$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/895758ff-98df-3f0a-9f17-e3b4d581afae.roa File: 895758ff-98df-3f0a-9f17-e3b4d581afae.roa (raw, json) Hash identifier: lcESRJHsFgjVBUhmNr3myso4qViBdBJpLD2md4RDnwE= Subject key identifier: 70:F7:16:03:5F:A5:A0:E5:13:7B:C7:0E:D2:40:39:32:A6:81:64:80 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C58228834BDDFB46422B4600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/895758ff-98df-3f0a-9f17-e3b4d581afae.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 34.101.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:28:83:4b:dd:fb:46:42:2b:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=62c009d0-89d8-4e14-b788-2d8c0e98375c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9a:57:52:eb:68:ca:91:29:7c:43:d9:a9:11: b6:d5:da:92:0d:26:aa:3b:a8:f3:c8:61:58:27:02: bd:22:3d:5c:bc:7f:80:9b:8b:3c:b3:f8:64:a4:4c: 9d:dd:dd:57:c3:48:26:f0:b9:5f:54:63:94:85:ff: 4e:25:50:f2:f6:6c:6e:a6:af:4f:aa:6a:98:9d:b5: 11:24:66:d7:60:bb:a1:03:67:91:e9:f0:79:29:78: 35:42:a8:08:25:82:67:91:0e:7c:35:5e:9d:7b:19: 98:c4:30:75:a3:46:26:7b:8e:af:e5:bb:aa:7e:f3: 32:24:43:09:43:b1:f3:d1:89:2a:a4:35:6b:56:6e: 7d:0d:e9:da:94:ab:ac:15:fb:da:d8:5d:55:66:de: 53:fe:53:4a:b1:91:34:30:4e:7d:bb:6d:a1:a3:bd: 9e:26:74:ea:06:6b:22:d4:dd:67:bf:63:af:1b:52: 92:36:03:d1:aa:74:95:c2:01:19:91:82:1c:24:41: e8:0c:6f:f4:5a:92:50:98:70:fb:d4:42:a2:3f:ec: 28:d0:32:10:ba:79:a1:18:fe:81:5c:6b:44:b3:64: 62:db:bd:08:ec:85:91:cf:3f:78:42:12:5f:bc:3b: 4d:37:4b:16:44:e3:1e:96:65:44:88:f9:21:33:b8: 85:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F7:16:03:5F:A5:A0:E5:13:7B:C7:0E:D2:40:39:32:A6:81:64:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/895758ff-98df-3f0a-9f17-e3b4d581afae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.101.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:b6:3c:e9:58:2d:b8:12:4e:1b:7b:f8:3b:a5:44:55:88:eb: 16:ab:b9:9f:0c:33:e8:90:85:f3:be:29:40:fe:b1:a1:eb:6a: d5:76:5c:b0:ed:b5:fb:61:99:c8:3b:76:b0:cf:5c:5d:c4:f2: 06:6e:c5:bf:74:65:ec:14:e0:59:66:ae:f6:09:b4:10:9d:6e: 8b:9a:5e:22:5b:a8:bc:1a:c4:1b:24:28:b1:50:c3:e7:ba:4b: 4e:f7:d0:fa:42:8b:31:b1:67:88:77:3c:0f:bc:ec:7a:51:4d: d6:b8:c3:c0:47:0b:88:82:92:0d:22:fe:8d:91:ba:77:ce:4a: 04:f3:92:ad:02:c5:27:ea:7b:22:c6:2a:1c:e0:8f:1c:8c:ab: a8:d4:58:dc:5e:02:8e:5b:08:bc:67:cd:43:fd:25:d4:e4:be: 22:77:e6:49:eb:29:99:84:af:80:cf:6d:e5:8f:9d:ee:38:52: 87:08:c5:7f:39:5d:a5:a3:12:45:6a:49:2f:e2:60:50:85:27: d2:ff:87:27:00:05:e6:e5:05:66:1d:ad:cb:b2:95:f6:d6:ee: 63:91:ea:55:c2:5e:6d:48:4f:2b:cc:b7:8d:48:4c:f5:05:01: 6c:31:ad:a3:8d:ae:01:5a:ae:12:77:5d:fa:95:d4:22:ec:0f: b9:34:d6:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgiiDS937RkIrRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NjJjMDA5ZDAtODlkOC00ZTE0LWI3ODgtMmQ4YzBlOTgzNzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZpXUutoypEpfEPZqRG21dqSDSaqO6jzyGFY JwK9Ij1cvH+Am4s8s/hkpEyd3d1Xw0gm8LlfVGOUhf9OJVDy9mxupq9PqmqYnbUR JGbXYLuhA2eR6fB5KXg1QqgIJYJnkQ58NV6dexmYxDB1o0Yme46v5buqfvMyJEMJ Q7Hz0YkqpDVrVm59DenalKusFfva2F1VZt5T/lNKsZE0ME59u22ho72eJnTqBmsi 1N1nv2OvG1KSNgPRqnSVwgEZkYIcJEHoDG/0WpJQmHD71EKiP+wo0DIQunmhGP6B XGtEs2Ri270I7IWRzz94QhJfvDtNN0sWROMelmVEiPkhM7iFewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHD3FgNfpaDlE3vHDtJAOTKmgWSAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODk1NzU4ZmYtOThkZi0z ZjBhLTlmMTctZTNiNGQ1ODFhZmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJy2POlYLbgSTht7+DulRFWI6xaruZ8MM+iQhfO+KUD+saHratV2XLDt tfthmcg7drDPXF3E8gZuxb90ZewU4FlmrvYJtBCdbouaXiJbqLwaxBskKLFQw+e6 S0730PpCizGxZ4h3PA+87HpRTda4w8BHC4iCkg0i/o2RunfOSgTzkq0CxSfqeyLG KhzgjxyMq6jUWNxeAo5bCLxnzUP9JdTkviJ35knrKZmEr4DPbeWPne44UocIxX85 XaWjEkVqSS/iYFCFJ9L/hycABeblBWYdrcuylfbW7mOR6lXCXm1ITyvMt41ITPUF AWwxraONrgFarhJ3XfqV1CLsD7k01gg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:23 2025 by rpki-client