$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23b8a98d-c1a0-3317-b565-a74b705cd609.roa File: 23b8a98d-c1a0-3317-b565-a74b705cd609.roa (raw, json) Hash identifier: DwnlZoCdEErhQ9LLh0/as7dHQlcdXLKFoq3aXD2Ywu0= Subject key identifier: 8A:F7:E6:83:FB:67:B4:6F:7C:64:64:EA:51:BB:EC:24:99:6D:BC:45 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C1BA5C6538B25D2824980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23b8a98d-c1a0-3317-b565-a74b705cd609.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.176.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:1b:a5:c6:53:8b:25:d2:82:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=03667f4b-3877-498e-be46-0e3412137d93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:77:54:12:d1:6c:67:0d:68:4b:b1:1a:10:47: 10:19:67:6d:cf:9a:4e:1e:0c:06:ea:4c:c9:03:59: 9b:93:7b:38:9b:c5:51:19:69:0c:75:86:76:4c:a0: ad:ba:32:c7:0a:bd:29:e3:91:48:6b:49:7b:f6:1d: 25:a9:af:11:73:ad:b6:4b:fd:df:15:bd:72:8e:45: fe:02:d3:49:94:9e:2f:6e:47:dd:14:c6:80:84:55: b7:a7:59:05:5e:fe:ba:bf:74:7a:cf:53:4e:e1:35: 36:fb:e1:95:e9:a2:fc:d8:99:1d:c8:96:b1:d4:8c: 4b:0a:f5:0b:77:4c:fb:44:51:b1:36:33:93:a3:1a: 87:31:70:45:4c:7b:d6:42:cd:a4:4a:e7:3e:b6:39: c7:3c:73:13:fa:29:91:bf:b8:11:23:1d:23:2f:c8: 91:ea:63:41:0b:ff:78:82:eb:76:ac:50:1e:b6:a6: 23:2d:95:99:1a:f4:79:a3:47:ec:27:ab:08:2f:5c: 75:8c:e4:fe:7e:50:fb:ca:73:65:f0:b4:c0:b4:00: 9b:1e:8b:e9:2e:a2:61:b8:57:83:8b:d3:a5:82:be: b3:67:2a:b9:cb:56:22:60:b4:a7:5d:d5:b3:07:ea: 12:7a:1b:c2:34:09:3e:25:08:70:24:4e:7e:d2:ba: 82:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F7:E6:83:FB:67:B4:6F:7C:64:64:EA:51:BB:EC:24:99:6D:BC:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23b8a98d-c1a0-3317-b565-a74b705cd609.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.176.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:f4:c7:4e:2c:8e:dd:19:d0:0c:fc:d6:63:3e:79:44:a5:3c: 09:c9:38:8b:14:0b:c7:a6:13:2a:8e:f4:96:bb:1e:d0:2e:b4: a2:ad:b2:35:ef:b1:5d:d5:bf:78:5b:10:c8:84:37:00:f6:04: 1b:47:d9:f6:f7:b7:7e:99:e0:29:ac:15:2f:ad:bf:1f:5e:ac: ba:8e:ad:a4:31:ef:d7:86:bc:c5:76:85:52:81:95:c8:8b:10: 3b:9c:43:e6:0b:20:98:a5:0a:68:d4:31:d2:65:27:f7:96:ab: 57:c8:f8:89:10:70:d6:94:56:d7:a8:29:11:f8:cd:65:9f:c7: 89:75:c5:7f:5d:38:b1:1a:8b:ce:2c:73:96:67:65:14:36:3e: 0b:44:47:a4:1d:cb:f9:03:4e:f3:88:e4:df:ed:53:95:01:0d: a3:76:5a:0d:fa:57:ca:dd:36:ac:21:36:b9:22:4d:c2:b4:8f: 70:ae:b0:02:24:a6:29:c0:e9:6c:3f:e6:e7:f4:b0:7e:52:71: 38:06:63:62:43:13:05:0f:c7:36:af:e3:51:6c:6e:42:c5:27: e5:7e:00:82:53:ad:ed:35:54:8b:a1:1a:da:f4:e8:85:ed:ab: 2a:f5:8e:cc:7d:f4:0b:bc:40:dc:4c:06:54:4c:53:32:64:46: f4:ea:e1:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITBulxlOLJdKCSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MDM2NjdmNGItMzg3Ny00OThlLWJlNDYtMGUzNDEyMTM3ZDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HdUEtFsZw1oS7EaEEcQGWdtz5pOHgwG6kzJ A1mbk3s4m8VRGWkMdYZ2TKCtujLHCr0p45FIa0l79h0lqa8Rc622S/3fFb1yjkX+ AtNJlJ4vbkfdFMaAhFW3p1kFXv66v3R6z1NO4TU2++GV6aL82JkdyJax1IxLCvUL d0z7RFGxNjOToxqHMXBFTHvWQs2kSuc+tjnHPHMT+imRv7gRIx0jL8iR6mNBC/94 gut2rFAetqYjLZWZGvR5o0fsJ6sIL1x1jOT+flD7ynNl8LTAtACbHovpLqJhuFeD i9Olgr6zZyq5y1YiYLSnXdWzB+oSehvCNAk+JQhwJE5+0rqCYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIr35oP7Z7RvfGRk6lG77CSZbbxFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjNiOGE5OGQtYzFhMC0z MzE3LWI1NjUtYTc0YjcwNWNkNjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIrAwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD30x04sjt0Z0Az81mM+eUSlPAnJOIsUC8emEyqO9Ja7HtAutKKtsjXv sV3Vv3hbEMiENwD2BBtH2fb3t36Z4CmsFS+tvx9erLqOraQx79eGvMV2hVKBlciL EDucQ+YLIJilCmjUMdJlJ/eWq1fI+IkQcNaUVteoKRH4zWWfx4l1xX9dOLEai84s c5ZnZRQ2PgtER6Qdy/kDTvOI5N/tU5UBDaN2Wg36V8rdNqwhNrkiTcK0j3CusAIk pinA6Ww/5uf0sH5ScTgGY2JDEwUPxzav41FsbkLFJ+V+AIJTre01VIuhGtr06IXt qyr1jsx99Au8QNxMBlRMUzJkRvTq4Qk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:43 2025 by rpki-client