e4:ad:ad:ab:ec:f0:55:95:76:89:95:d1:8a: 9e:67:42:5d:de:3e:cc:77:ae:95:2f:bf:0b:1e:f8:7f:e3:ea: 85:ec:4f:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS/64oFzKo4fy92wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ODdhYzE2ZjEtY2VjOC00ZGM4LThlODctOTUzYTljNjNhY2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkA4cwa2kLpVEwgJe8daCWddl//fIIklxScm0 JOz8jgxEKS0m3OiJR5Qivo4PYGfhlaPR2bHYxJodmx8sUTT+A9yskhlOAa0aXHHP ai90f7ldhdQkmAkYffl5CUNeJxoV1Xfvx++bPQZ8w4ADSap1BXy5cbjcaJhoT9Ey oTIq/lB9lYnQFdV3UeCur9zS8TWonFSR41hIGPuCmk26S0dbY+zcO7cm9UcHT3vI RbGUuSeeqyFGP5yxL4s/kEvTbXrHXDcqtns/hYNvD6ETGIdpaG1BfpfQuEbncJHO +C7hsrRM6wCWKRN9GqrGzbOC197ndwYAwReBmT7O4ydKQcxt9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCCwt2vnuc7ieA33MstZTpgBfY9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGFmMGUxM2YtNjJjNC0z MmNkLWI4ZTYtNTJlOWYwZmVjMGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIiLIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMLWrxSk7q45W8+xDVNrdEhRyxeDiUzbtLNTNXFybeS8sfSXFr/e6oY ptE0N/0Dk5Yi5RS/U5Ma34p6z0sLEaegjoQECl74MzDDixb13hlj8LlMJRSNM81u WVex5k6i8pi7vhOag8ek8x+/wLHe07Hs3gd0ozlLOljTCwVbODRHpMYDSupCbWU5 7k71TovBhRurRL/le86pV0JayWjLzquC9SnA/FquzeKBi0S/QxvlZENeb5Uqhi1p vWUeD9WzGS4nikw54NmdmSsdMdg/fxJCMO5n4Q2c5dcWjvwQ5K2tq+zwVZV2iZXR ip5nQl3ePsx3rpUvvwse+H/j6oXsT7E= -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:53 2025 by rpki-client