$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a2d5100-6fc2-3c14-a4d7-198b6dd0eb7e.roa File: 0a2d5100-6fc2-3c14-a4d7-198b6dd0eb7e.roa (raw, json) Hash identifier: EgTEeZLyw41lbw0cKs30hF+iOmn5bFGj/JKYVX9dQ2I= Subject key identifier: 25:37:0E:31:6D:44:28:CF:DF:66:55:9D:90:85:C7:62:4D:63:52:86 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C582296E02D902C85BC8A400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a2d5100-6fc2-3c14-a4d7-198b6dd0eb7e.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 34.118.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:29:6e:02:d9:02:c8:5b:c8:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=b08e6ecd-b344-4c81-aaa5-2fb79087f11f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:62:e5:dc:e0:3d:8d:a8:71:6e:ff:46:89:4f: 19:16:58:13:f7:2c:62:b5:74:8e:fe:72:82:e0:d5: 4f:b7:0f:b3:62:92:36:ab:3b:8f:95:80:f1:d3:be: 0b:0f:a2:24:65:73:60:2f:8a:da:17:b9:81:e3:17: 05:b6:2f:37:48:50:74:d2:c2:00:69:86:43:5c:a7: 21:52:99:4d:c0:94:f4:0d:b3:1e:8d:86:bf:1d:c7: b9:5b:f9:de:3f:a9:1d:0a:2c:7b:ed:04:de:52:fc: 72:1f:f2:f8:ee:32:27:62:b6:cb:60:6b:42:34:dd: 0f:35:8a:e4:2a:e1:e9:e7:ae:19:fc:34:aa:fa:75: 46:cf:81:05:5c:ec:d2:94:dd:ea:0c:2f:33:7d:45: de:d6:b5:81:36:cf:33:49:d3:6b:3c:a3:88:d6:4d: b6:26:78:0d:7a:50:01:0f:1d:72:0f:fe:3d:24:73: 7c:76:c0:ca:56:49:f9:ff:1a:37:a7:b4:ac:0d:71: 5a:01:f3:95:55:65:48:09:f2:cf:c9:07:1c:06:ce: 35:de:08:b5:7d:5c:0e:f3:27:69:64:7d:c0:09:b7: ef:2d:52:4b:e5:9d:e5:8c:2a:6b:43:93:6d:d6:c5: 28:01:64:1f:a6:81:92:a1:31:66:ce:ab:85:f6:49: 81:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:37:0E:31:6D:44:28:CF:DF:66:55:9D:90:85:C7:62:4D:63:52:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a2d5100-6fc2-3c14-a4d7-198b6dd0eb7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.118.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:3b:88:22:69:7d:f8:0f:90:77:41:0f:f8:4e:fc:26:ec:8e: aa:44:34:e9:6d:5e:3e:44:a7:f1:7d:00:cc:4d:dc:c1:62:3b: be:d5:0c:c6:41:9a:52:61:50:53:e5:32:0a:67:b6:e8:5e:45: f2:80:64:84:9d:fa:c4:3f:c9:bd:29:ea:0b:c9:bb:1c:5c:8b: a4:a9:10:25:09:56:7e:60:09:89:bf:6f:f7:38:9d:1c:05:fb: 14:b8:92:11:5b:97:56:e5:bb:68:6a:9e:d5:0c:f0:17:5e:cd: 7f:23:73:3d:01:d4:c9:e3:76:5e:40:73:42:61:a3:e1:2f:47: 56:f7:89:77:96:cb:b3:e2:d0:91:1d:9f:61:ca:62:7c:36:4e: b5:70:20:f3:e8:17:52:bd:43:e0:64:dc:4c:ea:4c:84:87:db: d1:13:96:a3:e8:3d:d4:20:6e:4b:b9:94:5e:c7:13:88:5d:ed: d1:be:9a:a4:dd:a2:8b:db:51:f8:0a:14:0d:d0:78:17:d5:a6: 4d:94:ab:f8:56:60:3c:0e:2a:a7:13:17:8c:ca:15:2a:a9:5c: de:40:da:25:85:f9:0b:38:d2:0c:1e:66:72:ca:34:4f:8f:c5: 53:b5:d9:ae:e9:6b:db:e0:3a:ad:83:e9:84:a6:06:55:6a:32: 26:70:9c:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgiluAtkCyFvIpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YjA4ZTZlY2QtYjM0NC00YzgxLWFhYTUtMmZiNzkwODdmMTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8WLl3OA9jahxbv9GiU8ZFlgT9yxitXSO/nKC 4NVPtw+zYpI2qzuPlYDx074LD6IkZXNgL4raF7mB4xcFti83SFB00sIAaYZDXKch UplNwJT0DbMejYa/Hce5W/neP6kdCix77QTeUvxyH/L47jInYrbLYGtCNN0PNYrk KuHp564Z/DSq+nVGz4EFXOzSlN3qDC8zfUXe1rWBNs8zSdNrPKOI1k22JngNelAB Dx1yD/49JHN8dsDKVkn5/xo3p7SsDXFaAfOVVWVICfLPyQccBs413gi1fVwO8ydp ZH3ACbfvLVJL5Z3ljCprQ5Nt1sUoAWQfpoGSoTFmzquF9kmBFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCU3DjFtRCjP32ZVnZCFx2JNY1KGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGEyZDUxMDAtNmZjMi0z YzE0LWE0ZDctMTk4YjZkZDBlYjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBInb6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJU7iCJpffgPkHdBD/hO/CbsjqpENOltXj5Ep/F9AMxN3MFiO77VDMZB mlJhUFPlMgpntuheRfKAZISd+sQ/yb0p6gvJuxxci6SpECUJVn5gCYm/b/c4nRwF +xS4khFbl1blu2hqntUM8BdezX8jcz0B1Mnjdl5Ac0Jho+EvR1b3iXeWy7Pi0JEd n2HKYnw2TrVwIPPoF1K9Q+Bk3EzqTISH29ETlqPoPdQgbku5lF7HE4hd7dG+mqTd oovbUfgKFA3QeBfVpk2Uq/hWYDwOKqcTF4zKFSqpXN5A2iWF+Qs40gweZnLKNE+P xVO12a7pa9vgOq2D6YSmBlVqMiZwnO0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:26 2025 by rpki-client