$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4cf65822-b186-3b39-abd4-46aeac6d41dd.roa File: 4cf65822-b186-3b39-abd4-46aeac6d41dd.roa (raw, json) Hash identifier: 8t/WUTMRi7sn9Lo7W447MH9S16bEemgVSAug09mZkrM= Subject key identifier: D9:B2:65:0A:BF:DB:FA:33:75:76:91:F3:6E:44:59:96:CE:A7:F1:86 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BAE38B296B874EDEE5600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4cf65822-b186-3b39-abd4-46aeac6d41dd.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.128.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:ae:38:b2:96:b8:74:ed:ee:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=378db3a7-b01e-4fe3-87e7-1cea8471eb18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:02:02:50:a8:da:dc:e7:3e:f3:a5:fe:04:56: f1:07:c0:29:7a:64:d7:15:97:4b:d7:31:b3:30:0a: 51:c5:74:0a:79:b5:57:83:f9:b9:45:88:4b:e4:b3: 6b:88:de:fc:48:a3:e0:38:a7:80:bb:47:87:d8:f8: 23:9b:84:86:84:7c:bd:31:32:d8:22:a3:63:63:92: 84:1e:0d:72:6b:55:9c:d0:90:b1:60:b5:d2:24:cd: 91:a2:8a:a1:6f:ad:86:75:6e:ee:e7:f0:15:e7:15: 78:01:2c:6c:ac:21:ad:64:cf:2b:45:97:d6:b3:33: 43:64:89:a5:5c:de:58:11:58:78:e0:0b:a8:1d:dd: f3:42:e2:9e:2e:72:3c:bc:ba:39:a4:1f:87:a1:a7: d4:c7:58:66:50:0b:fb:be:a8:e5:37:20:a5:c6:0c: 27:6e:fd:9d:b7:9f:4f:43:4b:b6:04:f7:99:15:73: d8:1d:fd:e5:7b:05:2c:a2:3c:7f:85:08:b0:89:5b: f4:47:6d:b8:35:65:56:e9:53:c2:1e:c3:d6:cc:ef: 7d:46:4d:87:35:6b:69:18:2f:69:04:8b:d8:51:37: cd:e8:20:c9:3a:ee:03:dc:42:85:b7:d0:b7:68:7d: 05:0d:6f:8c:6c:7f:b2:5d:f7:37:8a:2e:1e:0e:cc: aa:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B2:65:0A:BF:DB:FA:33:75:76:91:F3:6E:44:59:96:CE:A7:F1:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4cf65822-b186-3b39-abd4-46aeac6d41dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.128.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:70:d2:3d:b3:38:ed:dd:64:c4:8c:d7:21:33:5e:b5:5f:eb: 7c:96:2b:98:c2:f5:35:7a:60:8f:04:53:53:06:45:fc:31:4b: e3:5c:ea:69:ef:45:02:cf:18:19:f6:e4:fd:44:9e:65:e0:10: b8:b3:69:a7:0a:b4:77:7c:be:a2:90:ac:ae:fb:58:fd:35:80: fb:70:ae:2d:bc:63:07:00:c8:03:18:05:48:e5:ce:f2:58:68: f1:8a:22:c1:82:62:af:a6:3f:b6:d9:c6:1e:69:a2:95:0e:d0: 74:c8:cf:b0:b7:46:e3:c2:9e:83:c7:65:ff:b7:c3:c3:b8:30: 85:51:a6:9c:d6:b2:01:e9:b2:3a:66:c3:7a:98:1b:08:65:2b: 20:b4:95:87:94:bc:ff:9e:b6:4c:50:37:40:a2:02:62:81:e7: 03:2f:4d:cd:c5:46:e6:99:f9:df:b5:ef:49:d0:c8:5d:18:de: a3:b6:f8:5f:4a:a2:e8:87:54:59:73:b2:f2:ff:6d:7c:28:ce: ad:a2:dc:59:2d:78:fc:8b:d7:d4:db:43:47:34:f1:84:a7:cb: 65:95:37:04:ab:5f:17:7f:d1:2b:26:f5:db:05:45:1e:e9:7c: 93:29:58:b0:1f:b1:bc:91:79:1e:6b:56:b0:21:6a:9c:8a:0c: 89:0e:8e:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS644spa4dO3uVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk Mzc4ZGIzYTctYjAxZS00ZmUzLTg3ZTctMWNlYTg0NzFlYjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQICUKja3Oc+86X+BFbxB8ApemTXFZdL1zGz MApRxXQKebVXg/m5RYhL5LNriN78SKPgOKeAu0eH2Pgjm4SGhHy9MTLYIqNjY5KE Hg1ya1Wc0JCxYLXSJM2Rooqhb62GdW7u5/AV5xV4ASxsrCGtZM8rRZfWszNDZIml XN5YEVh44AuoHd3zQuKeLnI8vLo5pB+HoafUx1hmUAv7vqjlNyClxgwnbv2dt59P Q0u2BPeZFXPYHf3lewUsojx/hQiwiVv0R224NWVW6VPCHsPWzO99Rk2HNWtpGC9p BIvYUTfN6CDJOu4D3EKFt9C3aH0FDW+MbH+yXfc3ii4eDsyqjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmyZQq/2/ozdXaR825EWZbOp/GGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGNmNjU4MjItYjE4Ni0z YjM5LWFiZDQtNDZhZWFjNmQ0MWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIoD4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJw0j2zOO3dZMSM1yEzXrVf63yWK5jC9TV6YI8EU1MGRfwxS+Nc6mnv RQLPGBn25P1EnmXgELizaacKtHd8vqKQrK77WP01gPtwri28YwcAyAMYBUjlzvJY aPGKIsGCYq+mP7bZxh5popUO0HTIz7C3RuPCnoPHZf+3w8O4MIVRppzWsgHpsjpm w3qYGwhlKyC0lYeUvP+etkxQN0CiAmKB5wMvTc3FRuaZ+d+170nQyF0Y3qO2+F9K ouiHVFlzsvL/bXwozq2i3FktePyL19TbQ0c08YSny2WVNwSrXxd/0Ssm9dsFRR7p fJMpWLAfsbyReR5rVrAhapyKDIkOjnk= -----END CERTIFICATE-----Generated at Fri Mar 14 10:31:41 2025 by rpki-client