$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8eb00a77-988f-3f49-b5d0-bd117c734684.roa File: 8eb00a77-988f-3f49-b5d0-bd117c734684.roa (raw, json) Hash identifier: QJRg2Y42kFQjXBhvkXvRVc/U8j+mJB8117WxViGoNiY= Subject key identifier: 03:DD:71:7D:08:E4:4D:E1:30:C6:CC:5E:B9:39:B6:B2:43:26:2E:C3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848897B27E3E7A5EA1D86C7CF60 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8eb00a77-988f-3f49-b5d0-bd117c734684.roa Signing time: Tue 14 Jan 2025 02:00:39 +0000 ROA not before: Tue 14 Jan 2025 02:00:39 +0000 ROA not after: Mon 14 Apr 2025 01:00:39 +0000 asID: 15169 IP address blocks: 34.1.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:89:7b:27:e3:e7:a5:ea:1d:86:c7:cf:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jan 14 02:00:39 2025 GMT Not After : Apr 14 01:00:39 2025 GMT Subject: CN=ffd356f9-2ab3-4e57-abe4-3a7a2f5f0164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d6:42:3d:d1:5d:69:4a:d7:c0:67:f0:96:af: 5e:80:9f:a9:a6:0c:3d:6e:df:ba:ee:fc:a0:62:cb: 64:75:e7:a7:76:9a:2d:e3:6f:94:e9:ab:08:db:95: c3:95:1e:f4:fc:a8:7e:f2:a2:de:73:71:f7:7e:ea: 95:af:60:9b:a7:35:e9:c8:31:f8:23:2f:28:ba:b0: f8:c4:55:1c:3a:28:d8:df:fe:fb:7b:85:81:00:4a: ff:a8:60:81:b7:0a:1a:41:36:ed:4a:5b:d9:7e:28: a9:ea:57:99:32:6d:29:bf:ef:1d:8e:98:21:45:f3: 48:75:a4:97:34:ec:08:06:d4:b7:de:74:f0:bc:d5: 8a:bb:77:c1:1d:af:9c:71:0c:94:1f:80:6b:95:75: ca:0c:5e:4a:ba:f4:d9:4b:14:cc:cb:c8:77:d6:c6: ce:f5:19:05:c2:9a:49:a2:7f:6d:34:b5:ea:f6:a5: 6f:b4:66:1d:2f:63:d0:fe:30:e1:6a:a0:1f:b5:e7: 7a:9d:77:ee:ca:13:b4:fa:e7:3f:13:62:bc:84:78: 48:0f:86:50:5a:8d:92:5f:eb:7f:cf:97:78:47:3c: ca:0b:a4:03:05:89:7e:0f:be:9d:58:74:df:47:f1: 00:9e:2f:6c:aa:94:ee:b4:80:f8:fa:9b:9b:5b:bd: 2f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DD:71:7D:08:E4:4D:E1:30:C6:CC:5E:B9:39:B6:B2:43:26:2E:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8eb00a77-988f-3f49-b5d0-bd117c734684.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.1.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:96:d3:0e:8e:e8:cf:57:7d:b9:58:41:f3:30:65:cb:4a:2d: 0b:b3:7e:a4:a6:f2:ea:05:10:56:97:9b:ff:e6:5b:d9:ea:b4: 33:6f:cb:a0:32:99:5f:e5:78:34:73:44:9a:1a:eb:41:bb:35: ca:88:4e:de:e9:d9:79:f1:1e:4c:76:fb:86:06:fc:85:51:5f: fd:7f:fd:ac:34:36:2a:e6:35:4a:e1:b6:0e:fe:1d:cb:5b:0e: 68:c5:83:a9:e0:b6:51:5b:7b:dc:94:c3:c1:66:85:ae:56:05: af:8f:7e:62:00:0e:1d:2e:12:ed:ae:76:19:87:33:66:d3:d7: dc:ea:54:f7:80:b5:a9:83:a6:2a:53:a8:0b:a0:7d:da:d5:3a: 88:d5:e4:29:70:6b:20:04:7f:fd:5b:df:dc:bd:a1:1e:38:86: da:71:91:e8:a7:2f:e0:1b:56:6b:1a:87:7b:d3:40:a2:0b:b6: 6a:b8:3d:45:f6:b5:6b:82:5c:76:b1:d0:bb:b9:06:c5:1b:78: e2:8c:88:88:08:42:2b:d3:a1:76:75:9c:95:3e:34:33:3d:08: 39:ea:25:a2:b9:1d:4f:a1:18:a8:27:3c:14:bb:13:77:3a:d4: 78:69:96:23:4d:a2:12:66:31:24:f2:40:c0:3d:21:fe:49:78: d9:9d:34:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiJeyfj56XqHYbHz2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDExNDAyMDAzOVoXDTI1MDQxNDAxMDAzOVowLzEtMCsGA1UEAxMk ZmZkMzU2ZjktMmFiMy00ZTU3LWFiZTQtM2E3YTJmNWYwMTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNZCPdFdaUrXwGfwlq9egJ+ppgw9bt+67vyg Ystkdeendpot42+U6asI25XDlR70/Kh+8qLec3H3fuqVr2CbpzXpyDH4Iy8ourD4 xFUcOijY3/77e4WBAEr/qGCBtwoaQTbtSlvZfiip6leZMm0pv+8djpghRfNIdaSX NOwIBtS33nTwvNWKu3fBHa+ccQyUH4BrlXXKDF5KuvTZSxTMy8h31sbO9RkFwppJ on9tNLXq9qVvtGYdL2PQ/jDhaqAfted6nXfuyhO0+uc/E2K8hHhID4ZQWo2SX+t/ z5d4RzzKC6QDBYl+D76dWHTfR/EAni9sqpTutID4+pubW70vSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPdcX0I5E3hMMbMXrk5trJDJi7DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGViMDBhNzctOTg4Zi0z ZjQ5LWI1ZDAtYmQxMTdjNzM0Njg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgFcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuW0w6O6M9XfblYQfMwZctKLQuzfqSm8uoFEFaXm//mW9nqtDNvy6Ay mV/leDRzRJoa60G7NcqITt7p2XnxHkx2+4YG/IVRX/1//aw0NirmNUrhtg7+Hctb DmjFg6ngtlFbe9yUw8Fmha5WBa+PfmIADh0uEu2udhmHM2bT19zqVPeAtamDpipT qAugfdrVOojV5ClwayAEf/1b39y9oR44htpxkeinL+AbVmsah3vTQKILtmq4PUX2 tWuCXHax0Lu5BsUbeOKMiIgIQivToXZ1nJU+NDM9CDnqJaK5HU+hGKgnPBS7E3c6 1HhpliNNohJmMSTyQMA9If5JeNmdNGM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:58 2025 by rpki-client