$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4fee7a8-a37c-3b98-8f8e-2559480a2b70.roa File: a4fee7a8-a37c-3b98-8f8e-2559480a2b70.roa (raw, json) Hash identifier: YSYlwgPfMG8SMKNVFcbuAs6n9FK/3I6L1tF4aeztruo= Subject key identifier: 8F:53:B8:47:D7:4C:72:C2:26:80:95:01:C7:DE:FF:CE:4E:68:55:65 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C0AAAAB5FA1D59AB76580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4fee7a8-a37c-3b98-8f8e-2559480a2b70.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 34.172.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:0a:aa:ab:5f:a1:d5:9a:b7:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=d67531a5-6ed0-45c8-bedd-8274efa693b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f4:de:af:e2:63:ac:72:9b:b5:be:cd:26:85: 7d:79:94:b4:eb:73:31:f0:c3:f6:1e:03:ed:96:e5: 5f:77:2a:35:d2:af:07:43:83:86:fc:8e:34:72:25: af:32:12:f7:07:06:f8:ec:4e:88:fb:f4:27:79:40: 3b:fa:69:c5:bd:03:d1:a2:59:17:55:14:dc:05:be: 43:31:de:ef:ec:aa:4b:c6:97:ae:f7:6c:43:b0:ff: 86:95:e9:3a:5e:07:08:28:65:c3:80:91:d4:54:33: ac:f3:05:9c:7e:3d:5c:3c:08:ef:4b:54:4c:26:a5: f4:03:08:47:03:dd:a6:d1:84:91:2c:db:18:4b:61: 93:dc:3c:44:a0:5b:6a:8d:73:16:17:5b:cd:40:de: c6:07:b7:cd:96:d2:34:67:8c:4c:19:7c:95:fc:98: 8c:b1:f2:f6:d3:e5:c1:2d:13:a6:22:89:a5:f6:55: 9a:2f:4a:dd:52:4b:2f:21:56:be:ec:07:01:64:d9: b6:da:36:fd:4e:54:74:3b:bb:a8:73:15:10:30:3a: 90:fd:02:0c:2b:8e:65:85:48:91:7b:cf:8e:af:78: b5:ef:d2:dd:8a:ff:15:60:ce:f5:33:82:47:4d:fd: 1f:d6:8c:6a:98:39:c2:e6:f5:8d:6c:f9:86:73:85: 04:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:53:B8:47:D7:4C:72:C2:26:80:95:01:C7:DE:FF:CE:4E:68:55:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4fee7a8-a37c-3b98-8f8e-2559480a2b70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.172.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:b0:fc:07:0f:3b:79:28:a8:7c:89:88:52:ec:66:f0:06:a9: 3c:20:41:16:0e:3b:4f:b4:d4:6a:e8:81:5d:f3:f6:80:fc:6e: ea:b1:80:74:be:52:46:3f:cd:9c:21:86:e1:4b:6e:04:3d:39: 89:59:68:58:6d:38:66:59:52:4e:5b:de:81:b2:9a:8f:52:14: a9:ed:a9:ec:63:59:e8:8e:f1:88:ae:73:58:cd:ad:89:99:1c: 0e:9e:9a:e0:52:55:dc:7b:9f:70:2f:53:ce:01:9b:85:71:9d: 5e:a6:5a:05:58:f3:13:14:91:e7:32:45:42:b4:f1:de:fd:0a: 95:69:5c:6a:07:af:72:53:a8:dd:26:94:0e:5a:f3:62:7f:fd: 54:b1:b9:71:99:6e:c9:08:34:e8:e6:e9:ff:8b:7d:5e:1d:9e: 9f:43:dd:46:cd:d6:0f:e9:51:fd:f9:f8:96:c9:b5:aa:4e:22: a0:f8:fe:5e:f8:d5:74:07:d8:b8:33:ec:22:cf:25:cd:d1:77: 4b:09:00:80:32:8b:53:de:0e:69:25:2e:08:bf:b0:5a:65:d8: 80:d8:f2:fe:50:44:34:fc:bf:56:5d:b4:7d:0b:94:69:f3:57: 43:91:4a:50:4c:1b:3e:61:5f:5a:55:8f:94:e2:a3:a5:4c:33: 0f:e0:7f:41 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjITAqqq1+h1Zq3ZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZDY3NTMxYTUtNmVkMC00NWM4LWJlZGQtODI3NGVmYTY5M2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfTer+JjrHKbtb7NJoV9eZS063Mx8MP2HgPt luVfdyo10q8HQ4OG/I40ciWvMhL3Bwb47E6I+/QneUA7+mnFvQPRolkXVRTcBb5D Md7v7KpLxpeu92xDsP+Glek6XgcIKGXDgJHUVDOs8wWcfj1cPAjvS1RMJqX0AwhH A92m0YSRLNsYS2GT3DxEoFtqjXMWF1vNQN7GB7fNltI0Z4xMGXyV/JiMsfL20+XB LROmIoml9lWaL0rdUksvIVa+7AcBZNm22jb9TlR0O7uocxUQMDqQ/QIMK45lhUiR e8+Or3i179Ldiv8VYM71M4JHTf0f1oxqmDnC5vWNbPmGc4UECQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFI9TuEfXTHLCJoCVAcfe/85OaFVlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTRmZWU3YTgtYTM3Yy0z Yjk4LThmOGUtMjU1OTQ4MGEyYjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIqwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAKLD8Bw87eSiofImIUuxm8AapPCBBFg47T7TUauiBXfP2gPxu6rGAdL5S Rj/NnCGG4UtuBD05iVloWG04ZllSTlvegbKaj1IUqe2p7GNZ6I7xiK5zWM2tiZkc Dp6a4FJV3HufcC9TzgGbhXGdXqZaBVjzExSR5zJFQrTx3v0KlWlcagevclOo3SaU DlrzYn/9VLG5cZluyQg06Obp/4t9Xh2en0PdRs3WD+lR/fn4lsm1qk4ioPj+XvjV dAfYuDPsIs8lzdF3SwkAgDKLU94OaSUuCL+wWmXYgNjy/lBENPy/Vl20fQuUafNX Q5FKUEwbPmFfWlWPlOKjpUwzD+B/QQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:12 2025 by rpki-client