$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ff6b528-b620-3d32-bd31-d859ee65c282.roa File: 2ff6b528-b620-3d32-bd31-d859ee65c282.roa (raw, json) Hash identifier: RSZ1a/tH7m5fcoAYTdhEoqyJviHkhglaeqzAOe4RQs8= Subject key identifier: 5B:D6:13:BC:14:44:8A:B7:DB:5C:D3:59:37:00:1C:F6:98:42:52:D5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BD22C752D17D599A18680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ff6b528-b620-3d32-bd31-d859ee65c282.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.132.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:d2:2c:75:2d:17:d5:99:a1:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=91538911-71cd-4950-9faf-79d424086058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1c:9c:a2:13:a2:d6:77:79:7c:ba:eb:d8:d3: 0f:ef:d4:78:21:df:24:5b:64:6f:e6:13:d5:1d:88: b8:44:74:a9:81:01:b5:b6:b6:11:f4:19:15:93:16: 48:5b:94:87:a8:b6:b3:26:2b:c1:d0:d3:cf:b1:3d: e8:14:1f:62:77:53:c5:ee:15:2e:1e:9d:a7:19:f8: 9b:ad:0c:e7:82:a7:a3:09:4e:4d:7c:c0:09:c7:db: fa:4b:23:44:e0:c1:fb:4a:48:23:93:ee:99:b6:d5: 1c:35:91:dc:0e:0b:74:47:d5:7a:f9:60:6e:f2:ac: 3a:19:4e:c0:8b:e3:bf:7f:a1:6d:54:dc:51:ee:d3: 65:4f:1c:e4:27:1e:50:d5:76:07:d3:ee:58:c9:93: de:47:cc:99:7c:fe:4c:f1:ba:f6:9d:13:0f:a4:ad: 03:b4:cf:46:31:7f:30:23:ce:9c:3a:7e:10:4b:9d: 1f:2f:ce:ac:a4:b6:8f:ae:a2:68:20:1b:e5:63:d9: d5:2e:86:27:d4:81:f7:90:15:6c:d0:50:18:63:ae: 0c:92:71:33:c5:cb:67:e8:f2:67:22:82:ed:d1:70: 7b:eb:36:c9:c1:71:dd:5e:d0:eb:4b:01:6c:57:ea: 9b:9d:a7:38:61:7e:91:9c:ab:82:8f:07:ea:c4:52: fa:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D6:13:BC:14:44:8A:B7:DB:5C:D3:59:37:00:1C:F6:98:42:52:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ff6b528-b620-3d32-bd31-d859ee65c282.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.132.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:88:5f:8f:0c:14:ee:86:45:a9:6f:4f:34:11:8f:19:a5:a1: 0a:77:2f:b3:96:1f:30:7a:73:bf:55:51:b5:8f:f0:0c:48:cd: d9:9f:e9:c1:40:50:16:cf:96:65:b7:53:43:a8:d5:cc:9d:fe: 7c:20:6b:ae:e6:fd:b0:78:bf:64:53:e4:95:6a:e7:be:02:c4: fd:a6:32:dd:df:c8:16:72:f4:99:ee:c7:d4:96:35:dd:1d:a0: bb:4c:45:0b:7a:5d:8d:10:75:7e:47:85:54:6f:8f:98:86:29: 3e:e6:90:26:20:07:ce:bf:31:c3:db:93:92:b6:0c:6a:a5:84: ae:e6:31:bd:76:dd:41:20:69:f4:dc:76:e9:48:2d:5f:4e:03: a9:f4:5b:ca:a6:c3:81:69:5a:03:93:27:74:39:d2:d9:b3:7c: 76:bf:c4:87:b8:21:b3:5e:92:1e:27:01:43:98:ee:31:93:6b: 8f:87:ba:b7:08:39:9b:74:e5:18:5f:50:96:82:55:00:8a:7a: fe:3b:ad:06:f1:26:06:cd:67:8e:d6:69:d7:f3:02:5c:e5:b2: c8:3f:95:3c:d9:7c:6f:36:4e:e2:c5:af:60:8d:58:6c:93:a5: fc:48:b2:1a:35:60:3c:3a:34:01:0d:97:b5:49:e4:aa:5a:78: c0:67:41:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS9IsdS0X1ZmhhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk OTE1Mzg5MTEtNzFjZC00OTUwLTlmYWYtNzlkNDI0MDg2MDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBycohOi1nd5fLrr2NMP79R4Id8kW2Rv5hPV HYi4RHSpgQG1trYR9BkVkxZIW5SHqLazJivB0NPPsT3oFB9id1PF7hUuHp2nGfib rQzngqejCU5NfMAJx9v6SyNE4MH7Skgjk+6ZttUcNZHcDgt0R9V6+WBu8qw6GU7A i+O/f6FtVNxR7tNlTxzkJx5Q1XYH0+5YyZPeR8yZfP5M8br2nRMPpK0DtM9GMX8w I86cOn4QS50fL86spLaPrqJoIBvlY9nVLoYn1IH3kBVs0FAYY64MknEzxctn6PJn IoLt0XB76zbJwXHdXtDrSwFsV+qbnac4YX6RnKuCjwfqxFL6awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvWE7wURIq321zTWTcAHPaYQlLVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmZmNmI1MjgtYjYyMC0z ZDMyLWJkMzEtZDg1OWVlNjVjMjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqIX48MFO6GRalvTzQRjxmloQp3L7OWHzB6c79VUbWP8AxIzdmf6cFA UBbPlmW3U0Oo1cyd/nwga67m/bB4v2RT5JVq574CxP2mMt3fyBZy9Jnux9SWNd0d oLtMRQt6XY0QdX5HhVRvj5iGKT7mkCYgB86/McPbk5K2DGqlhK7mMb123UEgafTc dulILV9OA6n0W8qmw4FpWgOTJ3Q50tmzfHa/xIe4IbNekh4nAUOY7jGTa4+HurcI OZt05RhfUJaCVQCKev47rQbxJgbNZ47WadfzAlzlssg/lTzZfG82TuLFr2CNWGyT pfxIsho1YDw6NAENl7VJ5KpaeMBnQVk= -----END CERTIFICATE-----Generated at Fri Mar 14 10:02:24 2025 by rpki-client