$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1c172435-444b-39cb-9571-0602bea0a286.roa File: 1c172435-444b-39cb-9571-0602bea0a286.roa (raw, json) Hash identifier: gRo7BdsEoKrEZGiNx+R74/W5TLDlblRWW17spn4wnsU= Subject key identifier: EA:1C:B8:AE:44:AE:57:6A:3B:04:E8:A0:85:07:F3:4F:58:DB:D7:56 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BD2EF1A27D5BEBB5F0600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1c172435-444b-39cb-9571-0602bea0a286.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.72.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:d2:ef:1a:27:d5:be:bb:5f:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=8bb5614f-0f12-431d-b630-ad9b3725e4a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d8:8c:4e:45:cf:67:20:34:7b:67:83:e3:ee: 2d:2c:15:fc:a4:f6:47:81:a3:11:6c:ea:1d:2a:63: 35:6f:e7:50:f0:f1:80:89:b9:aa:ca:79:20:fa:7a: 7e:e4:9b:62:01:3f:bb:99:86:d8:a8:20:31:6b:36: 0f:db:a5:75:28:5f:ee:0c:ea:5f:2f:f7:0f:99:36: 3d:5d:7d:d4:15:3c:12:70:c4:d7:3f:2f:c6:a4:ec: 03:ca:12:2f:b8:ac:6d:da:7b:e5:fd:1a:df:c6:66: 4c:82:03:13:d3:6e:5f:13:ed:5f:01:16:f6:68:9b: 1e:c0:c4:8f:a5:c7:84:9d:4e:2e:01:57:52:61:d8: 9c:13:d8:ec:86:96:32:40:d2:35:f2:e9:f4:4a:88: a1:40:ea:b1:aa:48:d9:2c:24:c8:23:13:19:04:a4: d6:f1:ee:a7:ee:2b:08:c4:15:ee:36:d7:b0:d7:f5: 75:cf:e3:c4:ae:f9:9b:93:bb:a5:8c:1e:52:30:ca: 67:10:7f:6e:a1:02:c6:f9:d3:14:04:de:9e:ce:4f: 5e:21:28:d1:b4:c9:20:72:b7:7a:5b:b3:6f:4f:92: 2c:73:4b:91:9c:08:03:e4:ec:09:87:f8:a5:33:0d: 56:bc:f4:78:31:9d:90:80:a7:c6:fe:c9:59:cb:3f: a3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:1C:B8:AE:44:AE:57:6A:3B:04:E8:A0:85:07:F3:4F:58:DB:D7:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1c172435-444b-39cb-9571-0602bea0a286.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.72.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:69:15:a3:b7:d9:2d:12:b9:d8:99:a5:8e:ca:7e:f3:d9:05: 0e:99:aa:e4:72:38:39:87:67:2b:45:ce:0f:8b:e2:3e:22:61: 49:71:c8:89:c8:e1:f3:e7:f6:0a:35:66:51:70:5d:43:09:99: f1:7d:09:74:27:3f:fe:4f:c7:38:bb:92:7a:01:19:aa:76:73: e3:23:bb:a3:ec:da:48:4f:ce:c9:3a:a0:f9:fe:28:b8:b2:44: 07:91:21:1d:cc:f9:58:d4:f6:85:70:5a:2b:fb:32:32:b7:48: c6:1f:fc:d8:46:9d:3a:38:31:2a:d7:06:2e:17:ff:a0:9a:4b: 20:ba:4b:d4:57:f9:bf:2e:30:36:4b:4f:4e:bf:33:53:2a:d3: 1b:ed:3c:48:bc:65:90:30:a7:a2:63:0b:87:1e:1c:99:a8:b9: b0:a3:44:09:66:80:a7:f1:11:63:f9:1a:92:0e:8a:53:0e:ab: 23:a7:06:dd:4d:9c:58:58:29:6a:ed:63:e5:8f:7e:3d:39:aa: 64:01:f2:a3:44:2f:c8:14:98:9e:35:99:f6:5d:23:d7:88:bf: 14:6b:1b:aa:9a:d1:5f:e0:2e:46:42:23:fc:b6:bd:f8:3b:e9: 1d:af:7c:4e:0b:a9:88:d7:02:c3:9e:d2:42:67:ce:0a:fd:98: b1:a1:09:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS9LvGifVvrtfBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk OGJiNTYxNGYtMGYxMi00MzFkLWI2MzAtYWQ5YjM3MjVlNGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9iMTkXPZyA0e2eD4+4tLBX8pPZHgaMRbOod KmM1b+dQ8PGAibmqynkg+np+5JtiAT+7mYbYqCAxazYP26V1KF/uDOpfL/cPmTY9 XX3UFTwScMTXPy/GpOwDyhIvuKxt2nvl/RrfxmZMggMT025fE+1fARb2aJsewMSP pceEnU4uAVdSYdicE9jshpYyQNI18un0SoihQOqxqkjZLCTIIxMZBKTW8e6n7isI xBXuNtew1/V1z+PErvmbk7uljB5SMMpnEH9uoQLG+dMUBN6ezk9eISjRtMkgcrd6 W7NvT5Isc0uRnAgD5OwJh/ilMw1WvPR4MZ2QgKfG/slZyz+jawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOocuK5ErldqOwTooIUH809Y29dWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWMxNzI0MzUtNDQ0Yi0z OWNiLTk1NzEtMDYwMmJlYTBhMjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdpFaO32S0SudiZpY7KfvPZBQ6ZquRyODmHZytFzg+L4j4iYUlxyInI 4fPn9go1ZlFwXUMJmfF9CXQnP/5Pxzi7knoBGap2c+Mju6Ps2khPzsk6oPn+KLiy RAeRIR3M+VjU9oVwWiv7MjK3SMYf/NhGnTo4MSrXBi4X/6CaSyC6S9RX+b8uMDZL T06/M1Mq0xvtPEi8ZZAwp6JjC4ceHJmoubCjRAlmgKfxEWP5GpIOilMOqyOnBt1N nFhYKWrtY+WPfj05qmQB8qNEL8gUmJ41mfZdI9eIvxRrG6qa0V/gLkZCI/y2vfg7 6R2vfE4LqYjXAsOe0kJnzgr9mLGhCe8= -----END CERTIFICATE-----Generated at Fri Apr 4 21:07:36 2025 by rpki-client