$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c83a503-27dc-3457-9a6d-533e7d3869d7.roa File: 2c83a503-27dc-3457-9a6d-533e7d3869d7.roa (raw, json) Hash identifier: ZsPJ2IAjiQez5v1TDzQ2O968/CBkPvRUQiDWgZqw7y8= Subject key identifier: 7C:21:B9:C2:56:E6:2B:81:C7:2E:BD:7C:D8:FA:AF:1B:E5:BA:A8:E4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BBB2D4263347848C26700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c83a503-27dc-3457-9a6d-533e7d3869d7.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.123.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:bb:2d:42:63:34:78:48:c2:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=e9e49173-cb29-4495-af25-313684011141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5b:96:16:88:50:b4:60:5e:3c:b6:13:85:73: d4:35:ae:eb:38:3f:92:2a:13:93:ec:69:1f:ec:7c: 68:d4:b8:95:e5:97:5a:f4:f0:ea:38:5b:e0:2f:74: c6:ff:20:76:cc:9b:66:1e:e2:c6:29:16:13:ee:02: ba:47:e5:e6:17:d1:03:0d:22:09:c1:a3:e2:a2:ad: f9:b2:ad:74:29:af:b5:72:b5:6b:75:e0:fd:3e:51: 81:ec:93:fa:10:93:08:ce:d3:47:54:79:ae:ac:51: b7:89:75:71:b0:38:57:32:b6:ce:02:1b:b0:f2:d3: c8:ad:e1:94:73:bd:bf:7c:0d:72:63:e8:25:2a:a8: 74:6a:44:d5:e4:de:28:7c:27:84:04:99:12:cf:c0: 4d:16:3b:29:a3:ce:df:15:e8:e1:f0:86:2c:6c:96: 41:83:70:dc:e6:5a:3e:9b:5f:bc:e1:f5:4c:80:44: 02:6c:d5:29:1b:12:fb:23:42:a5:e1:c2:07:35:1a: ec:20:73:be:91:02:61:92:55:23:d5:c3:5c:db:52: 7b:52:c3:7c:e3:b7:e6:0a:e3:5f:9a:c8:c4:90:e3: 1e:3c:14:f4:d6:7c:59:2a:30:7d:d7:55:85:39:f1: 75:56:ca:88:a5:dd:bd:cc:b8:a7:ef:2a:ea:95:82: ce:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:21:B9:C2:56:E6:2B:81:C7:2E:BD:7C:D8:FA:AF:1B:E5:BA:A8:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c83a503-27dc-3457-9a6d-533e7d3869d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.123.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:78:3d:54:e6:7e:49:86:26:54:f0:31:f1:86:20:97:3e:51: 21:9b:73:d2:84:2b:00:e4:ae:83:3c:ff:89:e9:18:4e:96:e8: 3c:b3:a4:6a:ce:26:8f:dd:55:e3:f1:cd:b2:8b:f2:2a:6c:80: 8e:91:cb:bf:aa:34:a9:62:c9:8a:b0:98:4e:95:84:05:85:82: 32:3d:72:5c:07:dd:45:4f:52:de:d8:44:2e:54:2e:ec:d9:ba: 69:47:d1:7c:bd:61:00:92:e1:ae:1e:75:6f:e8:cf:7e:cc:5b: 70:72:fc:a9:06:22:b5:6d:e7:f3:d9:29:91:96:2e:92:11:ea: 08:6d:39:99:12:68:b5:ad:5e:2f:ae:85:5a:80:7d:3c:b6:61: c7:d2:be:5c:54:0f:c7:df:c1:7b:4c:af:42:bc:b8:4d:36:08: 63:0a:f1:06:4a:82:11:57:25:01:85:db:c5:23:26:e2:4e:e2: 87:4b:a4:33:aa:14:67:41:bb:ba:ab:ad:80:13:73:0f:3c:a2: 81:95:59:ed:c2:a9:54:6c:52:d1:4b:21:74:f1:aa:62:54:3d: d2:98:d5:e3:72:5e:10:5c:c5:b7:d9:d1:7f:47:5b:e7:37:b8: 95:a6:ea:70:03:ca:3b:2f:77:0c:46:e1:76:26:5f:4a:f3:1c: e6:64:01:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS7stQmM0eEjCZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZTllNDkxNzMtY2IyOS00NDk1LWFmMjUtMzEzNjg0MDExMTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsluWFohQtGBePLYThXPUNa7rOD+SKhOT7Gkf 7Hxo1LiV5Zda9PDqOFvgL3TG/yB2zJtmHuLGKRYT7gK6R+XmF9EDDSIJwaPioq35 sq10Ka+1crVrdeD9PlGB7JP6EJMIztNHVHmurFG3iXVxsDhXMrbOAhuw8tPIreGU c72/fA1yY+glKqh0akTV5N4ofCeEBJkSz8BNFjspo87fFejh8IYsbJZBg3Dc5lo+ m1+84fVMgEQCbNUpGxL7I0Kl4cIHNRrsIHO+kQJhklUj1cNc21J7UsN847fmCuNf msjEkOMePBT01nxZKjB911WFOfF1VsqIpd29zLin7yrqlYLOawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwhucJW5iuBxy69fNj6rxvluqjkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmM4M2E1MDMtMjdkYy0z NDU3LTlhNmQtNTMzZTdkMzg2OWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInvQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFF4PVTmfkmGJlTwMfGGIJc+USGbc9KEKwDkroM8/4npGE6W6DyzpGrO Jo/dVePxzbKL8ipsgI6Ry7+qNKliyYqwmE6VhAWFgjI9clwH3UVPUt7YRC5ULuzZ umlH0Xy9YQCS4a4edW/oz37MW3By/KkGIrVt5/PZKZGWLpIR6ghtOZkSaLWtXi+u hVqAfTy2YcfSvlxUD8ffwXtMr0K8uE02CGMK8QZKghFXJQGF28UjJuJO4odLpDOq FGdBu7qrrYATcw88ooGVWe3CqVRsUtFLIXTxqmJUPdKY1eNyXhBcxbfZ0X9HW+c3 uJWm6nADyjsvdwxG4XYmX0rzHOZkAVE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:52 2025 by rpki-client