$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c11f58c0-c88a-3982-8efd-4b6cd0d094e5.roa File: c11f58c0-c88a-3982-8efd-4b6cd0d094e5.roa (raw, json) Hash identifier: yr6rEu7AM8UDGuxlna+W9dhdnpB2yt4IOUNJxwsMj5c= Subject key identifier: 28:FE:2D:61:66:61:CA:D8:A3:4D:CA:DD:13:E7:4E:CC:BA:8A:F8:61 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BEB37EC9AB76116E90580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c11f58c0-c88a-3982-8efd-4b6cd0d094e5.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 34.133.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:eb:37:ec:9a:b7:61:16:e9:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=f789771c-68c2-4f52-84c4-162a93605ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:49:71:fc:83:68:d6:38:c5:0a:9c:9a:31:1b: c7:16:e6:4b:b5:8e:c1:32:b0:4e:2a:90:b8:52:c5: d0:24:43:16:67:23:47:9e:54:f0:2f:bb:47:30:2b: b4:2b:19:c8:72:fc:51:1b:ec:9d:02:da:d1:21:75: 8f:83:fc:8b:85:72:cc:3e:74:c3:41:75:ac:5d:e8: 00:17:41:04:7b:e8:37:ce:bc:f8:43:0e:d5:5a:a2: e6:15:b5:d5:18:1c:34:e5:fb:19:50:8d:fa:cf:06: d0:c9:a3:6a:96:cb:ba:58:c3:bf:9b:0d:56:87:06: a6:37:55:ac:db:a5:52:7e:67:09:94:f9:b7:79:05: f8:7a:89:83:d4:b7:a1:e9:1b:81:3c:d4:54:5a:e0: 86:1e:e6:d5:47:84:de:0b:77:c1:d2:3f:df:e4:da: 04:9d:3d:fc:43:14:af:93:4c:30:8f:a0:1c:4c:f6: 59:82:0b:35:7f:86:fb:75:a9:8d:f3:c3:37:a9:60: e3:a7:6a:3a:c9:0b:34:5e:0b:87:63:c8:75:9e:ed: f4:76:62:55:bb:a4:18:b8:19:da:41:da:41:95:16: 88:62:db:64:e2:ea:f7:9f:42:d1:ea:3d:ff:15:e0: 7a:93:05:8c:87:d5:2a:79:16:9a:cf:15:7f:23:2e: 74:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FE:2D:61:66:61:CA:D8:A3:4D:CA:DD:13:E7:4E:CC:BA:8A:F8:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c11f58c0-c88a-3982-8efd-4b6cd0d094e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.133.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:37:e1:0c:1f:28:8a:4d:bc:43:71:fb:c9:31:89:79:86:b2: ef:f7:a1:36:35:47:9a:2b:98:d5:53:ff:e9:37:e9:32:cb:f9: e6:ab:38:77:7f:26:63:34:4e:78:0b:f0:46:11:65:9a:2a:e5: 54:cd:a7:c8:03:d6:8e:d4:54:bb:e2:0d:57:d7:79:43:41:4c: 96:97:9a:36:12:14:ca:11:f8:fd:ff:e0:b3:af:49:a0:de:4f: eb:3c:c4:52:1c:ac:42:9e:87:b5:85:21:81:60:cb:3b:e7:1c: 21:17:cc:c3:c9:48:47:c3:51:52:1c:7d:ee:12:3f:2b:cc:35: b4:73:64:ea:7b:f5:2a:18:36:09:a0:28:0c:e9:d2:7f:27:00: 7e:e8:09:9a:5b:c0:1d:64:fd:f3:ab:72:64:9d:b6:07:d4:1e: de:62:0a:49:47:49:51:e5:81:cb:b2:ac:c3:53:4f:61:14:33: 45:73:48:2d:cb:56:4b:20:0a:11:69:37:ff:f0:9e:46:09:00: 0e:80:a0:82:9d:36:38:71:13:94:f0:cb:09:18:40:09:c1:78: f0:cf:25:79:b2:bc:a7:01:30:47:c1:09:15:41:12:f3:00:95: 1b:c2:f1:44:1d:8d:dd:12:a1:e5:89:43:2b:6d:a9:11:bd:6e: 54:1e:be:f5 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjIS+s37Jq3YRbpBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk Zjc4OTc3MWMtNjhjMi00ZjUyLTg0YzQtMTYyYTkzNjA1ZWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUlx/INo1jjFCpyaMRvHFuZLtY7BMrBOKpC4 UsXQJEMWZyNHnlTwL7tHMCu0KxnIcvxRG+ydAtrRIXWPg/yLhXLMPnTDQXWsXegA F0EEe+g3zrz4Qw7VWqLmFbXVGBw05fsZUI36zwbQyaNqlsu6WMO/mw1WhwamN1Ws 26VSfmcJlPm3eQX4eomD1Leh6RuBPNRUWuCGHubVR4TeC3fB0j/f5NoEnT38QxSv k0wwj6AcTPZZggs1f4b7damN88M3qWDjp2o6yQs0XguHY8h1nu30dmJVu6QYuBna QdpBlRaIYttk4ur3n0LR6j3/FeB6kwWMh9UqeRaazxV/Iy50TQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCj+LWFmYcrYo03K3RPnTsy6ivhhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzExZjU4YzAtYzg4YS0z OTgyLThlZmQtNGI2Y2QwZDA5NGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIoUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEALzfhDB8oik28Q3H7yTGJeYay7/ehNjVHmiuY1VP/6TfpMsv55qs4d38m YzROeAvwRhFlmirlVM2nyAPWjtRUu+INV9d5Q0FMlpeaNhIUyhH4/f/gs69JoN5P 6zzEUhysQp6HtYUhgWDLO+ccIRfMw8lIR8NRUhx97hI/K8w1tHNk6nv1Khg2CaAo DOnSfycAfugJmlvAHWT986tyZJ22B9Qe3mIKSUdJUeWBy7Ksw1NPYRQzRXNILctW SyAKEWk3//CeRgkADoCggp02OHETlPDLCRhACcF48M8lebK8pwEwR8EJFUES8wCV G8LxRB2N3RKh5YlDK22pEb1uVB6+9Q== -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:41 2025 by rpki-client