$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6dadb7a8-a16a-3a6f-97d8-4181044ee0db.roa File: 6dadb7a8-a16a-3a6f-97d8-4181044ee0db.roa (raw, json) Hash identifier: 0cHSo9u5AGk/AjIfPxfjD0luqDcyn3Gwkdw9fO2HWd4= Subject key identifier: DD:B2:23:50:13:D9:AA:23:C0:65:1F:C3:8C:ED:ED:63:BF:D6:89:0B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BB023D7159AEA7692C800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6dadb7a8-a16a-3a6f-97d8-4181044ee0db.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.96.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:b0:23:d7:15:9a:ea:76:92:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=97c2fc14-96e2-4536-8bd0-23e9b3ac2d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7c:8b:48:9a:e1:35:95:40:83:26:6c:57:97: 2a:1f:16:fc:59:46:49:f5:3e:a2:8b:2a:26:bd:8e: 33:ad:ee:07:a4:dd:00:04:53:52:6d:94:1e:ea:4f: 8f:05:d4:11:aa:a1:63:75:ed:c2:80:20:f9:06:e2: 33:da:3f:d8:6f:06:fb:61:0e:d5:39:38:d5:a9:ef: ef:53:57:be:d5:00:6a:44:11:7b:ef:03:eb:69:05: 62:2b:57:04:4e:61:b1:0d:04:8c:6d:1f:2b:fa:d4: 52:1b:2a:bc:5c:9d:ee:44:9b:c3:f7:8f:4d:0c:e4: 49:f5:df:cc:b5:6c:52:5a:fa:df:c5:32:7d:95:1e: 1f:22:b0:99:4d:f9:44:6b:31:e2:99:06:14:94:58: 2f:2c:ce:69:80:dc:0f:a6:81:71:29:09:7f:a2:8b: 42:12:18:e8:87:4e:2e:c6:9c:9e:19:a9:a5:99:39: 67:dd:fb:21:14:81:0d:7e:3f:62:24:af:51:be:d1: b6:10:74:e8:e2:3b:24:01:cd:4a:2a:af:26:3a:d0: 40:6c:e5:48:cc:a6:a5:e6:06:9c:7b:e9:12:0a:dd: 44:29:99:7b:06:c9:a9:bf:55:6b:67:53:27:a1:9e: a8:d6:6d:78:ca:2e:a8:e0:0b:62:17:b5:ac:0f:13: ed:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B2:23:50:13:D9:AA:23:C0:65:1F:C3:8C:ED:ED:63:BF:D6:89:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6dadb7a8-a16a-3a6f-97d8-4181044ee0db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.96.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:ab:7c:e3:56:c7:c4:28:14:86:03:07:ca:4c:81:92:be:74: 33:68:ea:d6:dd:fa:5c:29:88:f4:a8:0c:12:a2:71:0a:be:dd: a1:02:6d:f5:35:1e:37:36:29:ef:0a:d9:1a:88:c3:7c:ab:c0: 47:aa:09:84:e7:ac:3a:75:59:2a:ed:54:f0:f5:a5:c3:5f:ea: f5:34:32:6a:ec:8f:4a:c5:71:f6:ea:65:38:d8:df:19:5a:d5: 26:bb:19:c2:f0:19:ee:aa:78:df:c5:97:7b:68:84:f9:bb:11: 77:29:84:03:e8:cb:50:d7:9d:2d:20:e4:34:1f:6f:32:7a:7e: 03:61:22:0e:1f:19:7f:29:96:66:97:c5:8c:b5:93:ba:c4:bb: 7f:ec:a7:ef:e8:1c:e0:da:89:ea:08:3d:61:44:47:19:a1:26: bb:00:2c:fb:0f:88:aa:22:65:f4:95:d8:06:50:fb:5f:58:8a: 9a:3d:11:af:33:63:20:49:35:78:da:79:02:4e:03:cb:69:3f: f3:e3:00:d5:f7:b0:fb:6e:3f:18:dc:1a:b4:6a:4d:7f:92:4f: 8c:6f:84:8d:38:98:5d:31:ea:31:9d:46:da:c1:6e:fe:50:c6: 07:9b:3d:f1:14:d5:13:18:f9:61:af:d5:1c:85:a7:54:40:42: 9a:da:a6:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS7Aj1xWa6naSyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk OTdjMmZjMTQtOTZlMi00NTM2LThiZDAtMjNlOWIzYWMyZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3yLSJrhNZVAgyZsV5cqHxb8WUZJ9T6iiyom vY4zre4HpN0ABFNSbZQe6k+PBdQRqqFjde3CgCD5BuIz2j/Ybwb7YQ7VOTjVqe/v U1e+1QBqRBF77wPraQViK1cETmGxDQSMbR8r+tRSGyq8XJ3uRJvD949NDORJ9d/M tWxSWvrfxTJ9lR4fIrCZTflEazHimQYUlFgvLM5pgNwPpoFxKQl/ootCEhjoh04u xpyeGamlmTln3fshFIENfj9iJK9RvtG2EHTo4jskAc1KKq8mOtBAbOVIzKal5gac e+kSCt1EKZl7Bsmpv1VrZ1MnoZ6o1m14yi6o4AtiF7WsDxPt1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2yI1AT2aojwGUfw4zt7WO/1okLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNmRhZGI3YTgtYTE2YS0z YTZmLTk3ZDgtNDE4MTA0NGVlMGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+rfONWx8QoFIYDB8pMgZK+dDNo6tbd+lwpiPSoDBKicQq+3aECbfU1 Hjc2Ke8K2RqIw3yrwEeqCYTnrDp1WSrtVPD1pcNf6vU0Mmrsj0rFcfbqZTjY3xla 1Sa7GcLwGe6qeN/Fl3tohPm7EXcphAPoy1DXnS0g5DQfbzJ6fgNhIg4fGX8plmaX xYy1k7rEu3/sp+/oHODaieoIPWFERxmhJrsALPsPiKoiZfSV2AZQ+19Yipo9Ea8z YyBJNXjaeQJOA8tpP/PjANX3sPtuPxjcGrRqTX+ST4xvhI04mF0x6jGdRtrBbv5Q xgebPfEU1RMY+WGv1RyFp1RAQprapnE= -----END CERTIFICATE-----Generated at Fri Apr 4 21:40:05 2025 by rpki-client