$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d33260b8-8c3c-363f-a13e-61c4caf0b57f.roa File: d33260b8-8c3c-363f-a13e-61c4caf0b57f.roa (raw, json) Hash identifier: xFfUYSBew1MNJp9q8UHeXm4rvstwjVvuv5SQasK5gDU= Subject key identifier: 0D:31:C8:BC:3F:F1:AE:30:76:F0:55:C2:4D:CB:7F:2C:99:D9:06:57 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BA6B7FF8ACFAC0411FE20 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d33260b8-8c3c-363f-a13e-61c4caf0b57f.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.153.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:a6:b7:ff:8a:cf:ac:04:11:fe:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=3b4b3079-f4a2-4b61-bbdd-e2d47b8f51f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a2:cf:1b:1b:f5:bd:bf:ac:c0:a0:16:e2:ca: e5:4d:05:99:c9:f9:68:90:36:2d:3e:d3:95:3a:44: 81:b2:41:42:e3:b3:23:a9:95:a2:84:c0:84:f2:7f: 05:7f:14:7e:49:7d:51:a8:c3:51:7b:f8:69:fb:2b: 71:57:7d:e9:84:de:e4:85:ef:42:be:92:03:b4:92: aa:e7:76:2f:43:61:24:64:7e:f5:b4:38:f7:6b:e9: 6d:e4:ee:67:f0:50:00:af:2c:f7:ce:d9:62:ab:dd: 87:d0:cd:29:3d:1f:b2:6d:44:c1:01:cb:e1:f3:61: 35:2d:a9:48:b0:cf:96:52:01:49:c7:78:c1:d9:a0: c6:44:cf:b1:ed:15:47:11:17:ab:73:71:24:4e:91: 94:a9:06:29:35:97:5e:16:fc:1f:c0:d2:94:cf:6f: e4:ad:1b:2f:1e:ff:97:9a:68:4e:ce:ff:8e:ce:f8: 72:c1:67:4f:ae:b5:f4:3c:85:8a:e6:f8:c6:86:ee: 8c:2a:4f:e5:3e:cd:1a:35:6d:a3:bb:c5:c4:97:ec: 92:c5:2c:fe:84:a8:92:28:c1:6d:2e:14:06:78:9f: a9:49:cc:8c:07:aa:00:bd:f4:bc:6f:66:de:16:f1: 6b:b4:e9:44:b9:f3:07:c3:e7:a9:f7:68:ee:4f:f2: 77:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:31:C8:BC:3F:F1:AE:30:76:F0:55:C2:4D:CB:7F:2C:99:D9:06:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d33260b8-8c3c-363f-a13e-61c4caf0b57f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.153.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:05:53:7a:75:8e:bf:82:f3:32:3c:43:5d:f8:9a:09:8a:b7: b8:44:e5:11:b9:c9:cd:ea:67:67:c8:10:43:69:d6:01:d9:32: 64:ec:45:9a:9f:0e:21:6d:76:45:56:c3:25:58:4b:c2:30:a2: 75:37:c0:61:3c:53:9b:fd:8e:f5:41:92:d7:6e:b4:65:7a:a5: e4:3e:5a:e2:77:21:ce:58:01:b0:9c:94:40:c2:af:8e:65:b2: 4b:cf:d4:4a:05:db:3e:6d:af:80:10:f5:9a:92:55:24:aa:32: a4:ea:4f:8f:4c:ad:b6:f0:1b:32:33:35:e4:9b:60:e3:3b:27: 86:2d:51:b3:37:e1:b7:a2:5a:3f:4f:cd:8a:fb:32:bf:b9:67: d9:1e:95:d0:51:71:e2:34:f1:5c:52:81:f4:8a:2a:58:83:c9: 26:46:42:45:c9:bb:70:74:8a:71:60:bf:1d:33:7c:f2:38:87: 34:91:96:45:02:a8:de:20:29:6d:9e:5a:98:77:15:98:e8:0b: 0f:60:66:fc:35:c3:fb:b4:3f:1b:58:7c:cc:e1:4a:a6:8b:fd: ef:c2:27:24:cb:27:0b:c5:8e:0f:2b:ba:be:9e:ea:34:6b:b4: 15:13:47:b2:b0:63:71:92:35:ca:9a:52:cf:59:cd:94:9e:41: 8c:ae:8a:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS6a3/4rPrAQR/iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk M2I0YjMwNzktZjRhMi00YjYxLWJiZGQtZTJkNDdiOGY1MWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKLPGxv1vb+swKAW4srlTQWZyflokDYtPtOV OkSBskFC47MjqZWihMCE8n8FfxR+SX1RqMNRe/hp+ytxV33phN7khe9CvpIDtJKq 53YvQ2EkZH71tDj3a+lt5O5n8FAAryz3ztliq92H0M0pPR+ybUTBAcvh82E1LalI sM+WUgFJx3jB2aDGRM+x7RVHERerc3EkTpGUqQYpNZdeFvwfwNKUz2/krRsvHv+X mmhOzv+OzvhywWdPrrX0PIWK5vjGhu6MKk/lPs0aNW2ju8XEl+ySxSz+hKiSKMFt LhQGeJ+pScyMB6oAvfS8b2beFvFrtOlEufMHw+ep92juT/J3PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0xyLw/8a4wdvBVwk3LfyyZ2QZXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDMzMjYwYjgtOGMzYy0z NjNmLWExM2UtNjFjNGNhZjBiNTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIpkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcFU3p1jr+C8zI8Q134mgmKt7hE5RG5yc3qZ2fIEENp1gHZMmTsRZqf DiFtdkVWwyVYS8IwonU3wGE8U5v9jvVBktdutGV6peQ+WuJ3Ic5YAbCclEDCr45l skvP1EoF2z5tr4AQ9ZqSVSSqMqTqT49MrbbwGzIzNeSbYOM7J4YtUbM34beiWj9P zYr7Mr+5Z9keldBRceI08VxSgfSKKliDySZGQkXJu3B0inFgvx0zfPI4hzSRlkUC qN4gKW2eWph3FZjoCw9gZvw1w/u0PxtYfMzhSqaL/e/CJyTLJwvFjg8rur6e6jRr tBUTR7KwY3GSNcqaUs9ZzZSeQYyuiiM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:33 2025 by rpki-client