$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/46e43053-b9c9-371a-843a-1c79dc543c92.roa File: 46e43053-b9c9-371a-843a-1c79dc543c92.roa (raw, json) Hash identifier: l59Lto+LmQ4B+Hk4/xwa0Q7cbe/q/PaPUoY5fbrpN3o= Subject key identifier: 4D:86:1B:D7:FE:03:68:7B:6D:54:34:73:2F:07:4D:62:09:22:7A:A6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C1D3D654134086DA2B7A0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/46e43053-b9c9-371a-843a-1c79dc543c92.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.139.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:1d:3d:65:41:34:08:6d:a2:b7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=4f4fa4a9-bb5f-4306-bc12-fefcd092c5cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:de:24:0f:11:8b:a4:91:3f:3f:e1:e4:d1:5e: 05:11:0d:cb:df:75:8d:12:1b:c6:62:3e:b6:a9:05: 2c:e1:4c:9f:14:26:b4:7c:c2:d6:54:ac:54:7c:4e: fd:3d:42:da:9c:32:22:ec:48:c7:ba:c7:a2:c7:5d: 71:8b:22:98:60:a1:73:92:16:bd:cf:cb:38:bc:c9: a4:47:1a:c0:c2:a9:06:78:10:18:4d:07:4e:52:f4: 5f:08:ef:c5:72:24:13:1d:f6:50:d9:5c:ca:39:fc: b7:42:e4:9b:cf:23:17:33:ce:5b:2f:0c:09:56:1e: ce:c2:42:e3:84:0a:07:0b:e1:da:43:a8:e7:9b:ea: 5f:ad:52:8b:76:8a:18:74:1a:91:74:bf:a3:4f:73: 1a:6f:2d:3f:de:d8:a5:c0:e2:95:f9:bd:7e:a4:13: fc:b1:07:ca:24:22:56:77:5b:ff:23:ca:4b:93:9e: c7:98:04:1d:17:ed:48:d3:87:5d:4f:09:9f:ce:0e: 8c:2e:86:46:86:90:1c:44:bc:0b:40:a0:42:06:87: 65:60:a9:76:5d:e8:58:4b:03:1a:c2:6d:84:f2:9b: b9:0a:80:32:93:2b:e6:8f:f6:97:15:d7:e7:17:5f: 12:b0:3f:4f:dc:b9:96:7e:e3:0e:82:65:94:73:86: f8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:86:1B:D7:FE:03:68:7B:6D:54:34:73:2F:07:4D:62:09:22:7A:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/46e43053-b9c9-371a-843a-1c79dc543c92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.139.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:e0:9b:d3:15:7c:25:6d:cd:40:95:93:54:d6:cf:9f:ed:49: d2:b6:da:25:aa:55:26:d2:d4:37:70:5a:7c:bc:a2:2e:79:71: 0c:e7:4b:2d:18:cf:45:4f:21:7a:31:08:a1:98:86:c9:d1:cc: ba:7b:9e:86:90:a9:a1:ac:1a:3e:d6:1e:5d:6d:6d:0d:ab:9b: 2b:1b:dd:31:bd:14:57:12:45:06:18:75:2e:00:8e:82:cb:a7: bf:dd:cd:43:cf:49:c7:82:9c:2a:0e:e0:9b:fd:5e:81:f9:2d: c6:cb:d5:62:33:11:1f:4c:7b:d2:32:f7:67:d9:d1:f7:e4:4b: 5f:19:51:a9:54:4e:15:fb:90:8f:e7:a5:1f:5f:4d:4d:c3:a4: f8:24:54:a4:7f:95:2c:92:79:80:44:b9:ec:04:3e:0b:4f:97: 11:c0:6f:4e:e9:09:47:55:22:c2:98:5d:0c:14:75:ba:7e:51: 29:f2:b9:02:fb:2c:74:56:3a:75:6e:ae:08:9b:ed:f5:ca:8d: 9e:9d:55:d6:1c:c8:2e:74:65:94:98:a9:1e:3a:5a:16:79:51: 84:67:89:55:7a:06:dc:42:c6:9e:39:e2:27:50:b5:b3:f1:65: c1:1d:2c:46:9d:79:00:8b:2c:a0:92:d1:78:cd:19:9f:60:e6: 2a:14:bd:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITB09ZUE0CG2it6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NGY0ZmE0YTktYmI1Zi00MzA2LWJjMTItZmVmY2QwOTJjNWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA794kDxGLpJE/P+Hk0V4FEQ3L33WNEhvGYj62 qQUs4UyfFCa0fMLWVKxUfE79PULanDIi7EjHuseix11xiyKYYKFzkha9z8s4vMmk RxrAwqkGeBAYTQdOUvRfCO/FciQTHfZQ2VzKOfy3QuSbzyMXM85bLwwJVh7OwkLj hAoHC+HaQ6jnm+pfrVKLdooYdBqRdL+jT3Maby0/3tilwOKV+b1+pBP8sQfKJCJW d1v/I8pLk57HmAQdF+1I04ddTwmfzg6MLoZGhpAcRLwLQKBCBodlYKl2XehYSwMa wm2E8pu5CoAykyvmj/aXFdfnF18SsD9P3LmWfuMOgmWUc4b4uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2GG9f+A2h7bVQ0cy8HTWIJInqmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDZlNDMwNTMtYjljOS0z NzFhLTg0M2EtMWM3OWRjNTQzYzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIouQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfgm9MVfCVtzUCVk1TWz5/tSdK22iWqVSbS1DdwWny8oi55cQznSy0Y z0VPIXoxCKGYhsnRzLp7noaQqaGsGj7WHl1tbQ2rmysb3TG9FFcSRQYYdS4AjoLL p7/dzUPPSceCnCoO4Jv9XoH5LcbL1WIzER9Me9Iy92fZ0ffkS18ZUalUThX7kI/n pR9fTU3DpPgkVKR/lSySeYBEuewEPgtPlxHAb07pCUdVIsKYXQwUdbp+USnyuQL7 LHRWOnVurgib7fXKjZ6dVdYcyC50ZZSYqR46WhZ5UYRniVV6BtxCxp454idQtbPx ZcEdLEadeQCLLKCS0XjNGZ9g5ioUvYs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:25 2025 by rpki-client