$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a096e3bc-e8a6-3196-afaf-a20acf5374f1.roa File: a096e3bc-e8a6-3196-afaf-a20acf5374f1.roa (raw, json) Hash identifier: wi/R9orDi4slrTbR+KOHNbjaoNp65rlmbTJdI/ZBNV4= Subject key identifier: AE:14:82:DB:92:C1:A0:FB:7D:1B:76:22:65:1D:2A:80:B0:AF:59:F0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C84BD3E4AC1E6574475D5680 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a096e3bc-e8a6-3196-afaf-a20acf5374f1.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 34.3.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:d3:e4:ac:1e:65:74:47:5d:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=895fe809-43c2-473b-9b67-d37cd77fa236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5b:39:4b:18:36:08:14:40:ab:46:0f:d8:ad: 0a:b7:35:c8:ca:84:8a:38:b5:fe:59:e8:cf:21:8c: 2c:8f:14:b3:a7:66:67:72:9d:b5:51:96:57:70:f3: a0:f5:78:6c:ab:33:31:86:44:98:e4:f3:2f:83:0a: 12:57:46:af:f9:de:ee:68:e5:4a:e5:f1:4b:9e:2e: ce:26:61:31:ed:73:bf:39:20:35:72:29:1a:2e:02: a0:ca:d1:45:bb:3f:a0:b8:4e:60:2a:72:a2:e6:5a: 35:20:dc:c7:a3:2c:80:2b:83:65:0c:e6:2a:e2:2c: d8:ce:45:7e:ce:ff:03:5d:47:71:db:5d:bf:b4:77: d5:f8:95:20:a4:37:a6:be:d6:56:fc:c8:83:e4:52: 33:64:13:c9:db:99:ca:a8:e9:a0:b7:5f:54:ee:b9: 7e:04:11:f6:ed:33:a6:c5:81:35:a4:69:e5:7f:19: b3:4c:5a:8b:7a:2e:2c:80:46:42:51:c3:a6:e2:97: bc:36:a6:72:05:e0:72:0d:8a:e5:c8:9c:af:7b:77: 43:2e:56:30:91:4c:22:04:8e:7e:b4:86:a1:a4:fb: 4a:1c:f0:5f:03:2f:5f:e5:c8:8e:41:1a:af:3f:59: 1f:df:47:75:88:d7:bc:ef:9c:79:17:c4:50:5a:48: 54:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:14:82:DB:92:C1:A0:FB:7D:1B:76:22:65:1D:2A:80:B0:AF:59:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a096e3bc-e8a6-3196-afaf-a20acf5374f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 34.3.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:7e:a2:62:43:29:d5:49:2c:97:1b:ac:7b:24:0b:97:b0:36: 5b:f8:fa:f7:51:65:3a:aa:4e:56:64:bb:b2:9a:81:ca:cb:77: 0a:b1:13:d3:85:40:01:e9:e0:f6:d2:6d:4b:f6:85:b3:d0:5e: fd:af:17:2e:b2:8f:09:1f:e1:5e:2e:58:c8:8e:1a:c2:db:fc: 6c:99:f7:a4:31:06:6a:5b:b2:c3:e1:58:bf:89:30:0b:35:7d: 95:8c:80:27:c9:3c:ce:2c:06:28:45:44:e3:51:c0:d0:27:34: f1:3d:3d:c6:41:b7:41:75:41:88:6a:0c:42:b5:7d:b3:9f:19: fc:cd:0e:09:10:e9:a6:02:26:c9:46:46:6d:67:a9:6c:39:55: 6c:ae:4f:f1:07:70:06:0e:0b:06:ef:c3:a8:0d:85:8b:54:b3: 5b:8b:47:c0:92:85:d9:a1:90:7a:45:7e:fd:fc:4d:6c:ac:04: 8c:70:e5:b3:c5:9c:be:cb:ca:0f:2f:99:a2:8e:6a:2f:d9:b1: c0:7f:3b:6e:78:0e:cc:da:90:9e:82:49:01:c0:0a:7c:bf:34: 38:4d:89:04:b8:65:0b:a3:83:18:98:26:0b:2f:5c:40:70:7d: 6c:57:85:a5:fe:0d:06:a2:d3:12:34:8d:39:c5:00:7f:47:11: 0f:42:c7:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS9PkrB5ldEddVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ODk1ZmU4MDktNDNjMi00NzNiLTliNjctZDM3Y2Q3N2ZhMjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqls5Sxg2CBRAq0YP2K0KtzXIyoSKOLX+WejP IYwsjxSzp2Zncp21UZZXcPOg9XhsqzMxhkSY5PMvgwoSV0av+d7uaOVK5fFLni7O JmEx7XO/OSA1cikaLgKgytFFuz+guE5gKnKi5lo1INzHoyyAK4NlDOYq4izYzkV+ zv8DXUdx212/tHfV+JUgpDemvtZW/MiD5FIzZBPJ25nKqOmgt19U7rl+BBH27TOm xYE1pGnlfxmzTFqLei4sgEZCUcOm4pe8NqZyBeByDYrlyJyve3dDLlYwkUwiBI5+ tIahpPtKHPBfAy9f5ciOQRqvP1kf30d1iNe875x5F8RQWkhUkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4UgtuSwaD7fRt2ImUdKoCwr1nwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTA5NmUzYmMtZThhNi0z MTk2LWFmYWYtYTIwYWNmNTM3NGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAIgMDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZ+omJDKdVJLJcbrHskC5ewNlv4+vdRZTqqTlZku7KagcrLdwqxE9OF QAHp4PbSbUv2hbPQXv2vFy6yjwkf4V4uWMiOGsLb/GyZ96QxBmpbssPhWL+JMAs1 fZWMgCfJPM4sBihFRONRwNAnNPE9PcZBt0F1QYhqDEK1fbOfGfzNDgkQ6aYCJslG Rm1nqWw5VWyuT/EHcAYOCwbvw6gNhYtUs1uLR8CShdmhkHpFfv38TWysBIxw5bPF nL7Lyg8vmaKOai/ZscB/O254DszakJ6CSQHACny/NDhNiQS4ZQujgxiYJgsvXEBw fWxXhaX+DQai0xI0jTnFAH9HEQ9Cxwo= -----END CERTIFICATE-----Generated at Fri Mar 14 10:46:13 2025 by rpki-client