$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bffaf8fc-b727-38eb-aa08-5e4b0640cb7e.roa File: bffaf8fc-b727-38eb-aa08-5e4b0640cb7e.roa (raw, json) Hash identifier: LYhRpNXs9qfN16zlWsPpG1zIMJ015joFANiCdsnVt2k= Subject key identifier: 9C:C5:BC:AE:08:D0:ED:B8:67:30:E4:7A:FF:3A:77:BC:7C:85:D9:DE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BE1BCE81B216B90F1C880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bffaf8fc-b727-38eb-aa08-5e4b0640cb7e.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.128.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:e1:bc:e8:1b:21:6b:90:f1:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=4f7bacda-df42-449e-98cf-444849521312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:65:a3:ab:d9:20:08:bd:1c:da:89:4e:24:3e: 9c:93:cd:75:48:7f:4d:a8:ac:e5:d6:0d:aa:1a:4a: d2:4b:9b:72:cd:63:09:f6:9a:d6:36:f4:fe:9e:c6: 87:97:bb:cf:87:83:b9:50:e0:1a:15:4e:b3:92:f0: 94:0e:72:e4:a6:48:9f:e0:08:62:4d:52:e4:4f:22: c2:9d:d7:5f:1c:66:dc:9b:aa:6e:fc:07:3d:a4:19: b4:f1:34:54:70:99:a4:db:66:67:60:eb:b7:04:8a: c8:00:64:72:e7:0a:3c:cb:f3:cb:25:5c:9b:51:09: ee:af:65:33:32:f3:54:cd:3c:7f:d7:f5:8d:a6:14: 5c:a8:aa:6f:9b:6d:30:b3:f2:bc:e5:e3:71:b1:cc: 76:16:da:ea:ec:14:47:07:ef:9d:08:b7:60:ec:bd: d6:37:57:38:b9:50:93:df:9e:ac:d3:5a:11:95:f9: d5:e1:4b:fa:6a:50:7c:1c:a8:fe:36:d4:76:4f:0c: 4d:da:43:e9:77:ac:65:41:eb:de:d8:08:87:4f:60: 76:f3:c6:f0:6d:ba:04:ff:fd:12:89:35:c5:9e:4f: 3d:77:29:49:4c:38:11:17:d1:ed:0c:ad:f9:ef:d3: cd:bb:de:49:de:13:68:62:bf:d6:6d:b8:9d:09:21: 8d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C5:BC:AE:08:D0:ED:B8:67:30:E4:7A:FF:3A:77:BC:7C:85:D9:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bffaf8fc-b727-38eb-aa08-5e4b0640cb7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.128.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:ba:58:06:d6:f6:42:56:a8:30:cc:d8:8b:15:e5:bb:2a:fe: e6:a5:4a:07:54:d0:ed:d7:01:96:2b:c6:db:49:5f:cd:8d:bc: 06:31:2b:51:17:11:8a:2a:91:61:b5:89:f8:60:d2:bd:4b:ef: 07:39:2d:55:bc:93:d6:ee:b4:cb:33:f9:3b:2a:4f:57:b3:c4: 3c:bc:07:ca:80:f6:aa:d8:7f:a9:f8:c5:e2:84:39:fd:57:d2: 20:25:c9:af:2c:20:c0:07:ed:16:c0:97:5d:0d:40:39:91:8d: 4d:06:d5:6c:00:47:12:8a:3d:14:77:8d:d6:96:77:df:9f:1d: d4:27:cf:7b:b0:25:01:f5:aa:03:b4:33:b0:e1:99:0f:20:99: 7d:16:35:ef:0e:28:1d:d5:90:df:0a:c9:39:36:55:f4:d1:80: 1f:c5:59:f0:2f:02:7e:17:83:81:0a:20:c4:95:06:da:b8:0d: 8b:32:6b:3d:96:35:8a:15:b0:88:56:fa:ec:cb:a6:e1:94:12: 71:69:8e:b7:fc:5d:f4:a1:b8:68:af:ca:47:be:38:62:47:b8: 4b:92:34:e8:1d:e5:0e:26:c2:0a:6e:fc:eb:45:ff:2c:50:9b: 51:66:01:bd:1e:2a:e4:4d:1b:87:f5:91:b7:2d:12:a1:32:87: c4:92:80:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+G86Bsha5DxyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NGY3YmFjZGEtZGY0Mi00NDllLTk4Y2YtNDQ0ODQ5NTIxMzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmWjq9kgCL0c2olOJD6ck811SH9NqKzl1g2q GkrSS5tyzWMJ9prWNvT+nsaHl7vPh4O5UOAaFU6zkvCUDnLkpkif4AhiTVLkTyLC nddfHGbcm6pu/Ac9pBm08TRUcJmk22ZnYOu3BIrIAGRy5wo8y/PLJVybUQnur2Uz MvNUzTx/1/WNphRcqKpvm20ws/K85eNxscx2Ftrq7BRHB++dCLdg7L3WN1c4uVCT 356s01oRlfnV4Uv6alB8HKj+NtR2TwxN2kPpd6xlQeve2AiHT2B288bwbboE//0S iTXFnk89dylJTDgRF9HtDK3579PNu95J3hNoYr/WbbidCSGNuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzFvK4I0O24ZzDkev86d7x8hdneMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmZmYWY4ZmMtYjcyNy0z OGViLWFhMDgtNWU0YjA2NDBjYjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIoD8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJm6WAbW9kJWqDDM2IsV5bsq/ualSgdU0O3XAZYrxttJX82NvAYxK1EX EYoqkWG1ifhg0r1L7wc5LVW8k9butMsz+TsqT1ezxDy8B8qA9qrYf6n4xeKEOf1X 0iAlya8sIMAH7RbAl10NQDmRjU0G1WwARxKKPRR3jdaWd9+fHdQnz3uwJQH1qgO0 M7DhmQ8gmX0WNe8OKB3VkN8KyTk2VfTRgB/FWfAvAn4Xg4EKIMSVBtq4DYsyaz2W NYoVsIhW+uzLpuGUEnFpjrf8XfShuGivyke+OGJHuEuSNOgd5Q4mwgpu/OtF/yxQ m1FmAb0eKuRNG4f1kbctEqEyh8SSgBg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:13 2025 by rpki-client