$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2c4c52a-e1fc-393e-9e2a-eb5b7d9083a8.roa File: d2c4c52a-e1fc-393e-9e2a-eb5b7d9083a8.roa (raw, json) Hash identifier: Yffa7v7WZgfTuM3EPeF15Gm0/z+HAsmJATV5G0oLiQ8= Subject key identifier: 00:5E:63:8D:6E:63:8B:4A:27:09:37:ED:53:BF:BC:A8:22:40:C6:95 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BC4F426BE1510E3E1A600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2c4c52a-e1fc-393e-9e2a-eb5b7d9083a8.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.16.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:c4:f4:26:be:15:10:e3:e1:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=1d7e8c01-1da5-4e60-855b-dbf3f0871b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b8:5d:a5:14:5f:57:ef:88:c8:88:6c:73:99: 15:1a:36:f5:92:f4:d1:e6:75:9a:af:f0:5b:52:e5: d0:ed:86:a2:a5:0d:aa:da:6f:6d:02:96:2f:62:73: 27:69:4f:15:79:a8:5f:cb:e4:1c:0e:92:40:4c:08: 09:3b:9b:22:38:05:a3:fb:37:1a:1c:71:ef:af:59: 94:63:2f:8c:51:c2:cd:77:87:3d:16:fe:46:b6:17: 1d:a6:e4:50:c2:8b:7a:4c:7a:48:fa:e6:75:cd:f7: 82:ab:51:6e:cb:59:e6:ad:ad:df:8c:43:58:fe:a9: ef:3c:fd:2b:86:1c:c2:56:94:15:1a:59:12:d0:1c: ec:36:c0:15:48:d9:8f:55:91:bc:e4:65:67:9f:96: db:9e:75:a0:38:34:5a:b9:b7:ec:be:f9:54:b3:8d: 41:b6:f2:29:1a:80:f6:2b:c1:bb:d8:97:7c:90:60: d2:1d:df:d7:e1:c4:25:0e:69:41:3e:f4:e4:c5:a4: a0:68:b0:da:2e:73:01:04:d4:47:d8:c6:7f:b6:c3: 0a:92:cb:24:2b:ba:fd:c0:57:5f:92:85:ca:0d:9f: be:33:53:05:c3:cf:44:07:70:a9:3f:f6:b1:93:6d: 48:59:89:5d:e6:e3:63:c0:12:7f:78:0a:b3:be:46: 7d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5E:63:8D:6E:63:8B:4A:27:09:37:ED:53:BF:BC:A8:22:40:C6:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2c4c52a-e1fc-393e-9e2a-eb5b7d9083a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.16.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:8e:9e:f7:71:7b:83:b7:34:32:da:39:2b:33:e6:3d:f8:88: bd:97:bb:3b:23:29:4b:90:86:84:d9:91:cc:ef:c7:e8:fa:f3: e0:05:c9:d2:cf:c2:ff:f3:5c:86:1f:1a:d1:64:8a:c8:c3:64: 79:07:22:30:98:aa:3d:cc:5a:f9:f1:49:26:e3:ee:ba:cd:df: 67:73:e9:91:ca:3f:9b:f1:08:8a:7e:1d:c6:ef:eb:e6:75:d4: 85:49:f7:28:2d:e7:6f:17:5d:f1:df:ca:61:04:ba:74:06:ac: 51:87:a6:23:bc:66:b5:7e:07:9b:6f:46:f3:a7:91:f9:65:1e: bb:17:44:fc:5b:c9:6f:b6:bf:7a:71:7d:6a:96:e6:f3:8a:d0: 59:66:40:33:5a:5a:8b:5d:b4:f3:ee:aa:e5:78:8a:72:fb:4a: 1e:c4:a9:06:b4:82:0f:1c:ea:07:6d:8d:98:59:21:32:b7:d1: 21:7f:17:36:ba:85:ca:0b:01:7a:6d:0e:0a:25:83:7f:99:c2: f6:fb:43:dc:68:7d:45:1c:2c:e7:ab:28:67:e5:86:5e:34:a2: ef:8e:76:60:73:56:08:b0:d4:99:54:3f:da:b7:5f:a9:a8:af: 3e:b5:cd:04:08:bb:c1:f7:89:a2:b6:48:cd:f5:ce:c0:d7:dc: 26:c3:82:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8T0Jr4VEOPhpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MWQ3ZThjMDEtMWRhNS00ZTYwLTg1NWItZGJmM2YwODcxYjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbhdpRRfV++IyIhsc5kVGjb1kvTR5nWar/Bb UuXQ7YaipQ2q2m9tApYvYnMnaU8Veahfy+QcDpJATAgJO5siOAWj+zcaHHHvr1mU Yy+MUcLNd4c9Fv5GthcdpuRQwot6THpI+uZ1zfeCq1Fuy1nmra3fjENY/qnvPP0r hhzCVpQVGlkS0BzsNsAVSNmPVZG85GVnn5bbnnWgODRaubfsvvlUs41BtvIpGoD2 K8G72Jd8kGDSHd/X4cQlDmlBPvTkxaSgaLDaLnMBBNRH2MZ/tsMKksskK7r9wFdf koXKDZ++M1MFw89EB3CpP/axk21IWYld5uNjwBJ/eAqzvkZ9TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABeY41uY4tKJwk37VO/vKgiQMaVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDJjNGM1MmEtZTFmYy0z OTNlLTllMmEtZWI1YjdkOTA4M2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIhAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWOnvdxe4O3NDLaOSsz5j34iL2XuzsjKUuQhoTZkczvx+j68+AFydLP wv/zXIYfGtFkisjDZHkHIjCYqj3MWvnxSSbj7rrN32dz6ZHKP5vxCIp+Hcbv6+Z1 1IVJ9ygt528XXfHfymEEunQGrFGHpiO8ZrV+B5tvRvOnkfllHrsXRPxbyW+2v3px fWqW5vOK0FlmQDNaWotdtPPuquV4inL7Sh7EqQa0gg8c6gdtjZhZITK30SF/Fza6 hcoLAXptDgolg3+Zwvb7Q9xofUUcLOerKGflhl40ou+OdmBzVgiw1JlUP9q3X6mo rz61zQQIu8H3iaK2SM31zsDX3CbDgnE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:54 2025 by rpki-client