$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef6795c5-ff72-3f47-9c5f-4a2aad162e07.roa File: ef6795c5-ff72-3f47-9c5f-4a2aad162e07.roa (raw, json) Hash identifier: TqJFBNWjhjRYGiwC0J5sD1LAA9ZBo0MBMGbQLuMyU6Y= Subject key identifier: 7E:CB:BA:4B:88:D9:52:89:34:B4:44:00:88:A2:72:F2:8B:D4:E4:1D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BE632035EA7B03D8BA718 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef6795c5-ff72-3f47-9c5f-4a2aad162e07.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.78.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:e6:32:03:5e:a7:b0:3d:8b:a7:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=fda78ec8-fef9-4860-9551-60aef72e4379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a7:af:3b:6d:3d:34:53:a1:c5:bf:1d:d3:ea: c9:5a:c3:ed:24:9e:fe:ba:ec:39:e1:c2:48:f5:22: 7c:b9:56:a8:e3:28:a3:de:39:ff:fc:dd:76:95:4c: 69:04:b6:6f:84:9f:fe:85:3d:43:d6:0e:74:b6:cb: 67:a9:4b:0d:a4:58:03:33:d9:58:98:cc:c3:5e:c4: 8d:69:7e:bb:21:08:78:9d:9c:0c:35:bd:a6:5c:35: 21:c3:a9:23:b0:66:a1:dd:1d:a2:5a:f2:de:50:ea: 11:54:25:2e:97:16:1b:a0:dc:7d:41:49:9f:a3:b8: 9c:5c:cf:ad:ae:1c:fa:88:43:b2:de:9c:a2:78:96: b8:a3:3b:b3:4a:f7:e0:71:b6:d8:cc:02:8b:dd:b6: 18:cf:e4:89:4d:d2:80:67:08:6f:5d:59:aa:37:91: 56:f7:44:ca:66:eb:fc:46:3c:b5:73:0f:52:85:7c: 08:50:c3:a6:82:f9:7f:ed:98:ed:ae:eb:80:4d:c5: aa:9d:06:12:98:63:39:06:24:e8:78:62:60:7e:22: e5:6e:90:27:f5:47:00:df:04:18:01:a6:c8:02:59: 6b:8f:96:5d:e3:f8:b1:a8:0c:4d:a2:72:1e:86:6c: c0:52:0c:34:71:f0:d2:0f:84:1e:4a:68:5b:ec:22: c0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CB:BA:4B:88:D9:52:89:34:B4:44:00:88:A2:72:F2:8B:D4:E4:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ef6795c5-ff72-3f47-9c5f-4a2aad162e07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.78.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:44:01:91:04:79:a1:ee:cc:74:ee:f4:dd:3a:b3:6b:5f:e9: 9c:5a:1c:d9:10:d1:b1:0e:17:43:71:90:24:a2:b4:ad:b7:40: 97:e8:a3:cd:b4:ab:ec:69:a9:18:75:2c:04:d7:64:71:0d:ed: 15:13:f7:ee:64:c8:c6:fb:90:9d:f9:ef:4c:d0:c2:74:24:a9: 2a:08:11:88:7b:32:84:c5:b2:d7:4b:b9:5b:86:fa:55:fb:2d: 21:9a:be:63:c0:90:26:96:0e:bc:07:c3:47:9d:14:41:f3:fc: 83:99:ec:72:a2:36:2f:c9:de:2b:51:e5:34:71:80:6d:4c:78: 39:0e:70:e1:c4:72:71:56:74:82:df:0e:10:97:12:d1:0b:76: 88:b7:33:8a:4d:13:90:7c:e0:63:be:00:9f:bb:c4:d9:4b:26: 74:72:61:e2:04:66:d6:7b:01:04:62:7c:99:15:20:f3:ef:75: a0:80:82:13:e9:59:0f:18:9c:0e:4a:07:20:93:00:1a:22:f9: ff:d1:90:50:10:e0:1d:a8:3b:32:d8:6c:f2:d2:d9:b7:1b:7d: 68:7f:46:6c:ef:c9:4a:47:5b:5d:b2:59:1e:27:0b:f4:c4:ea: 32:01:36:0d:3b:db:75:c8:39:66:b5:af:14:8f:e7:61:4f:6b: d2:0c:a1:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+YyA16nsD2LpxgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZmRhNzhlYzgtZmVmOS00ODYwLTk1NTEtNjBhZWY3MmU0Mzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6evO209NFOhxb8d0+rJWsPtJJ7+uuw54cJI 9SJ8uVao4yij3jn//N12lUxpBLZvhJ/+hT1D1g50tstnqUsNpFgDM9lYmMzDXsSN aX67IQh4nZwMNb2mXDUhw6kjsGah3R2iWvLeUOoRVCUulxYboNx9QUmfo7icXM+t rhz6iEOy3pyieJa4ozuzSvfgcbbYzAKL3bYYz+SJTdKAZwhvXVmqN5FW90TKZuv8 Rjy1cw9ShXwIUMOmgvl/7ZjtruuATcWqnQYSmGM5BiToeGJgfiLlbpAn9UcA3wQY AabIAllrj5Zd4/ixqAxNonIehmzAUgw0cfDSD4QeSmhb7CLA1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7LukuI2VKJNLREAIiicvKL1OQdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWY2Nzk1YzUtZmY3Mi0z ZjQ3LTljNWYtNGEyYWFkMTYyZTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIk4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADREAZEEeaHuzHTu9N06s2tf6ZxaHNkQ0bEOF0NxkCSitK23QJfoo820 q+xpqRh1LATXZHEN7RUT9+5kyMb7kJ3570zQwnQkqSoIEYh7MoTFstdLuVuG+lX7 LSGavmPAkCaWDrwHw0edFEHz/IOZ7HKiNi/J3itR5TRxgG1MeDkOcOHEcnFWdILf DhCXEtELdoi3M4pNE5B84GO+AJ+7xNlLJnRyYeIEZtZ7AQRifJkVIPPvdaCAghPp WQ8YnA5KByCTABoi+f/RkFAQ4B2oOzLYbPLS2bcbfWh/RmzvyUpHW12yWR4nC/TE 6jIBNg0723XIOWa1rxSP52FPa9IMoSQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:58 2025 by rpki-client