$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea667d11-6ebb-305a-92cd-bf792e5095e1.roa File: ea667d11-6ebb-305a-92cd-bf792e5095e1.roa (raw, json) Hash identifier: rICFpA8vJa5VqGPet4j+KPpH8BMRkzzae62MxEuwkMU= Subject key identifier: 58:70:AC:3E:CB:C5:99:B1:60:3B:F2:45:73:88:33:9C:4B:03:7A:C1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BE0EF7BACD28BE9868400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea667d11-6ebb-305a-92cd-bf792e5095e1.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.48.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:e0:ef:7b:ac:d2:8b:e9:86:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=870ec481-2dbb-4dcb-91db-6556764ab0b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2d:03:f0:5c:3c:a5:b2:64:d8:bc:f4:45:a9: de:d0:2e:ef:5a:4a:d9:d0:0f:e9:64:46:18:86:45: fe:44:c1:02:c1:23:06:c7:ff:18:48:fb:42:ae:30: 40:f3:88:a1:fc:4a:a3:c6:b3:33:9b:2a:16:ed:81: 60:fa:d9:c4:fe:7f:64:41:bc:e1:a2:68:82:98:7b: 6f:04:a8:d7:63:36:60:ca:89:58:76:71:6d:e0:aa: d2:79:11:49:8a:ba:e7:29:29:63:17:4e:2e:42:2a: 9b:2e:ad:77:78:20:dc:65:42:de:50:6e:25:27:56: 3c:72:8c:76:89:58:d4:52:90:88:29:6b:08:3d:6d: a8:02:3f:33:a0:63:79:83:88:2a:66:62:2e:74:1b: 18:d3:ac:8a:39:b6:e4:92:b1:17:a3:65:58:7b:2c: 6a:9d:0c:ac:2d:fb:1c:20:4f:33:30:ef:96:aa:58: 16:95:ed:02:2b:65:72:1f:4d:56:db:f9:be:7f:90: ec:20:1c:ca:ad:16:ce:92:99:dd:f1:c2:8d:24:d4: fe:7d:3f:4b:b8:a1:85:3e:1b:ec:e1:bc:18:e4:eb: 42:14:e2:da:65:5a:74:d0:d4:07:7c:26:10:64:cb: 83:65:72:31:4b:bc:19:39:e4:83:6f:9c:18:e6:d5: 77:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:70:AC:3E:CB:C5:99:B1:60:3B:F2:45:73:88:33:9C:4B:03:7A:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ea667d11-6ebb-305a-92cd-bf792e5095e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.48.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:bd:3e:4d:07:30:e6:3a:d8:2f:27:16:39:48:46:36:b9:7a: 99:2d:06:07:48:5b:d1:bf:f7:2f:04:c9:5f:9c:3e:3d:33:c7: 04:5d:bb:f3:fe:bf:ba:5d:6b:3b:35:bc:a2:98:6d:d8:e3:04: d2:c3:95:76:f1:83:a1:6d:a2:a2:73:76:88:2e:25:7c:1e:09: 9e:ae:44:c3:5c:41:20:1f:ad:c8:65:ae:51:f7:c2:88:90:4f: 0f:38:0e:a1:d0:ad:45:ef:75:64:09:2f:0b:cd:a5:bb:78:75: c2:54:e1:f6:ea:8a:53:85:b2:5f:ca:83:58:f7:00:04:f0:e9: 00:54:8c:86:a4:cc:3b:c3:07:44:2d:4b:f2:de:7e:35:b7:5a: fe:56:08:b3:2b:7b:eb:ce:7f:1a:2d:c2:92:81:d3:da:c9:44: b2:fe:27:91:ac:62:b9:de:62:3a:3f:d0:0f:08:63:1d:c1:74: ef:9e:93:2e:79:08:80:e2:8c:35:f8:2b:56:91:e2:36:4b:49: 74:13:4f:8a:7d:c8:65:85:5d:f9:7f:8a:d9:b3:68:ee:58:7c: a9:b0:c6:ce:2e:92:62:44:df:9e:3a:29:74:d6:e2:fd:de:81: 51:c3:cf:61:8e:1e:64:24:ef:9c:69:84:d7:f0:0f:7e:63:1b: 30:6b:74:8e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjIS+Dve6zSi+mGhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ODcwZWM0ODEtMmRiYi00ZGNiLTkxZGItNjU1Njc2NGFiMGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji0D8Fw8pbJk2Lz0Rane0C7vWkrZ0A/pZEYY hkX+RMECwSMGx/8YSPtCrjBA84ih/EqjxrMzmyoW7YFg+tnE/n9kQbzhomiCmHtv BKjXYzZgyolYdnFt4KrSeRFJirrnKSljF04uQiqbLq13eCDcZULeUG4lJ1Y8cox2 iVjUUpCIKWsIPW2oAj8zoGN5g4gqZmIudBsY06yKObbkkrEXo2VYeyxqnQysLfsc IE8zMO+WqlgWle0CK2VyH01W2/m+f5DsIBzKrRbOkpnd8cKNJNT+fT9LuKGFPhvs 4bwY5OtCFOLaZVp00NQHfCYQZMuDZXIxS7wZOeSDb5wY5tV3zwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFhwrD7LxZmxYDvyRXOIM5xLA3rBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWE2NjdkMTEtNmViYi0z MDVhLTkyY2QtYmY3OTJlNTA5NWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIjAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAB70+TQcw5jrYLycWOUhGNrl6mS0GB0hb0b/3LwTJX5w+PTPHBF278/6/ ul1rOzW8opht2OME0sOVdvGDoW2ionN2iC4lfB4Jnq5Ew1xBIB+tyGWuUffCiJBP DzgOodCtRe91ZAkvC82lu3h1wlTh9uqKU4WyX8qDWPcABPDpAFSMhqTMO8MHRC1L 8t5+Nbda/lYIsyt7685/Gi3CkoHT2slEsv4nkaxiud5iOj/QDwhjHcF0756TLnkI gOKMNfgrVpHiNktJdBNPin3IZYVd+X+K2bNo7lh8qbDGzi6SYkTfnjopdNbi/d6B UcPPYY4eZCTvnGmE1/APfmMbMGt0jg== -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:44 2025 by rpki-client