$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/efaf8585-044d-334f-ae1a-da5be895ed5c.roa File: efaf8585-044d-334f-ae1a-da5be895ed5c.roa (raw, json) Hash identifier: 7vhotNSkSoViCAfDx0QGtWGg4iMMeMkowJ7RhFwFaHo= Subject key identifier: F5:8C:9C:4A:FC:E7:BB:6D:B1:08:44:6A:8F:DA:C3:E4:D6:CA:B1:66 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BCD9EFAAC6948D326D600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/efaf8585-044d-334f-ae1a-da5be895ed5c.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.172.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:cd:9e:fa:ac:69:48:d3:26:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=c87897d7-8d2b-4a18-a6b6-15d677a6d084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:44:1c:5b:58:36:16:07:ce:7f:5d:62:b0:42: 32:92:03:e8:33:f9:0e:8c:9a:c2:20:cb:1e:79:86: f5:5e:27:fb:41:66:a0:6b:92:76:d6:5b:01:cf:e1: 1e:87:f4:a3:b5:1f:10:45:49:c9:62:ca:cf:5a:21: 6d:3e:14:1d:d2:a8:1e:c3:a8:cf:27:26:fa:f6:b8: fa:14:d9:b7:0f:d6:9d:e4:02:b3:9e:02:a0:18:62: 35:c7:1d:f1:a7:7d:cf:3a:01:18:f9:fb:6c:87:f8: c0:fc:53:69:6b:9a:73:91:db:ee:9b:5e:04:62:5f: 8c:4a:52:8b:26:86:fd:df:a6:a5:62:d7:78:c0:34: 76:13:b7:20:98:b0:5f:08:f6:e6:c1:6d:b2:0e:90: 7c:af:f9:88:50:3e:82:b7:16:8c:a2:19:a6:15:49: 4b:ca:b6:80:0f:23:a0:b7:70:61:3e:28:12:e6:b1: b1:7b:da:fd:8e:95:be:ea:7c:4b:0a:c9:32:08:cc: 2f:c4:83:12:b5:c9:84:22:b0:eb:61:5b:fe:4e:a8: c3:34:86:c0:57:f0:fd:6a:44:ad:bc:56:49:61:47: 21:5f:e6:65:d8:29:db:de:56:94:90:b9:6f:18:fb: 9d:15:6e:99:0f:6c:92:53:33:00:28:aa:04:73:75: 29:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:8C:9C:4A:FC:E7:BB:6D:B1:08:44:6A:8F:DA:C3:E4:D6:CA:B1:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/efaf8585-044d-334f-ae1a-da5be895ed5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.172.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:2b:f6:5a:12:f1:75:86:c9:85:db:36:86:32:f7:b9:9b:a9: bf:b6:c0:d9:84:e1:19:e5:11:1f:85:74:53:3f:f9:11:ac:04: 97:62:0a:a0:aa:3b:ca:40:47:35:47:d0:8b:fb:43:84:3c:0b: 72:5b:74:8b:4e:b4:ff:68:2d:68:8d:91:2a:06:69:3e:bb:80: 6b:d5:22:7c:ea:d4:95:ce:7b:d6:0f:b7:5f:eb:d3:46:43:9b: 0c:87:73:a1:bc:33:b7:6c:c6:03:d3:26:ef:a5:65:3a:1a:e8: 47:9d:b9:f6:1b:dc:db:c9:c8:cd:03:6f:93:6d:c6:89:ff:80: 9f:9f:b1:ea:90:e2:20:53:33:ae:01:a0:80:ae:f3:36:f8:59: 1c:cd:35:4f:ff:87:e7:ed:a7:fc:99:88:cb:bf:a6:0b:81:6d: 80:37:4a:48:d5:6f:14:94:b0:1c:22:3f:aa:2a:e3:a8:cd:32: 49:56:5d:63:e2:27:62:25:b9:5a:c0:53:32:a8:83:02:49:21: 3c:9b:c5:01:fd:6e:58:9f:b9:4c:b7:33:e1:4e:b5:ea:97:81: ec:98:fc:94:d5:3d:bd:45:50:32:38:d3:5e:83:28:bb:44:b5: 73:52:f5:a9:3e:98:d5:04:a7:c3:29:7a:54:33:e4:20:f4:82: 85:c2:75:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS82e+qxpSNMm1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk Yzg3ODk3ZDctOGQyYi00YTE4LWE2YjYtMTVkNjc3YTZkMDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkQcW1g2FgfOf11isEIykgPoM/kOjJrCIMse eYb1Xif7QWaga5J21lsBz+Eeh/SjtR8QRUnJYsrPWiFtPhQd0qgew6jPJyb69rj6 FNm3D9ad5AKzngKgGGI1xx3xp33POgEY+ftsh/jA/FNpa5pzkdvum14EYl+MSlKL Job936alYtd4wDR2E7cgmLBfCPbmwW2yDpB8r/mIUD6CtxaMohmmFUlLyraADyOg t3BhPigS5rGxe9r9jpW+6nxLCskyCMwvxIMStcmEIrDrYVv+TqjDNIbAV/D9akSt vFZJYUchX+Zl2Cnb3laUkLlvGPudFW6ZD2ySUzMAKKoEc3UppwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWMnEr857ttsQhEao/aw+TWyrFmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWZhZjg1ODUtMDQ0ZC0z MzRmLWFlMWEtZGE1YmU4OTVlZDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIqwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYr9loS8XWGyYXbNoYy97mbqb+2wNmE4RnlER+FdFM/+RGsBJdiCqCq O8pARzVH0Iv7Q4Q8C3JbdItOtP9oLWiNkSoGaT67gGvVInzq1JXOe9YPt1/r00ZD mwyHc6G8M7dsxgPTJu+lZToa6EedufYb3NvJyM0Db5Ntxon/gJ+fseqQ4iBTM64B oICu8zb4WRzNNU//h+ftp/yZiMu/pguBbYA3SkjVbxSUsBwiP6oq46jNMklWXWPi J2IluVrAUzKogwJJITybxQH9blifuUy3M+FOteqXgeyY/JTVPb1FUDI4016DKLtE tXNS9ak+mNUEp8MpelQz5CD0goXCdfs= -----END CERTIFICATE-----Generated at Fri Apr 4 21:45:35 2025 by rpki-client