$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/10c801f0-0bd6-3bd4-bf99-d7059e9f50a4.roa File: 10c801f0-0bd6-3bd4-bf99-d7059e9f50a4.roa (raw, json) Hash identifier: 8m+Xj5+0GimpBnO6h4X8P61TN2b7uDDT5ol5wR9EUvA= Subject key identifier: 13:05:F0:4A:00:19:A1:2E:01:AC:B9:1A:E6:C2:1D:DC:19:01:07:F3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C0F34E80DA5A28D61EF40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/10c801f0-0bd6-3bd4-bf99-d7059e9f50a4.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.78.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:0f:34:e8:0d:a5:a2:8d:61:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=0cb67895-64bd-4ac4-9b88-1c4d3e84a9c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:52:9e:8d:ed:fd:57:13:85:ed:ca:23:ee:7b: ba:f0:48:3d:09:19:2e:73:31:37:94:3e:02:13:05: cb:1a:a6:bc:d5:f3:c8:f7:f2:2a:10:45:ea:f1:4a: dd:1e:68:c2:73:46:6e:fc:e4:4a:99:40:e6:94:52: 3d:99:16:88:62:f5:0b:ed:c0:1c:b5:e1:1a:6c:9b: 56:e1:b7:71:16:29:67:08:97:39:06:af:1f:34:fb: 37:73:ba:40:3a:4a:b0:01:83:ed:f6:ea:8d:5a:2e: aa:9c:42:24:11:de:59:97:47:4a:64:b9:26:c4:b6: 71:17:f3:f7:f6:5e:5a:cf:d1:31:c9:a1:1e:55:86: 88:1a:60:b2:72:e0:07:a1:88:7b:78:ab:cc:81:10: 88:f4:a6:b9:a2:cd:ac:c0:26:93:04:b0:84:9c:38: e4:58:5b:31:91:2e:62:69:60:61:c7:04:b0:b0:49: 15:0a:dd:ef:77:3e:6a:48:26:f0:6f:b8:99:ed:13: c4:82:e5:90:3f:bb:25:a9:33:8c:94:31:61:2f:ec: 8a:a4:10:49:42:a2:56:dd:6e:c2:58:28:63:73:87: 51:e8:60:4f:a0:e9:b0:04:a3:e4:fb:30:87:db:47: 49:34:b3:01:52:01:e8:c9:47:71:bc:4e:fb:d6:03: 50:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:05:F0:4A:00:19:A1:2E:01:AC:B9:1A:E6:C2:1D:DC:19:01:07:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/10c801f0-0bd6-3bd4-bf99-d7059e9f50a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.78.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:57:2f:0e:e1:14:4a:cb:63:25:fe:40:84:36:f0:bf:e9:cb: b5:de:9a:4b:12:19:4f:e3:b7:46:d6:a1:3d:f1:28:31:88:bf: a9:df:1a:21:29:e8:e5:a1:e9:60:75:93:1a:38:f3:4c:d0:4a: 98:bd:0a:e5:3e:3b:d1:e8:51:6f:6f:f8:d6:72:29:78:0e:9c: 52:d5:e4:9a:fc:5c:39:3c:65:1c:b9:78:1b:a2:57:f5:7e:b1: 6c:d9:be:08:0d:b7:63:c7:88:8d:71:1e:d9:4b:ad:15:f5:be: ba:7d:b2:2b:53:05:84:4f:8e:dd:51:a3:79:37:8b:6d:bd:ed: 97:cc:67:8c:d6:67:ef:8f:3f:9a:60:39:fb:3d:ff:f2:69:d5: de:34:4b:4b:de:1b:ff:16:4d:7d:a5:e3:9f:46:53:ec:a8:8a: 8d:25:f3:7e:79:2a:38:3b:b1:24:0a:16:5a:e5:f2:2a:b0:3b: d0:b1:72:ba:9f:75:92:4a:82:b3:b2:bf:23:7d:07:70:8d:2b: 9c:d2:a6:8b:ca:08:a5:97:56:f2:d2:2e:cc:da:8f:65:92:0d: cd:15:2b:1c:0f:b3:65:90:3c:7c:42:1c:a6:41:c1:cb:ea:ef: 7b:58:ac:d8:4e:7c:7c:f4:08:59:31:16:2b:63:33:ea:5b:2c: d7:ec:c1:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITA806A2loo1h70AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MGNiNjc4OTUtNjRiZC00YWM0LTliODgtMWM0ZDNlODRhOWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lKeje39VxOF7coj7nu68Eg9CRkuczE3lD4C EwXLGqa81fPI9/IqEEXq8UrdHmjCc0Zu/ORKmUDmlFI9mRaIYvUL7cActeEabJtW 4bdxFilnCJc5Bq8fNPs3c7pAOkqwAYPt9uqNWi6qnEIkEd5Zl0dKZLkmxLZxF/P3 9l5az9ExyaEeVYaIGmCycuAHoYh7eKvMgRCI9Ka5os2swCaTBLCEnDjkWFsxkS5i aWBhxwSwsEkVCt3vdz5qSCbwb7iZ7RPEguWQP7slqTOMlDFhL+yKpBBJQqJW3W7C WChjc4dR6GBPoOmwBKPk+zCH20dJNLMBUgHoyUdxvE771gNQaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMF8EoAGaEuAay5GubCHdwZAQfzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTBjODAxZjAtMGJkNi0z YmQ0LWJmOTktZDcwNTllOWY1MGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIk4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1XLw7hFErLYyX+QIQ28L/py7XemksSGU/jt0bWoT3xKDGIv6nfGiEp 6OWh6WB1kxo480zQSpi9CuU+O9HoUW9v+NZyKXgOnFLV5Jr8XDk8ZRy5eBuiV/V+ sWzZvggNt2PHiI1xHtlLrRX1vrp9sitTBYRPjt1Ro3k3i2297ZfMZ4zWZ++PP5pg Ofs9//Jp1d40S0veG/8WTX2l459GU+yoio0l8355Kjg7sSQKFlrl8iqwO9Cxcrqf dZJKgrOyvyN9B3CNK5zSpovKCKWXVvLSLszaj2WSDc0VKxwPs2WQPHxCHKZBwcvq 73tYrNhOfHz0CFkxFitjM+pbLNfsweI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:13 2025 by rpki-client