$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/398fb419-e600-3f6a-a695-bd52e5c106cb.roa File: 398fb419-e600-3f6a-a695-bd52e5c106cb.roa (raw, json) Hash identifier: crrNp46hSRAb0S/SZrGa+34DNm9nLRDNwwAh2F+Cq58= Subject key identifier: EE:DA:7C:D5:05:DE:7C:66:1D:59:D8:BD:37:39:1C:77:93:4F:1F:B7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C58218337F9D156C12DC9F40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/398fb419-e600-3f6a-a695-bd52e5c106cb.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 34.122.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:18:33:7f:9d:15:6c:12:dc:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=563dcfff-5b34-4718-ae1c-772edca5e69a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:61:e9:1a:ed:b0:b1:57:d5:e9:29:8e:a0:47: 0c:93:f0:4f:02:1f:35:3c:e9:30:ae:f6:d6:52:e9: 64:b2:9d:84:49:05:40:15:71:ee:16:4e:e7:0f:65: 02:f3:54:01:9c:c4:26:c9:c8:5e:91:92:2a:8b:44: ab:54:30:85:b5:5a:03:eb:a4:7d:0d:15:a5:57:59: 45:cf:de:dc:59:8d:f0:df:67:d1:b0:0d:86:e3:cc: 6f:58:b5:d5:09:27:d9:9d:18:d9:f5:6f:d4:87:00: 7c:eb:12:bc:b2:32:52:56:e8:48:85:b2:09:d8:ea: ae:10:2e:b6:63:0d:9a:bf:46:a9:1f:fe:4f:f8:ae: 15:43:6a:fd:5c:2b:59:4b:c8:54:2c:db:f9:69:cd: 48:d3:a8:e5:bb:d5:76:16:cf:6d:14:9f:be:3b:71: af:80:da:4e:ba:d4:3f:ea:85:df:08:8a:25:87:12: 9d:76:ab:c7:02:15:78:8b:f7:ef:9a:3e:27:6c:c5: c5:e5:aa:0f:0a:2b:8e:cd:87:f0:ce:02:1c:f5:36: 71:5c:32:09:bc:c6:94:d3:d6:61:51:0a:a4:15:89: 95:99:b0:7c:84:5c:fc:a5:33:5f:ff:d8:12:0c:4f: f4:34:57:e1:3f:8f:c3:d1:07:5c:7f:ae:77:ae:43: 76:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:DA:7C:D5:05:DE:7C:66:1D:59:D8:BD:37:39:1C:77:93:4F:1F:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/398fb419-e600-3f6a-a695-bd52e5c106cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.122.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:02:94:08:b7:db:bf:35:d7:e9:fa:28:12:e2:83:36:f3:bc: d5:37:51:9d:0a:29:63:6c:75:69:c2:7d:f8:64:c5:e0:75:74: 6f:ab:5d:17:6c:42:4d:ca:21:9e:df:24:4b:67:98:d9:0f:d9: 04:1a:77:56:6d:ad:f9:90:15:2f:11:6c:e0:e5:58:6d:91:bf: 10:1d:08:b5:ea:3e:5d:ef:8f:52:18:09:39:21:f5:d9:6f:eb: 1b:19:7a:10:38:63:c1:9e:f4:fd:b4:fc:0f:31:a0:8d:e6:38: 19:18:74:18:01:dc:7d:78:cd:0f:1a:65:29:81:11:fb:92:cf: 26:7a:29:af:12:d2:81:c8:28:06:b6:12:e1:90:12:6e:50:90: 4a:73:e3:1c:46:f4:c5:a7:62:b2:b6:22:34:84:38:a0:c9:05: b8:8f:33:dc:ed:e9:f1:9d:15:07:46:8b:35:25:5c:d3:83:ae: 12:4d:f6:5f:45:da:81:10:a3:b4:28:ae:d2:ee:bb:ae:58:57: 91:32:05:8a:7a:19:be:03:53:3e:f1:1a:83:25:55:9f:e4:36: 54:fc:f1:86:48:06:56:6e:e8:b8:d2:58:d7:20:2b:67:40:5c: a4:39:13:14:8b:cf:22:ee:94:38:d1:5d:38:a8:5a:ed:e6:de: 5f:7f:b8:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFghgzf50VbBLcn0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NTYzZGNmZmYtNWIzNC00NzE4LWFlMWMtNzcyZWRjYTVlNjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWHpGu2wsVfV6SmOoEcMk/BPAh81POkwrvbW Uulksp2ESQVAFXHuFk7nD2UC81QBnMQmychekZIqi0SrVDCFtVoD66R9DRWlV1lF z97cWY3w32fRsA2G48xvWLXVCSfZnRjZ9W/UhwB86xK8sjJSVuhIhbIJ2OquEC62 Yw2av0apH/5P+K4VQ2r9XCtZS8hULNv5ac1I06jlu9V2Fs9tFJ++O3GvgNpOutQ/ 6oXfCIolhxKddqvHAhV4i/fvmj4nbMXF5aoPCiuOzYfwzgIc9TZxXDIJvMaU09Zh UQqkFYmVmbB8hFz8pTNf/9gSDE/0NFfhP4/D0Qdcf653rkN2wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7afNUF3nxmHVnYvTc5HHeTTx+3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzk4ZmI0MTktZTYwMC0z ZjZhLWE2OTUtYmQ1MmU1YzEwNmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0ClAi327811+n6KBLigzbzvNU3UZ0KKWNsdWnCffhkxeB1dG+rXRds Qk3KIZ7fJEtnmNkP2QQad1ZtrfmQFS8RbODlWG2RvxAdCLXqPl3vj1IYCTkh9dlv 6xsZehA4Y8Ge9P20/A8xoI3mOBkYdBgB3H14zQ8aZSmBEfuSzyZ6Ka8S0oHIKAa2 EuGQEm5QkEpz4xxG9MWnYrK2IjSEOKDJBbiPM9zt6fGdFQdGizUlXNODrhJN9l9F 2oEQo7QortLuu65YV5EyBYp6Gb4DUz7xGoMlVZ/kNlT88YZIBlZu6LjSWNcgK2dA XKQ5ExSLzyLulDjRXTioWu3m3l9/uP8= -----END CERTIFICATE-----Generated at Sun Feb 16 16:03:46 2025 by rpki-client