$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b440c9e2-2b92-3d31-bc26-3557fa6c623a.roa File: b440c9e2-2b92-3d31-bc26-3557fa6c623a.roa (raw, json) Hash identifier: QSMgptstAVIlzz7xtOoFDLra0hz06tzU4XDlKOLjEWo= Subject key identifier: 53:8C:ED:FF:0A:D2:05:32:45:6B:C7:45:03:B8:87:0E:D1:F3:35:16 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C58171F5D44590886BE2B2D0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b440c9e2-2b92-3d31-bc26-3557fa6c623a.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 34.119.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:71:f5:d4:45:90:88:6b:e2:b2:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=15c9d731-b473-4bfd-86cf-1864d0d46115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0d:1f:fb:f3:bb:5e:e0:43:08:2b:9b:4d:b3: 15:08:01:02:1b:a3:33:e8:46:2a:87:39:80:ce:80: 1c:94:df:aa:7a:80:97:0b:96:fc:63:bd:e7:a0:13: 8d:90:60:42:3d:1d:86:eb:e8:47:0e:d9:04:0d:c8: 31:a9:b5:ee:e9:e4:57:de:fe:31:e1:af:fa:7a:ed: 9f:4f:7e:7f:c8:74:1d:da:5b:ed:a1:f7:9f:16:e9: e7:47:45:c5:2e:97:22:4d:f0:0c:8a:1b:be:f2:83: d8:e7:4b:97:ca:cc:dd:61:d2:d2:b2:fa:43:80:e7: d2:f6:27:e0:4c:22:97:9b:f6:f3:c2:36:4f:fd:fc: e6:d4:33:61:5b:1c:9f:c4:43:c5:84:54:dc:2c:7d: 1d:0e:f7:21:8e:96:76:9b:ff:02:8f:11:c5:bd:18: b8:53:8a:6e:cc:c2:f7:bb:98:86:16:93:ee:0b:de: 67:04:98:9b:08:82:07:31:b2:4c:fc:51:9d:3f:3f: ea:0b:50:78:13:41:9c:af:22:15:f8:10:48:b0:5f: ca:bf:1e:87:aa:69:39:0f:48:3b:bc:5e:6a:79:34: 1a:90:66:8f:34:80:ca:83:e4:c8:07:7f:dc:fe:ce: d5:4f:11:40:f4:17:16:08:85:d6:06:c2:1a:68:fc: ae:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:8C:ED:FF:0A:D2:05:32:45:6B:C7:45:03:B8:87:0E:D1:F3:35:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b440c9e2-2b92-3d31-bc26-3557fa6c623a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.119.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:6a:c3:a6:f6:06:10:02:a1:39:f6:df:5a:00:e7:3f:c1:e5: cd:59:b3:cf:b4:dc:c3:20:b3:c1:dd:14:78:ac:a0:00:cb:2c: 1e:96:75:a0:cf:2c:e1:d2:4d:e2:14:e2:b5:aa:f1:2b:5b:78: de:55:8c:60:b7:34:5c:c6:c9:9e:25:dd:f8:9e:84:66:42:62: f3:7a:db:69:12:f6:42:a2:a0:73:67:94:73:33:f1:d8:91:e1: 1f:b4:ef:90:4e:1c:b3:c4:7a:14:c8:76:ca:a6:fd:f8:f9:90: 1c:2b:e0:0b:4f:15:a7:4c:df:48:c5:29:37:e1:92:66:21:f1: 24:a5:fc:84:6d:ef:7b:7b:32:23:df:23:5e:0d:9d:29:23:b0: 7e:bb:cc:04:76:bb:bd:ca:13:1d:c6:43:ec:0a:c7:94:ae:6a: 38:ba:2c:f1:d7:16:6d:e8:50:c8:c6:24:de:60:54:11:8c:f3: de:85:de:cc:cc:50:e4:14:55:3d:0e:2e:ce:26:22:75:04:03: 31:00:9e:d5:2c:e1:cc:5c:0d:0f:2d:6a:cc:f6:0d:29:59:3f: 11:c6:c6:19:42:f1:73:2d:68:7e:53:43:e9:2f:79:1d:34:b9: 2e:91:de:51:20:b8:e6:5d:1e:f2:c7:03:a9:fb:19:a4:e1:a9: 71:f0:b8:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXH11EWQiGvistAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MTVjOWQ3MzEtYjQ3My00YmZkLTg2Y2YtMTg2NGQwZDQ2MTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw0f+/O7XuBDCCubTbMVCAECG6Mz6EYqhzmA zoAclN+qeoCXC5b8Y73noBONkGBCPR2G6+hHDtkEDcgxqbXu6eRX3v4x4a/6eu2f T35/yHQd2lvtofefFunnR0XFLpciTfAMihu+8oPY50uXyszdYdLSsvpDgOfS9ifg TCKXm/bzwjZP/fzm1DNhWxyfxEPFhFTcLH0dDvchjpZ2m/8CjxHFvRi4U4puzML3 u5iGFpPuC95nBJibCIIHMbJM/FGdPz/qC1B4E0GcryIV+BBIsF/Kvx6Hqmk5D0g7 vF5qeTQakGaPNIDKg+TIB3/c/s7VTxFA9BcWCIXWBsIaaPyuDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOM7f8K0gUyRWvHRQO4hw7R8zUWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjQ0MGM5ZTItMmI5Mi0z ZDMxLWJjMjYtMzU1N2ZhNmM2MjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxqw6b2BhACoTn231oA5z/B5c1Zs8+03MMgs8HdFHisoADLLB6WdaDP LOHSTeIU4rWq8StbeN5VjGC3NFzGyZ4l3fiehGZCYvN622kS9kKioHNnlHMz8diR 4R+075BOHLPEehTIdsqm/fj5kBwr4AtPFadM30jFKTfhkmYh8SSl/IRt73t7MiPf I14NnSkjsH67zAR2u73KEx3GQ+wKx5Suaji6LPHXFm3oUMjGJN5gVBGM896F3szM UOQUVT0OLs4mInUEAzEAntUs4cxcDQ8tasz2DSlZPxHGxhlC8XMtaH5TQ+kveR00 uS6R3lEguOZdHvLHA6n7GaThqXHwuBc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:48 2025 by rpki-client