$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/420e8b3f-5f47-3267-968b-9857928a98d5.roa File: 420e8b3f-5f47-3267-968b-9857928a98d5.roa (raw, json) Hash identifier: z6+7FSN8LiWMImQ9KG0oM65SbHaj9pyNfH4059+gwDY= Subject key identifier: EC:6B:3A:FB:C3:A5:26:3A:7B:26:2D:A7:7B:44:AE:0E:A9:88:BF:40 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BFC7A97D8E9C924FE1280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/420e8b3f-5f47-3267-968b-9857928a98d5.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.145.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:fc:7a:97:d8:e9:c9:24:fe:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=8a9fe31b-4cb4-4b78-b53a-6a03cb4a3b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:38:29:62:a0:fc:c3:46:af:ae:75:8a:e6:9f: 58:dd:f1:fd:b1:1e:f2:e4:16:21:5b:5f:3a:d3:26: a0:f3:25:63:b2:8c:b1:6d:b6:f2:e0:ae:3f:1c:04: 8a:cb:38:76:a3:22:c2:e0:78:ec:3f:98:4c:d7:a5: 71:55:52:dd:c8:49:e3:01:94:4e:d1:74:1a:98:d9: 6e:e2:64:bb:7b:fd:f8:4b:b5:b3:6d:4a:c5:31:5a: 3a:91:cd:e4:75:ff:7e:56:71:f2:b1:5b:c0:91:bf: 92:a4:a9:9c:8a:60:3a:e0:3a:5b:28:e9:ae:ed:ac: 48:43:6c:1c:c2:83:93:da:59:06:27:e3:61:3a:e1: 29:96:2c:fd:e9:61:b5:6f:aa:2c:91:a0:bf:9b:fd: e7:1d:09:ef:c5:df:5d:44:28:6c:f9:80:ea:84:50: e2:e3:ef:7a:0e:3c:99:70:95:7a:1f:e3:71:61:cb: 19:42:77:91:b8:ad:2b:54:12:cc:06:f9:88:b5:81: 13:84:8b:d0:a1:e0:a3:ea:e6:bc:3b:bd:ab:83:ee: d3:b0:21:ea:c3:e5:84:36:27:01:d3:aa:83:4b:1e: 56:02:e3:f7:45:e2:06:61:53:e2:8b:63:97:ba:9c: bd:a8:46:27:2e:22:18:7c:40:df:a7:13:d3:02:0a: 76:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6B:3A:FB:C3:A5:26:3A:7B:26:2D:A7:7B:44:AE:0E:A9:88:BF:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/420e8b3f-5f47-3267-968b-9857928a98d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.145.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:c0:a6:a2:eb:9a:1a:97:c9:90:e0:f0:84:fe:25:de:46:8d: ae:4a:8f:3f:20:6a:93:1e:6b:9a:d2:ce:a1:dd:30:c7:df:7f: a7:4d:b7:33:d1:fd:64:86:53:3a:91:db:a1:eb:f0:84:14:62: 33:e0:30:19:71:77:5c:52:14:67:c4:76:85:35:13:c8:68:19: 13:de:18:10:b2:78:fa:ea:3c:f4:ba:ca:f2:ed:39:a7:49:e5: 3b:18:34:31:6f:18:f0:0d:ac:e8:39:7e:3a:5d:d0:a7:ff:ff: 1e:2e:c3:e6:9b:96:ae:7c:a5:03:25:8b:80:89:45:d5:48:2e: f1:bc:83:6f:30:98:f6:4e:1c:ca:77:eb:98:d1:55:12:99:34: dc:db:b4:e6:c3:6d:04:3a:45:00:7d:db:06:2e:c5:6e:5c:b8: ff:c0:c8:85:c7:69:7b:2d:3d:c5:4b:36:e9:42:8b:db:15:a6: ac:80:b3:bd:10:1c:43:c9:b1:c4:d9:de:ae:1f:a3:b2:25:6d: f8:ad:e5:7b:eb:e2:b3:d6:9a:51:43:cf:2c:16:0f:f1:0c:1e: a4:42:d1:6c:fc:a3:c8:85:a8:c1:bd:de:95:88:6f:7a:7e:24: bc:3c:ef:36:e2:b0:db:d8:33:2f:26:cd:65:ef:d3:b2:bf:42: 71:b5:ab:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS/x6l9jpyST+EoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk OGE5ZmUzMWItNGNiNC00Yjc4LWI1M2EtNmEwM2NiNGEzYjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDgpYqD8w0avrnWK5p9Y3fH9sR7y5BYhW186 0yag8yVjsoyxbbby4K4/HASKyzh2oyLC4HjsP5hM16VxVVLdyEnjAZRO0XQamNlu 4mS7e/34S7WzbUrFMVo6kc3kdf9+VnHysVvAkb+SpKmcimA64DpbKOmu7axIQ2wc woOT2lkGJ+NhOuEpliz96WG1b6oskaC/m/3nHQnvxd9dRChs+YDqhFDi4+96DjyZ cJV6H+NxYcsZQneRuK0rVBLMBvmItYEThIvQoeCj6ua8O72rg+7TsCHqw+WENicB 06qDSx5WAuP3ReIGYVPii2OXupy9qEYnLiIYfEDfpxPTAgp2VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxrOvvDpSY6eyYtp3tErg6piL9AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDIwZThiM2YtNWY0Ny0z MjY3LTk2OGItOTg1NzkyOGE5OGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnApqLrmhqXyZDg8IT+Jd5Gja5Kjz8gapMea5rSzqHdMMfff6dNtzPR /WSGUzqR26Hr8IQUYjPgMBlxd1xSFGfEdoU1E8hoGRPeGBCyePrqPPS6yvLtOadJ 5TsYNDFvGPANrOg5fjpd0Kf//x4uw+ablq58pQMli4CJRdVILvG8g28wmPZOHMp3 65jRVRKZNNzbtObDbQQ6RQB92wYuxW5cuP/AyIXHaXstPcVLNulCi9sVpqyAs70Q HEPJscTZ3q4fo7Ilbfit5Xvr4rPWmlFDzywWD/EMHqRC0Wz8o8iFqMG93pWIb3p+ JLw87zbisNvYMy8mzWXv07K/QnG1q8g= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:12 2025 by rpki-client