$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb8e632e-956c-30b5-a30a-a6f48a2ffc09.roa File: cb8e632e-956c-30b5-a30a-a6f48a2ffc09.roa (raw, json) Hash identifier: QJEHd/+lTNjEg265yHprAZg8VwduXVvdC6jIEde4VeQ= Subject key identifier: AE:F7:9D:26:EF:2E:C1:35:AF:A0:97:2A:1A:40:E9:62:37:69:CA:3C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584834555ABA7D6D26C9FF50DC00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb8e632e-956c-30b5-a30a-a6f48a2ffc09.roa Signing time: Sat 14 Dec 2024 14:00:52 +0000 ROA not before: Sat 14 Dec 2024 14:00:52 +0000 ROA not after: Fri 14 Mar 2025 13:00:52 +0000 asID: 396982 IP address blocks: 34.12.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:34:55:5a:ba:7d:6d:26:c9:ff:50:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Dec 14 14:00:52 2024 GMT Not After : Mar 14 13:00:52 2025 GMT Subject: CN=e077b055-d422-4380-bf00-121642cd377c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a7:a6:2c:b5:48:f7:d4:66:ec:3a:f5:de:52: 66:e0:34:9c:e8:fb:94:ec:c6:0f:df:52:65:33:22: 63:cb:e8:08:42:f4:03:01:81:a4:a4:30:1a:4b:67: 28:26:2a:af:87:f5:12:0d:83:cc:59:61:1a:6e:23: 9e:7c:12:87:70:80:7c:60:cc:d4:92:0f:d1:8c:bf: 97:62:d5:7b:34:8d:6c:af:23:dd:9d:2a:bd:31:3a: ed:bb:9c:ea:26:03:5e:0a:24:2e:77:ac:b7:1a:b2: e1:84:3b:3b:2d:0c:73:7f:b3:cd:5a:ef:a5:e9:0a: 58:7b:11:37:d0:43:77:76:63:ad:f6:e6:67:24:85: 3c:78:82:a4:fe:83:ff:66:59:aa:7b:f5:d3:54:cd: 6d:9a:28:67:6e:de:3b:d2:d3:51:dd:b4:e1:37:ac: d5:96:58:7d:33:00:5b:08:e3:50:0c:07:72:b9:06: f0:03:c2:7d:4c:c0:fa:c3:c5:e6:17:9f:60:5c:a3: 14:83:f5:66:71:dd:f8:b1:4a:b4:01:f1:bf:d6:3b: 01:d3:5c:9f:64:6a:84:88:a1:43:b6:99:3d:24:88: 57:8d:d7:60:f9:b2:71:e8:ae:19:62:4f:90:63:d9: 2a:17:2e:ee:4c:0e:66:47:76:24:28:d7:9c:a1:ad: 5d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F7:9D:26:EF:2E:C1:35:AF:A0:97:2A:1A:40:E9:62:37:69:CA:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb8e632e-956c-30b5-a30a-a6f48a2ffc09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.12.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:ae:5b:92:d9:49:56:8e:a0:6f:7f:1e:26:ce:e9:46:41:cb: e6:0c:df:ef:7b:b5:03:b3:e7:80:41:36:00:88:da:4e:35:5e: 30:f4:64:a9:48:eb:c1:d2:f8:83:5b:ee:98:cc:4e:d9:4f:8a: d8:d8:67:9d:31:f0:f2:98:e3:76:81:ba:aa:1e:8d:34:16:81: 70:f9:96:f8:fe:43:41:16:9a:c0:73:48:ad:12:c6:72:50:38: ae:d1:ba:a1:96:7d:0c:f0:fc:77:37:c1:43:de:6e:47:58:97: b8:73:a2:fc:ed:48:30:c4:fe:1b:8f:e1:f6:53:20:42:05:62: bb:0e:2c:b3:49:2b:1b:5d:7c:60:3e:04:e7:dd:56:19:4f:75: 72:31:41:8b:5e:7f:b6:e7:a5:fd:42:09:50:4f:b1:7d:f6:76: 73:7c:d9:18:5f:80:38:58:3a:3d:84:2d:02:32:0b:87:28:a9: 75:23:bb:65:b2:89:6e:04:da:b9:99:c8:94:43:4f:67:35:32: d2:1b:75:e4:45:68:b9:9e:b2:5f:07:8e:e0:7c:b9:b7:2b:59: 23:6b:03:63:8f:79:af:73:17:84:2a:74:66:39:72:34:51:b0: e7:65:38:89:d8:1f:1d:20:39:0f:31:2d:ee:f7:34:17:28:ba: a9:b2:ce:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg0VVq6fW0myf9Q3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk ZTA3N2IwNTUtZDQyMi00MzgwLWJmMDAtMTIxNjQyY2QzNzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aemLLVI99Rm7Dr13lJm4DSc6PuU7MYP31Jl MyJjy+gIQvQDAYGkpDAaS2coJiqvh/USDYPMWWEabiOefBKHcIB8YMzUkg/RjL+X YtV7NI1sryPdnSq9MTrtu5zqJgNeCiQud6y3GrLhhDs7LQxzf7PNWu+l6QpYexE3 0EN3dmOt9uZnJIU8eIKk/oP/Zlmqe/XTVM1tmihnbt470tNR3bThN6zVllh9MwBb CONQDAdyuQbwA8J9TMD6w8XmF59gXKMUg/Vmcd34sUq0AfG/1jsB01yfZGqEiKFD tpk9JIhXjddg+bJx6K4ZYk+QY9kqFy7uTA5mR3YkKNecoa1dtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK73nSbvLsE1r6CXKhpA6WI3aco8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2I4ZTYzMmUtOTU2Yy0z MGI1LWEzMGEtYTZmNDhhMmZmYzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIgwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2uW5LZSVaOoG9/HibO6UZBy+YM3+97tQOz54BBNgCI2k41XjD0ZKlI 68HS+INb7pjMTtlPitjYZ50x8PKY43aBuqoejTQWgXD5lvj+Q0EWmsBzSK0SxnJQ OK7RuqGWfQzw/Hc3wUPebkdYl7hzovztSDDE/huP4fZTIEIFYrsOLLNJKxtdfGA+ BOfdVhlPdXIxQYtef7bnpf1CCVBPsX32dnN82RhfgDhYOj2ELQIyC4coqXUju2Wy iW4E2rmZyJRDT2c1MtIbdeRFaLmesl8HjuB8ubcrWSNrA2OPea9zF4QqdGY5cjRR sOdlOInYHx0gOQ8xLe73NBcouqmyzrk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:13 2025 by rpki-client