$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d6474136-6b4b-3e2c-a0e2-b56ce65c58ee.roa File: d6474136-6b4b-3e2c-a0e2-b56ce65c58ee.roa (raw, json) Hash identifier: S3A5zJXqjuuM9jtFudFXREPEtvgtjASmzUlQcJ1tsAQ= Subject key identifier: 35:AE:02:8D:21:A3:91:10:DD:C0:04:B9:52:65:DA:58:AD:CE:54:43 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BD9673769917E54D38E00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d6474136-6b4b-3e2c-a0e2-b56ce65c58ee.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.167.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:d9:67:37:69:91:7e:54:d3:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=d73dfb9e-ac29-424c-8ea6-3b709c134bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8b:11:ec:ea:25:0a:eb:ea:b9:af:49:ed:7b: f1:07:03:55:70:e0:99:26:f7:60:a6:c7:04:1a:6b: f1:33:46:e9:7f:6b:aa:09:b6:cb:5f:73:14:ef:97: 25:ce:aa:97:e2:01:8b:a9:f4:69:cd:e2:c9:a7:36: cc:d0:a4:00:a2:79:44:ba:13:59:e0:0d:d8:59:73: bb:6d:f7:2e:06:3c:08:a2:b0:b6:06:08:2d:28:8c: f7:7e:19:4c:10:86:df:a4:8d:ef:93:08:21:91:01: 27:ba:94:b2:40:c8:44:19:01:f7:8b:3d:42:2c:fb: 1c:82:37:42:e9:74:ef:96:c7:13:f7:1e:2a:cf:0d: 9c:7c:2b:56:41:48:00:b4:cb:6d:cb:d1:f8:a8:99: 06:df:19:ce:ab:db:8f:14:fc:5c:eb:a7:83:d9:7c: 74:9f:1b:9b:ec:09:82:09:74:9d:a2:3a:9a:0d:52: a0:f8:1e:42:ee:42:8e:24:fc:b5:08:78:ba:50:6a: be:65:1c:0c:ca:3b:98:b4:d3:18:b1:da:94:47:3e: 42:67:6d:62:60:db:8e:0a:68:af:76:45:2f:92:09: a5:b4:44:55:b8:ec:62:4b:2e:bf:ed:f9:60:9f:cd: 8d:7d:15:66:58:da:50:cd:bc:eb:f1:6e:20:30:dc: a0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AE:02:8D:21:A3:91:10:DD:C0:04:B9:52:65:DA:58:AD:CE:54:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d6474136-6b4b-3e2c-a0e2-b56ce65c58ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.167.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:7c:dd:f9:62:32:37:25:eb:72:e2:21:8b:13:a5:30:45:df: 52:6d:1f:12:bd:e5:01:37:95:27:96:09:63:c8:3e:01:5d:90: 6e:e8:9c:66:b4:bb:2d:6d:56:07:26:05:1a:52:80:da:87:5a: bf:ac:4f:f3:fe:51:bd:c7:18:3f:44:f1:8a:34:69:b5:ba:db: c3:23:b3:7e:3f:58:89:d7:3f:eb:5f:7a:7b:f5:04:fb:32:e7: 4c:9a:6c:45:b1:73:2c:99:07:49:ec:83:b5:03:55:5f:e4:3b: 69:12:45:ff:4f:f7:76:84:13:cc:c4:c6:b5:f1:ec:8c:16:fe: d7:88:8f:02:8d:d4:04:f9:d2:b1:e2:e5:da:e9:85:35:41:af: 66:61:15:85:35:91:5a:71:01:46:ac:5d:84:83:65:44:da:e1: a3:03:09:8f:52:cc:d7:15:ca:61:6a:af:b2:2d:c8:c4:ce:a9: dc:73:38:55:93:09:a7:80:32:8f:29:42:d0:82:11:9e:4a:75: aa:8c:b9:c4:46:6a:78:b6:3c:55:3b:90:c2:1a:84:b0:18:82: 3c:d5:76:7c:82:4d:7b:52:12:29:0e:60:b9:9f:87:c7:49:57: 06:4e:b7:c9:08:9c:2c:96:b3:b2:81:14:1a:28:2d:ad:c7:91: df:67:33:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS9lnN2mRflTTjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZDczZGZiOWUtYWMyOS00MjRjLThlYTYtM2I3MDljMTM0YmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4sR7OolCuvqua9J7XvxBwNVcOCZJvdgpscE GmvxM0bpf2uqCbbLX3MU75clzqqX4gGLqfRpzeLJpzbM0KQAonlEuhNZ4A3YWXO7 bfcuBjwIorC2BggtKIz3fhlMEIbfpI3vkwghkQEnupSyQMhEGQH3iz1CLPscgjdC 6XTvlscT9x4qzw2cfCtWQUgAtMtty9H4qJkG3xnOq9uPFPxc66eD2Xx0nxub7AmC CXSdojqaDVKg+B5C7kKOJPy1CHi6UGq+ZRwMyjuYtNMYsdqURz5CZ21iYNuOCmiv dkUvkgmltERVuOxiSy6/7flgn82NfRVmWNpQzbzr8W4gMNyg0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWuAo0ho5EQ3cAEuVJl2litzlRDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDY0NzQxMzYtNmI0Yi0z ZTJjLWEwZTItYjU2Y2U2NWM1OGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGIqeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJ83fliMjcl63LiIYsTpTBF31JtHxK95QE3lSeWCWPIPgFdkG7onGa0 uy1tVgcmBRpSgNqHWr+sT/P+Ub3HGD9E8Yo0abW628Mjs34/WInXP+tfenv1BPsy 50yabEWxcyyZB0nsg7UDVV/kO2kSRf9P93aEE8zExrXx7IwW/teIjwKN1AT50rHi 5drphTVBr2ZhFYU1kVpxAUasXYSDZUTa4aMDCY9SzNcVymFqr7ItyMTOqdxzOFWT CaeAMo8pQtCCEZ5KdaqMucRGani2PFU7kMIahLAYgjzVdnyCTXtSEikOYLmfh8dJ VwZOt8kInCyWs7KBFBooLa3Hkd9nMyg= -----END CERTIFICATE-----Generated at Fri Apr 4 21:02:32 2025 by rpki-client