$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e2aaee5-4a71-3c30-bf34-8bd4ba55eecd.roa File: 8e2aaee5-4a71-3c30-bf34-8bd4ba55eecd.roa (raw, json) Hash identifier: or3Omv8tPuHQSfIckeRTgcAcxMFy3inbpxZM8umsD6c= Subject key identifier: 7C:1D:04:D1:C9:D7:60:D2:8C:47:04:B6:3D:02:23:CA:6E:CE:A8:18 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BDD62E67EAB4378713100 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e2aaee5-4a71-3c30-bf34-8bd4ba55eecd.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.95.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:dd:62:e6:7e:ab:43:78:71:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=846c9b8c-3671-43aa-8e08-5322d67283bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f4:52:d3:00:45:9b:42:0e:2b:03:1d:f3:03: 7b:81:b2:30:fd:0a:96:40:3f:0f:9e:8f:ed:68:0a: 8d:88:6f:2f:02:81:84:41:b8:57:59:1b:90:9c:f3: b4:54:10:e2:d7:de:f2:0e:d2:fe:50:69:70:6d:02: 96:c6:ac:96:2f:e6:94:e5:65:5d:49:9c:79:be:e2: 79:36:79:b3:b6:5d:13:89:72:0b:b5:7d:52:37:81: 5f:12:b6:d9:37:f2:0a:80:8e:d1:fd:26:f0:71:e8: cf:39:c5:3f:38:94:1b:74:b6:da:9a:17:e6:87:6b: 01:00:d0:11:80:dd:00:b6:43:bb:b2:82:d7:b5:6b: 1d:dc:db:b5:2f:b4:31:e9:0b:6f:80:5c:47:ed:93: f9:5f:78:6a:8d:3f:37:90:08:9f:c9:0c:79:29:b0: 8e:e3:37:6a:ac:e4:19:6e:fe:7b:ba:97:95:ca:40: 91:23:b1:0a:5f:0b:41:59:f2:db:7f:56:f9:32:23: d3:87:a2:a3:cb:df:84:35:d4:98:d3:10:55:b2:f4: 77:62:3c:91:60:e9:20:1f:cf:6a:44:31:96:f5:d8: 9e:e7:7e:de:29:cc:af:70:2c:0f:60:8d:6a:85:58: 8f:bb:0f:dc:76:bc:af:b7:0b:78:f0:77:c8:7f:33: ea:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:1D:04:D1:C9:D7:60:D2:8C:47:04:B6:3D:02:23:CA:6E:CE:A8:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e2aaee5-4a71-3c30-bf34-8bd4ba55eecd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.95.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:b8:78:71:3e:82:b6:27:1b:63:a5:b5:ec:89:22:4f:03:29: e3:52:ae:5c:2b:1f:cb:14:12:02:b9:df:69:25:9d:4e:82:af: 12:32:75:be:41:54:28:7d:f6:4c:db:fe:f6:7c:27:81:fe:81: 27:de:6c:22:32:d6:b3:11:2f:d7:b2:94:a7:51:8c:59:08:d8: a5:19:78:fa:5c:17:38:52:3f:00:f7:7f:47:db:89:56:31:7f: 53:ef:e7:51:53:80:22:3f:5b:38:7e:d5:4e:34:ec:f8:33:1f: 99:47:4b:d1:aa:3e:cb:3f:af:b7:c7:b6:3a:42:61:18:ba:16: 39:f7:49:7b:69:48:d9:2e:44:4e:22:43:42:54:33:0c:88:e5: 78:8b:54:14:4f:6b:5c:cf:11:df:be:d4:d1:ac:6e:39:6f:07: 03:cc:c5:3e:06:d9:4f:b6:dd:bb:57:5b:e6:a1:f9:ac:2b:4b: e6:e7:9f:6c:72:e6:7c:62:92:28:63:b8:39:5e:04:32:67:70: 1e:22:f8:53:a0:26:0e:d7:08:f0:c0:be:9b:67:7b:b5:7b:71: cb:48:54:e8:62:2c:37:70:64:86:f5:92:5f:35:1b:ef:5e:ec: 20:d4:85:b1:c0:bb:fe:93:ce:e5:7f:fc:f4:c8:6e:3c:a4:8f: fa:ef:fb:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS91i5n6rQ3hxMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ODQ2YzliOGMtMzY3MS00M2FhLThlMDgtNTMyMmQ2NzI4M2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPRS0wBFm0IOKwMd8wN7gbIw/QqWQD8Pno/t aAqNiG8vAoGEQbhXWRuQnPO0VBDi197yDtL+UGlwbQKWxqyWL+aU5WVdSZx5vuJ5 Nnmztl0TiXILtX1SN4FfErbZN/IKgI7R/SbwcejPOcU/OJQbdLbamhfmh2sBANAR gN0AtkO7soLXtWsd3Nu1L7Qx6QtvgFxH7ZP5X3hqjT83kAifyQx5KbCO4zdqrOQZ bv57upeVykCRI7EKXwtBWfLbf1b5MiPTh6Kjy9+ENdSY0xBVsvR3YjyRYOkgH89q RDGW9die537eKcyvcCwPYI1qhViPuw/cdryvtwt48HfIfzPqIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwdBNHJ12DSjEcEtj0CI8puzqgYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGUyYWFlZTUtNGE3MS0z YzMwLWJmMzQtOGJkNGJhNTVlZWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIl8wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHO4eHE+grYnG2OlteyJIk8DKeNSrlwrH8sUEgK532klnU6CrxIydb5B VCh99kzb/vZ8J4H+gSfebCIy1rMRL9eylKdRjFkI2KUZePpcFzhSPwD3f0fbiVYx f1Pv51FTgCI/Wzh+1U407PgzH5lHS9GqPss/r7fHtjpCYRi6Fjn3SXtpSNkuRE4i Q0JUMwyI5XiLVBRPa1zPEd++1NGsbjlvBwPMxT4G2U+23btXW+ah+awrS+bnn2xy 5nxikihjuDleBDJncB4i+FOgJg7XCPDAvptne7V7cctIVOhiLDdwZIb1kl81G+9e 7CDUhbHAu/6TzuV//PTIbjykj/rv+1E= -----END CERTIFICATE-----Generated at Fri Apr 4 21:45:07 2025 by rpki-client