$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afca1274-387b-3c98-94ee-429f3b804b79.roa File: afca1274-387b-3c98-94ee-429f3b804b79.roa (raw, json) Hash identifier: MbjzEQyHHfmxGPNlI1btufKSd5sqr0KidCeaVQ75Ncw= Subject key identifier: 40:66:22:62:EC:31:5B:BF:A3:1A:DC:A0:3F:66:9B:B6:EB:F9:D5:A3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BEFEF26F36E02C8C8F440 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afca1274-387b-3c98-94ee-429f3b804b79.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.176.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:ef:ef:26:f3:6e:02:c8:c8:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=1485e787-dbd1-420c-9489-779d4ae5f610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d0:a0:c5:03:68:6d:25:71:48:60:8c:0b:56: e4:00:17:3a:62:5b:03:8e:c4:00:60:1c:1e:70:4d: 9c:00:03:02:21:b0:a6:23:a3:78:63:37:b1:20:29: ce:33:74:5b:30:c4:2e:f3:20:00:f4:23:23:53:45: 68:db:9e:a7:9a:4d:41:05:a8:1e:3e:39:20:3d:09: 2b:c3:aa:09:c1:9f:00:92:fd:ea:b7:7d:dd:ad:5b: 52:7f:da:ee:52:47:3c:07:c5:b1:e2:e0:18:f4:6d: 51:0f:b3:d2:4c:8c:21:73:6f:85:32:62:1b:79:f0: 53:e9:b5:41:34:01:45:c2:12:ec:79:92:96:e0:ec: 50:f1:8a:dd:70:0d:92:8f:81:01:1e:cb:77:92:b0: 05:e0:5e:4a:c7:01:8e:ad:62:ba:2b:9c:56:48:b1: 6e:11:96:50:ae:05:ca:15:c4:bb:2e:e9:55:34:b7: 19:9a:82:44:90:76:15:6e:a4:ba:eb:74:15:c8:bb: 66:3c:8f:85:45:a1:09:50:16:9e:0a:c9:fc:aa:16: a9:0d:36:5b:cd:00:c9:69:1a:19:17:6a:6e:96:b4: a0:ad:1c:28:2e:bf:e2:68:3d:1e:88:06:be:6f:08: 2c:8b:4c:61:28:a7:8f:a2:49:4b:e3:21:5e:85:9f: 57:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:66:22:62:EC:31:5B:BF:A3:1A:DC:A0:3F:66:9B:B6:EB:F9:D5:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afca1274-387b-3c98-94ee-429f3b804b79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.176.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:fc:b8:d9:25:33:84:b7:1c:ba:22:b9:82:37:09:bc:bb:57: c3:3c:58:21:26:c5:8f:70:b3:be:b6:ec:1a:54:8e:98:96:0d: 03:60:05:20:07:26:af:2c:ce:82:a5:73:2a:c4:41:d0:07:fa: 94:d4:ed:4f:ad:86:f4:31:20:e7:9d:32:5f:1f:4b:6f:99:0d: 48:b4:cf:0c:bb:26:d3:34:0d:4f:5f:5f:1e:24:09:5b:bc:56: 2f:03:57:c2:59:bc:99:e9:83:d0:b8:c4:b7:b1:0d:5d:af:c7: 7b:3e:1c:8f:e4:2a:4f:84:12:99:7c:39:d0:b5:31:16:1d:43: 96:1f:a5:1a:28:d7:6a:e1:ff:68:8b:46:06:3e:f8:78:c9:e4: 4a:7d:ef:1b:dc:79:ae:e5:89:aa:71:36:e0:d5:1f:c0:c2:3c: 47:95:2a:b2:6b:c4:ea:c1:3d:6a:6a:d6:82:de:82:9a:ba:a7: 2a:8a:66:d7:88:ee:ed:21:78:e3:3a:c3:8f:df:ba:cf:de:cd: b3:95:2f:68:8b:a8:a2:f1:10:1c:e2:4d:1a:b2:ca:ef:73:34: f0:4c:b3:a1:31:ca:f3:f2:f4:4d:1e:86:32:7b:8a:5d:55:88: 99:ad:91:f8:a7:74:e2:74:8a:c1:87:83:ac:c4:bd:31:a2:10: 8c:5b:f2:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+/vJvNuAsjI9EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MTQ4NWU3ODctZGJkMS00MjBjLTk0ODktNzc5ZDRhZTVmNjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9CgxQNobSVxSGCMC1bkABc6YlsDjsQAYBwe cE2cAAMCIbCmI6N4YzexICnOM3RbMMQu8yAA9CMjU0Vo256nmk1BBagePjkgPQkr w6oJwZ8Akv3qt33drVtSf9ruUkc8B8Wx4uAY9G1RD7PSTIwhc2+FMmIbefBT6bVB NAFFwhLseZKW4OxQ8YrdcA2Sj4EBHst3krAF4F5KxwGOrWK6K5xWSLFuEZZQrgXK FcS7LulVNLcZmoJEkHYVbqS663QVyLtmPI+FRaEJUBaeCsn8qhapDTZbzQDJaRoZ F2pulrSgrRwoLr/iaD0eiAa+bwgsi0xhKKePoklL4yFehZ9XPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBmImLsMVu/oxrcoD9mm7br+dWjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWZjYTEyNzQtMzg3Yi0z Yzk4LTk0ZWUtNDI5ZjNiODA0Yjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIrCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHv8uNklM4S3HLoiuYI3Cby7V8M8WCEmxY9ws7627BpUjpiWDQNgBSAH Jq8szoKlcyrEQdAH+pTU7U+thvQxIOedMl8fS2+ZDUi0zwy7JtM0DU9fXx4kCVu8 Vi8DV8JZvJnpg9C4xLexDV2vx3s+HI/kKk+EEpl8OdC1MRYdQ5YfpRoo12rh/2iL RgY++HjJ5Ep97xvcea7liapxNuDVH8DCPEeVKrJrxOrBPWpq1oLegpq6pyqKZteI 7u0heOM6w4/fus/ezbOVL2iLqKLxEBziTRqyyu9zNPBMs6ExyvPy9E0ehjJ7il1V iJmtkfindOJ0isGHg6zEvTGiEIxb8uk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:32:04 2025 by rpki-client