$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a8770b90-df37-3eb5-8dc4-47f9216b080d.roa File: a8770b90-df37-3eb5-8dc4-47f9216b080d.roa (raw, json) Hash identifier: RstzfDrx9AyIprfRYae/DrlBmdr5/18NYDlPP+O33mE= Subject key identifier: 12:6C:6C:D8:6E:32:20:F1:A4:1B:5B:5F:E5:AB:EC:C4:4F:45:89:E5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C22209387A0840F28DC40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a8770b90-df37-3eb5-8dc4-47f9216b080d.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.177.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:22:20:93:87:a0:84:0f:28:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=0ede50ff-fb17-4be6-a482-4df706f0afad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5f:57:79:12:5e:72:85:b2:55:9c:68:9c:9c: 75:55:f8:c4:90:e2:ee:1f:47:0a:b1:da:38:b1:55: 03:ca:13:51:d5:95:1b:3e:4f:dc:d3:05:de:9d:bc: ac:f3:eb:ca:65:47:69:0e:82:f4:1a:4f:8c:57:48: 69:b8:b4:09:0f:70:75:ab:bd:94:60:3b:8d:1d:99: 78:3c:c4:49:aa:38:ed:0b:c4:67:b5:ec:1e:32:5b: 29:6e:9c:3b:1c:1a:f7:74:a7:6b:fa:71:79:5f:56: 13:43:26:be:76:f1:01:f4:35:6e:f8:09:38:44:9b: 82:d5:28:ba:0f:e9:fa:f3:b6:9f:be:da:33:ca:de: 96:36:a8:d4:90:29:fa:66:cf:69:ee:fd:f9:ce:8a: 66:d8:f1:cc:20:9f:65:16:1a:5a:b5:c1:ec:d5:f9: d7:b3:1d:69:0b:1f:e9:65:05:48:f9:a4:6f:ab:b0: 56:8c:1b:9d:9a:14:de:96:d1:f1:a8:a6:30:4f:6e: 1c:b4:59:0c:f1:f8:e4:9c:28:63:78:00:58:e9:a9: 7c:31:2a:37:3e:ca:c4:35:7e:1b:8d:a5:15:c1:18: 7c:6a:a7:06:ac:b6:c4:32:e4:64:83:c2:21:86:6d: 18:ee:5c:6d:5d:fc:d6:5f:d1:d4:36:98:59:56:3c: 95:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:6C:6C:D8:6E:32:20:F1:A4:1B:5B:5F:E5:AB:EC:C4:4F:45:89:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a8770b90-df37-3eb5-8dc4-47f9216b080d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.177.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:ab:5b:f7:cb:08:4d:fa:bb:b0:bf:55:f6:d2:96:a8:96:7e: 69:74:0c:da:dd:c9:f2:42:b3:ca:3c:2c:b0:c5:8c:f1:a9:27: fa:b6:98:09:d0:87:02:96:09:04:34:62:5d:aa:ea:e0:45:31: d2:75:6b:1d:3c:18:e3:14:be:00:a7:d6:7e:b8:3c:72:49:8b: af:2b:8a:20:29:ac:7c:6d:0d:1b:21:2f:b9:46:62:0f:a7:0b: f9:7f:ee:7d:5f:da:5d:53:12:e2:3a:0e:f4:01:f9:8c:5c:6d: 7d:83:cc:58:eb:7a:7a:09:04:ce:73:58:98:da:b7:32:b9:0c: 34:7e:76:28:5b:ad:3e:f8:07:6e:1c:95:d8:52:89:66:d1:4c: 04:b4:55:77:9e:e7:1d:5c:ad:02:28:e4:0f:3a:c6:2a:bb:eb: a2:54:39:3e:05:09:d4:b1:2f:cd:d1:e7:c3:8c:47:1b:42:e3: 63:e8:95:a6:82:be:33:c4:f0:02:1c:05:70:b9:b8:ff:38:50: eb:d3:ac:be:35:4a:da:bc:d6:ab:5d:b2:a5:a8:fa:70:54:55: e6:50:b3:a5:08:f1:b6:45:7f:0d:39:fb:c1:b6:6f:83:fd:76: 8e:c3:01:f0:71:51:59:7d:5e:e0:9a:53:b5:b4:a4:95:9d:be: 47:6d:ae:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITCIgk4eghA8o3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MGVkZTUwZmYtZmIxNy00YmU2LWE0ODItNGRmNzA2ZjBhZmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV9XeRJecoWyVZxonJx1VfjEkOLuH0cKsdo4 sVUDyhNR1ZUbPk/c0wXenbys8+vKZUdpDoL0Gk+MV0hpuLQJD3B1q72UYDuNHZl4 PMRJqjjtC8RnteweMlspbpw7HBr3dKdr+nF5X1YTQya+dvEB9DVu+Ak4RJuC1Si6 D+n687afvtozyt6WNqjUkCn6Zs9p7v35zopm2PHMIJ9lFhpatcHs1fnXsx1pCx/p ZQVI+aRvq7BWjBudmhTeltHxqKYwT24ctFkM8fjknChjeABY6al8MSo3PsrENX4b jaUVwRh8aqcGrLbEMuRkg8Ihhm0Y7lxtXfzWX9HUNphZVjyVlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJsbNhuMiDxpBtbX+Wr7MRPRYnlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTg3NzBiOTAtZGYzNy0z ZWI1LThkYzQtNDdmOTIxNmIwODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIrEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmrW/fLCE36u7C/VfbSlqiWfml0DNrdyfJCs8o8LLDFjPGpJ/q2mAnQ hwKWCQQ0Yl2q6uBFMdJ1ax08GOMUvgCn1n64PHJJi68riiAprHxtDRshL7lGYg+n C/l/7n1f2l1TEuI6DvQB+YxcbX2DzFjrenoJBM5zWJjatzK5DDR+dihbrT74B24c ldhSiWbRTAS0VXee5x1crQIo5A86xiq766JUOT4FCdSxL83R58OMRxtC42PolaaC vjPE8AIcBXC5uP84UOvTrL41Stq81qtdsqWo+nBUVeZQs6UI8bZFfw05+8G2b4P9 do7DAfBxUVl9XuCaU7W0pJWdvkdtrvQ= -----END CERTIFICATE-----Generated at Fri Apr 4 21:05:56 2025 by rpki-client