$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c96d8fba-6779-31c7-84da-36c8a1315169.roa File: c96d8fba-6779-31c7-84da-36c8a1315169.roa (raw, json) Hash identifier: FgrDjoHBGVvx848DmpvtIR5UitCGeE7QuOi0rdLSj4c= Subject key identifier: 5C:4F:C5:FE:05:84:5E:9A:DC:7E:4C:A2:F8:6D:E9:B1:7B:CF:78:69 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C1AE0F6DE92DF7AFDD700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c96d8fba-6779-31c7-84da-36c8a1315169.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.24.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:1a:e0:f6:de:92:df:7a:fd:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=de097e75-8c8d-42c3-931c-b91e90b2ad06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:09:c4:d4:d3:6d:eb:aa:3c:6a:73:86:27:0d: 47:3f:3e:aa:89:8c:df:f8:f8:23:ac:4c:24:f7:31: 08:b4:88:6d:49:17:04:2a:ba:81:8e:fd:e9:0f:e4: 34:1a:b9:cf:f1:22:4e:78:1d:a0:24:2e:be:57:2d: 7a:c0:4b:d3:ef:da:7c:e1:57:c6:4f:1e:da:3b:8a: c5:55:9d:6a:05:36:87:e7:87:30:94:90:22:84:4c: f6:e4:88:fa:27:8d:83:63:e4:e6:09:f6:15:75:4a: 2f:ed:03:b3:77:b7:46:a4:07:ed:00:67:a4:e0:c0: 3e:b6:c9:8c:37:9e:e7:fe:1e:37:ed:31:fd:7a:ab: 0d:6a:0d:2b:38:d1:77:3c:17:96:77:8d:31:d6:af: f8:36:3e:e5:df:fa:15:84:93:7e:c8:43:44:fc:26: a0:3f:57:7f:d8:57:aa:72:e1:f8:31:51:5e:ee:40: 8b:57:bf:aa:4b:41:50:10:cf:97:08:43:1b:1b:0d: 2c:c8:d4:5b:9c:69:6c:12:2b:17:9c:b7:06:8b:8c: 1e:fa:fc:59:52:5b:76:e6:1c:34:bc:b3:80:44:5f: 62:ee:33:ac:00:93:05:f6:6d:3c:b4:47:92:50:ad: 49:78:05:9c:0a:06:49:f8:79:83:27:c1:51:de:93: 22:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:4F:C5:FE:05:84:5E:9A:DC:7E:4C:A2:F8:6D:E9:B1:7B:CF:78:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c96d8fba-6779-31c7-84da-36c8a1315169.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.24.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:12:cb:0a:36:27:98:49:19:db:85:3f:7d:9c:41:80:14:32: a4:11:1b:de:44:da:40:b2:87:a1:27:e1:88:68:de:52:6e:14: b3:a9:7f:94:15:99:7f:df:8b:d3:b6:7f:32:e8:aa:d8:3d:84: 3a:df:0b:20:c4:94:c5:62:94:06:e2:0b:cf:c3:eb:b5:be:d9: 81:29:8c:74:cc:50:7b:24:b4:2e:10:9a:9e:fb:d6:46:a4:b8: 58:39:7c:8d:03:bd:32:88:3f:af:e8:7d:04:f9:d4:c6:d6:c8: 19:5f:98:a0:39:c2:60:80:68:b0:c9:4e:cc:f9:d3:63:78:95: 4f:58:2d:5a:13:21:ab:5c:f0:8a:68:04:6c:61:64:b2:03:e2: f5:1a:3c:2a:4a:44:be:74:e0:ca:3c:5f:90:98:55:e5:eb:c0: 2c:7f:72:cd:52:ec:88:d4:5b:a2:06:ac:48:8f:c2:38:75:6f: a5:97:75:a0:e9:1a:1e:c4:fa:0c:c9:71:4e:2b:91:72:1c:0a: e2:41:9e:89:05:4b:b8:32:b5:04:ed:e9:ab:1f:d4:ef:97:88: 07:74:a6:c0:bf:7d:6a:ec:ca:8b:15:54:e0:8e:41:8e:4d:cb: be:6d:60:13:8b:40:99:3a:a1:d3:08:a5:56:3b:9d:8e:58:d8: c1:84:9b:df -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjITBrg9t6S33r91wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZGUwOTdlNzUtOGM4ZC00MmMzLTkzMWMtYjkxZTkwYjJhZDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAnE1NNt66o8anOGJw1HPz6qiYzf+PgjrEwk 9zEItIhtSRcEKrqBjv3pD+Q0GrnP8SJOeB2gJC6+Vy16wEvT79p84VfGTx7aO4rF VZ1qBTaH54cwlJAihEz25Ij6J42DY+TmCfYVdUov7QOzd7dGpAftAGek4MA+tsmM N57n/h437TH9eqsNag0rONF3PBeWd40x1q/4Nj7l3/oVhJN+yENE/CagP1d/2Feq cuH4MVFe7kCLV7+qS0FQEM+XCEMbGw0syNRbnGlsEisXnLcGi4we+vxZUlt25hw0 vLOARF9i7jOsAJMF9m08tEeSUK1JeAWcCgZJ+HmDJ8FR3pMilwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFxPxf4FhF6a3H5Movht6bF7z3hpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzk2ZDhmYmEtNjc3OS0z MWM3LTg0ZGEtMzZjOGExMzE1MTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIhgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEApxLLCjYnmEkZ24U/fZxBgBQypBEb3kTaQLKHoSfhiGjeUm4Us6l/lBWZ f9+L07Z/Muiq2D2EOt8LIMSUxWKUBuILz8Prtb7ZgSmMdMxQeyS0LhCanvvWRqS4 WDl8jQO9Mog/r+h9BPnUxtbIGV+YoDnCYIBosMlOzPnTY3iVT1gtWhMhq1zwimgE bGFksgPi9Ro8KkpEvnTgyjxfkJhV5evALH9yzVLsiNRbogasSI/COHVvpZd1oOka HsT6DMlxTiuRchwK4kGeiQVLuDK1BO3pqx/U75eIB3SmwL99auzKixVU4I5Bjk3L vm1gE4tAmTqh0wilVjudjljYwYSb3w== -----END CERTIFICATE-----Generated at Fri Apr 4 21:49:48 2025 by rpki-client