$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8ecb6ce8-0837-32ca-a779-34563ed18b34.roa File: 8ecb6ce8-0837-32ca-a779-34563ed18b34.roa (raw, json) Hash identifier: 8Y/9nRZ0NrqPZxDHs3AFiKSuLUh8G6iYh7hBpdeVZgM= Subject key identifier: 68:11:75:74:67:F5:BB:4A:C0:2D:31:EA:A0:54:FC:77:62:42:5D:B6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BD0E24EAF1DCFDFEEAE14 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8ecb6ce8-0837-32ca-a779-34563ed18b34.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.150.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:d0:e2:4e:af:1d:cf:df:ee:ae:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=5fe78af5-0cb8-498c-bc09-4a26ebfcb2a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:72:a8:5f:0d:82:02:51:0c:17:d4:9c:f3:27: 0f:f2:d5:82:a9:c1:10:75:54:53:b3:94:19:e7:db: 95:e1:fc:b3:73:7e:5e:eb:0c:81:59:77:43:24:6f: af:b6:3a:61:5b:69:30:49:c9:09:31:86:ee:97:c5: 84:7a:d2:46:72:43:34:99:74:96:79:0d:19:9e:d7: 12:9f:39:bd:f0:4d:f2:d7:35:d2:14:2a:bd:23:02: c7:1f:e1:88:62:12:54:c3:c3:78:54:b0:72:36:3e: 90:73:66:09:66:af:73:65:99:26:19:03:14:28:d8: 29:88:78:88:b4:98:40:eb:44:de:80:73:2c:0f:fd: 9f:af:4b:cd:e5:8a:87:63:9c:94:b0:ed:1c:29:60: f2:0b:7f:9f:fa:3a:07:f6:7c:58:4e:c1:e7:1e:7a: 61:99:0e:a9:47:b6:7f:9f:f9:0b:92:9b:82:b1:20: d9:3e:b9:53:57:1b:bf:ae:60:09:92:93:b2:ad:53: 5f:d6:27:5d:df:06:35:19:8f:ee:1f:58:93:3d:c0: eb:f4:3f:3c:f2:8c:e6:5d:37:73:6f:f7:3a:d0:5e: 95:98:2a:a6:82:aa:5c:3d:55:be:05:64:f1:6a:1d: 7e:7e:05:bc:79:0e:48:5a:43:40:ba:76:23:16:8a: f1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:11:75:74:67:F5:BB:4A:C0:2D:31:EA:A0:54:FC:77:62:42:5D:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8ecb6ce8-0837-32ca-a779-34563ed18b34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.150.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:60:a5:7d:01:f6:1a:5d:3d:cf:c6:d8:99:74:af:22:0d:60: db:c2:28:54:78:48:94:12:cd:29:ef:94:27:0c:be:49:55:6c: 58:a1:84:8d:fa:7d:ec:2b:2e:af:b1:f9:37:c2:26:dc:93:ef: 62:cd:83:0c:54:0a:2a:87:ba:3b:8d:a7:15:0f:cf:28:da:f0: 31:56:bd:11:d5:5b:da:13:1c:24:fd:be:c6:ec:7d:b4:4b:12: 3a:fa:b8:fd:b3:1a:1a:bb:7b:a9:89:9c:41:4f:b6:ce:c4:ae: b7:9c:e6:cf:80:d6:01:ef:3e:21:94:09:3f:7f:9b:91:8e:dd: 58:d7:54:1c:bd:1a:98:7d:5c:4e:ac:3b:4a:c9:bb:9c:c7:08: a7:19:0a:ff:3f:39:7e:d2:b4:ba:a1:a5:2b:d8:2b:b6:37:9d: 33:ce:51:e0:db:34:3b:4d:17:2e:5e:0c:27:0d:8a:ba:c3:44: c8:44:47:6d:12:10:33:ce:f9:42:ae:34:d9:ee:a8:73:80:f3: 8f:13:94:da:f8:eb:91:c6:88:25:a6:f5:b8:27:0d:d2:39:c0: d2:45:d2:7b:bf:34:f4:b3:f5:c5:73:e6:cf:2b:6e:f7:2f:34: 97:a3:0e:61:32:e3:9f:65:5f:33:3b:99:02:24:23:20:8c:87: ae:f6:09:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS9DiTq8dz9/urhQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NWZlNzhhZjUtMGNiOC00OThjLWJjMDktNGEyNmViZmNiMmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3KoXw2CAlEMF9Sc8ycP8tWCqcEQdVRTs5QZ 59uV4fyzc35e6wyBWXdDJG+vtjphW2kwSckJMYbul8WEetJGckM0mXSWeQ0ZntcS nzm98E3y1zXSFCq9IwLHH+GIYhJUw8N4VLByNj6Qc2YJZq9zZZkmGQMUKNgpiHiI tJhA60TegHMsD/2fr0vN5YqHY5yUsO0cKWDyC3+f+joH9nxYTsHnHnphmQ6pR7Z/ n/kLkpuCsSDZPrlTVxu/rmAJkpOyrVNf1idd3wY1GY/uH1iTPcDr9D888ozmXTdz b/c60F6VmCqmgqpcPVW+BWTxah1+fgW8eQ5IWkNAunYjForxxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgRdXRn9btKwC0x6qBU/HdiQl22MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGVjYjZjZTgtMDgzNy0z MmNhLWE3NzktMzQ1NjNlZDE4YjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpYQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtgpX0B9hpdPc/G2Jl0ryINYNvCKFR4SJQSzSnvlCcMvklVbFihhI36 fewrLq+x+TfCJtyT72LNgwxUCiqHujuNpxUPzyja8DFWvRHVW9oTHCT9vsbsfbRL Ejr6uP2zGhq7e6mJnEFPts7Errec5s+A1gHvPiGUCT9/m5GO3VjXVBy9Gph9XE6s O0rJu5zHCKcZCv8/OX7StLqhpSvYK7Y3nTPOUeDbNDtNFy5eDCcNirrDRMhER20S EDPO+UKuNNnuqHOA848TlNr465HGiCWm9bgnDdI5wNJF0nu/NPSz9cVz5s8rbvcv NJejDmEy459lXzM7mQIkIyCMh672CVg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:25 2025 by rpki-client