$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1deaf4a6-88a3-3ee5-b3b7-be3f1b64cdde.roa File: 1deaf4a6-88a3-3ee5-b3b7-be3f1b64cdde.roa (raw, json) Hash identifier: 6oDN9IsARcqIBhgkUj1nLvA9EoVFnSBg76g7+q3bfuw= Subject key identifier: 2A:D7:14:85:6D:84:14:8C:6D:47:59:F5:FB:DB:89:40:CF:DA:1D:3C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858490021708B2962E38678A83380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1deaf4a6-88a3-3ee5-b3b7-be3f1b64cdde.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 19527 IP address blocks: 34.2.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:70:8b:29:62:e3:86:78:a8:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=19f18a8a-f931-4249-88ac-23ffbb01f663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7f:5d:96:24:a8:b8:29:b9:51:93:06:3e:22: e0:b3:37:b8:e0:bc:60:5e:a6:42:36:bd:32:28:82: b6:23:0a:b3:71:c7:36:fe:cf:c1:e6:2c:70:ca:d9: 9b:2d:2e:da:ee:d4:a5:59:04:b8:9d:27:6c:ff:e9: 23:d9:cf:b2:9d:f4:5a:23:14:c2:87:0a:4a:a9:96: 3f:16:aa:e5:b2:24:9e:fa:c7:41:3e:9a:9a:ea:19: 5c:b1:8d:89:8d:e0:ce:bf:72:52:1e:65:8e:b5:28: bd:0b:d4:bf:ce:4a:c1:0b:7f:94:17:cf:90:13:e2: 2f:fd:e9:ae:eb:0c:70:d1:e9:e1:ca:91:76:f2:b1: d3:61:7f:ab:7f:fe:64:90:d1:47:b3:1b:56:41:4a: ca:6a:83:3c:66:b2:0c:dc:da:09:48:0c:d8:32:e1: ca:0e:4e:5e:13:54:ed:55:00:ce:75:54:e4:83:d0: eb:94:83:93:10:b5:bd:fb:44:5d:08:ed:81:69:21: 09:bb:5c:d9:85:22:6d:4b:c1:ac:71:55:e0:99:df: e9:27:4a:61:2e:c3:b6:6a:da:43:90:4d:a4:00:c2: d3:81:22:d5:87:4c:36:63:11:0a:37:45:ee:19:38: b2:de:90:23:c3:0d:2f:1c:6e:f3:80:23:ee:8e:4c: 2a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D7:14:85:6D:84:14:8C:6D:47:59:F5:FB:DB:89:40:CF:DA:1D:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1deaf4a6-88a3-3ee5-b3b7-be3f1b64cdde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:77:23:6c:71:be:43:b6:d6:08:85:3b:27:15:ae:cd:d2:fd: f2:e1:cc:79:fa:23:20:40:bc:d9:66:83:fe:97:13:09:66:c0: 6c:f5:04:87:bc:95:fd:f5:94:7e:13:d9:36:54:ef:b0:61:71: 69:33:66:ca:b0:60:07:5c:b7:93:29:8e:84:9c:57:73:d0:31: 52:b1:dd:16:a1:61:fd:cf:53:ca:5c:a4:20:a9:16:ce:40:1e: e3:21:1b:09:f3:83:87:cd:b1:ec:a1:2b:57:37:b7:4a:fd:22: 37:6b:d9:bf:1f:8e:60:fc:c8:90:eb:7a:6f:22:18:84:b6:11: 68:d8:d7:e8:72:af:e1:11:2e:eb:a8:27:34:9a:ca:50:d7:a1: f7:7a:ac:3c:ee:b2:c5:0c:d1:8e:4d:93:d2:b3:37:a3:06:a1: 36:24:e8:6b:fc:57:54:03:ec:8a:ab:ed:08:3e:06:c2:1d:be: 62:6f:10:5f:88:54:2b:58:18:7f:22:b1:86:9d:35:fa:c3:c5: ad:50:c4:e2:a6:c7:c1:9c:fa:e4:88:e8:46:48:d2:cf:eb:af: 33:37:ca:c4:3c:db:22:8a:56:28:22:3c:ab:4c:80:fb:7e:0b: a2:d7:06:7d:3e:0e:df:e2:ee:9a:21:50:e5:1f:dd:72:28:d4: 9e:4f:27:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIXCLKWLjhnioM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk MTlmMThhOGEtZjkzMS00MjQ5LTg4YWMtMjNmZmJiMDFmNjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX9dliSouCm5UZMGPiLgsze44LxgXqZCNr0y KIK2Iwqzccc2/s/B5ixwytmbLS7a7tSlWQS4nSds/+kj2c+ynfRaIxTChwpKqZY/ FqrlsiSe+sdBPpqa6hlcsY2JjeDOv3JSHmWOtSi9C9S/zkrBC3+UF8+QE+Iv/emu 6wxw0enhypF28rHTYX+rf/5kkNFHsxtWQUrKaoM8ZrIM3NoJSAzYMuHKDk5eE1Tt VQDOdVTkg9DrlIOTELW9+0RdCO2BaSEJu1zZhSJtS8GscVXgmd/pJ0phLsO2atpD kE2kAMLTgSLVh0w2YxEKN0XuGTiy3pAjww0vHG7zgCPujkwqMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrXFIVthBSMbUdZ9fvbiUDP2h08MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWRlYWY0YTYtODhhMy0z ZWU1LWIzYjctYmUzZjFiNjRjZGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIgIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAt3I2xxvkO21giFOycVrs3S/fLhzHn6IyBAvNlmg/6XEwlmwGz1BIe8 lf31lH4T2TZU77BhcWkzZsqwYAdct5MpjoScV3PQMVKx3RahYf3PU8pcpCCpFs5A HuMhGwnzg4fNseyhK1c3t0r9Ijdr2b8fjmD8yJDrem8iGIS2EWjY1+hyr+ERLuuo JzSaylDXofd6rDzussUM0Y5Nk9KzN6MGoTYk6Gv8V1QD7Iqr7Qg+BsIdvmJvEF+I VCtYGH8isYadNfrDxa1QxOKmx8Gc+uSI6EZI0s/rrzM3ysQ82yKKVigiPKtMgPt+ C6LXBn0+Dt/i7pohUOUf3XIo1J5PJ7g= -----END CERTIFICATE-----Generated at Fri Apr 4 08:26:16 2025 by rpki-client