$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2fb32824-2de2-39c0-a0ef-0e0418cfc109.roa File: 2fb32824-2de2-39c0-a0ef-0e0418cfc109.roa (raw, json) Hash identifier: 3LbF6RNp8qVz/de0WCwhfY4s1CImGvELxBFcbTSFGhk= Subject key identifier: 79:DE:45:D8:F9:6F:AB:32:4D:9B:C4:95:F6:FB:10:63:9D:AF:44:69 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BD795861A5130FC762580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2fb32824-2de2-39c0-a0ef-0e0418cfc109.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.66.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:d7:95:86:1a:51:30:fc:76:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=693178ff-2819-4ef4-8ff3-c3d36b54e3dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e6:dd:6b:4d:da:aa:9e:17:98:79:80:97:64: af:00:57:73:2e:9f:6c:cb:fc:12:4b:74:09:1c:fa: eb:52:28:de:0b:14:cd:d6:d5:76:84:24:f8:62:87: 20:f4:ce:c3:82:5a:d1:b5:af:70:a5:38:3a:54:99: 77:f0:89:cf:3b:00:e1:de:e0:95:c0:c2:e0:c1:9a: c5:83:0b:9f:ec:bc:6f:75:a9:22:4d:f2:8d:b7:58: cf:32:eb:9c:cf:9b:98:02:5a:4c:16:c9:50:96:28: 1e:f7:94:49:63:60:ed:1c:f5:b4:c5:b5:86:a6:67: bc:db:b1:ac:cd:7a:e9:16:c7:10:26:71:35:26:51: 67:8e:67:d4:c5:eb:ad:32:2a:a7:64:31:3d:8a:81: 2a:02:11:33:c0:f0:df:9d:10:e4:8b:17:e0:be:0a: 6e:17:16:7b:17:45:e5:a0:8d:f4:9f:18:08:0d:58: 2c:dc:c0:0b:de:3f:09:b4:ee:5f:71:f0:2f:63:6b: 69:a5:fc:6a:03:1c:f5:05:72:88:9e:e9:56:f8:e9: 8c:2b:ab:48:9d:d2:58:5e:7c:1b:6a:81:59:6e:54: 74:43:b4:67:67:4a:47:90:b4:cf:33:91:6c:49:67: 40:d5:29:9a:10:7f:75:4f:01:a4:aa:06:e2:d1:61: 02:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DE:45:D8:F9:6F:AB:32:4D:9B:C4:95:F6:FB:10:63:9D:AF:44:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2fb32824-2de2-39c0-a0ef-0e0418cfc109.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.66.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:06:8a:34:20:76:8f:f6:f8:b4:c2:53:78:99:8a:d2:c3:d9: d0:48:89:f0:95:c0:cf:5b:94:38:c2:c1:1b:97:a2:b2:52:70: c5:e9:a3:cc:77:53:a2:fe:d8:22:62:3c:f1:07:a0:f2:80:f8: 19:b7:b9:91:0d:7e:da:13:af:14:07:c3:27:87:a1:ac:73:17: 5c:e6:03:bc:b5:54:20:17:f7:51:e4:8f:9f:4e:e2:36:8a:46: 66:d0:3b:eb:b9:33:8f:44:65:96:e2:3f:5b:6b:5e:6f:d7:9a: 64:61:ad:fd:0a:7d:bc:8c:ac:d4:7f:40:a5:27:a1:b2:64:ea: 8c:25:3d:39:f4:20:40:69:8f:1f:60:f7:6e:71:73:f0:4a:43: 9a:a6:de:2f:60:5b:c1:15:fb:1e:f5:b5:dc:78:9a:9a:2f:94: ca:e1:b7:fd:38:92:6c:35:f5:af:22:66:4d:61:b2:89:0a:90: ec:07:30:a2:39:2d:74:ee:07:db:67:46:b9:fb:1a:a3:3c:b3: 51:20:40:ce:e9:40:0a:d7:e4:56:4f:a8:d3:ca:44:a6:69:14: 81:30:47:0f:4a:55:13:b5:d8:2d:67:6d:3e:42:71:08:a6:e7: a5:d0:02:bb:88:bb:a9:26:85:e5:aa:a2:f3:df:4a:8f:50:4e: 41:07:af:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS9eVhhpRMPx2JYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NjkzMTc4ZmYtMjgxOS00ZWY0LThmZjMtYzNkMzZiNTRlM2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoObda03aqp4XmHmAl2SvAFdzLp9sy/wSS3QJ HPrrUijeCxTN1tV2hCT4Yocg9M7DglrRta9wpTg6VJl38InPOwDh3uCVwMLgwZrF gwuf7LxvdakiTfKNt1jPMuucz5uYAlpMFslQlige95RJY2DtHPW0xbWGpme827Gs zXrpFscQJnE1JlFnjmfUxeutMiqnZDE9ioEqAhEzwPDfnRDkixfgvgpuFxZ7F0Xl oI30nxgIDVgs3MAL3j8JtO5fcfAvY2tppfxqAxz1BXKInulW+OmMK6tIndJYXnwb aoFZblR0Q7RnZ0pHkLTPM5FsSWdA1SmaEH91TwGkqgbi0WECZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHneRdj5b6syTZvElfb7EGOdr0RpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmZiMzI4MjQtMmRlMi0z OWMwLWEwZWYtMGUwNDE4Y2ZjMTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYGijQgdo/2+LTCU3iZitLD2dBIifCVwM9blDjCwRuXorJScMXpo8x3 U6L+2CJiPPEHoPKA+Bm3uZENftoTrxQHwyeHoaxzF1zmA7y1VCAX91Hkj59O4jaK RmbQO+u5M49EZZbiP1trXm/XmmRhrf0KfbyMrNR/QKUnobJk6owlPTn0IEBpjx9g 925xc/BKQ5qm3i9gW8EV+x71tdx4mpovlMrht/04kmw19a8iZk1hsokKkOwHMKI5 LXTuB9tnRrn7GqM8s1EgQM7pQArX5FZPqNPKRKZpFIEwRw9KVRO12C1nbT5CcQim 56XQAruIu6kmheWqovPfSo9QTkEHrx8= -----END CERTIFICATE-----Generated at Fri Apr 4 21:45:34 2025 by rpki-client