$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a077d35-5a09-3f38-8af7-a4c03026b36e.roa File: 9a077d35-5a09-3f38-8af7-a4c03026b36e.roa (raw, json) Hash identifier: yaR3eeP9e+1SS83jqyKVg/Kl8MLcL66/qe1oJssL1Mg= Subject key identifier: 23:6A:92:E3:B8:E5:C6:A0:A4:A1:C3:7B:F7:FB:23:11:C1:12:7E:06 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C02DD01D88F39C93FD800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a077d35-5a09-3f38-8af7-a4c03026b36e.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.97.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:02:dd:01:d8:8f:39:c9:3f:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=dda29932-338c-4ed7-b4ce-bd4409ac54ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:81:81:a5:19:2a:c1:a6:f1:f9:ed:b5:0d:23: d9:8f:e1:4c:7b:9d:8e:7d:d0:1a:8f:70:cd:2e:c2: 5b:9e:48:ac:e0:c9:9f:f7:f7:16:e9:34:ba:a8:f3: 1b:7f:41:b3:04:0d:7e:79:fe:89:99:fd:fd:d2:5b: 66:bf:13:c5:01:a7:76:50:08:e8:98:b9:64:c8:e7: 6f:46:01:6b:03:38:c9:1f:cd:9b:ac:44:bc:1c:66: ee:6c:01:b2:ef:14:4b:21:00:d3:01:77:a5:92:ad: 24:2c:20:44:aa:8b:f1:3e:14:1d:d4:ca:7d:39:14: a9:36:0e:7e:7a:a8:56:7a:dd:17:d2:6d:05:a6:fc: 5b:ca:45:e7:a5:a9:7e:6b:d2:82:4b:25:68:f4:fb: eb:7f:b4:87:89:69:d4:46:b8:63:74:26:94:88:78: d9:d8:41:09:0b:48:ed:68:ce:05:e0:5e:1a:8e:58: b1:4c:a4:9d:01:b8:72:fa:af:f2:c4:98:62:ee:4b: 2a:09:29:b3:d7:dd:e8:7b:b0:44:3d:91:8a:78:bc: 6a:0b:26:ba:4e:71:67:5f:c1:d1:59:f9:39:a5:88: 2f:16:5b:85:d9:65:95:fd:80:31:69:92:a8:b7:01: b5:cf:7b:2f:a3:0b:94:18:42:e2:e0:71:c4:47:fb: c5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:6A:92:E3:B8:E5:C6:A0:A4:A1:C3:7B:F7:FB:23:11:C1:12:7E:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a077d35-5a09-3f38-8af7-a4c03026b36e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.97.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:19:41:e7:9b:e7:20:f1:55:cd:03:66:c2:ae:e4:c3:dc:97: b9:d0:ed:ef:3d:02:59:1f:5e:9e:a7:00:ec:42:4e:11:31:93: 7a:86:55:aa:a7:49:e3:59:22:de:bf:18:cd:e4:da:16:e7:69: 61:43:7e:0a:82:b0:af:f3:2d:3f:8c:09:f9:e5:71:26:7f:17: 2a:f2:3b:41:73:0c:54:62:d4:63:70:2a:d3:ff:41:ac:53:44: 4d:42:51:fd:6a:ea:c5:ca:10:d5:19:bc:30:4d:5a:1b:bb:7b: 09:12:7d:81:20:c3:ab:bd:74:7b:e6:97:97:86:82:56:e7:90: dc:39:1b:89:c8:3f:54:b1:f7:2b:79:84:ff:00:e9:4b:24:94: 42:b6:a2:06:ea:9c:b2:c2:7b:a8:89:ec:6a:95:4d:f4:f2:3b: a4:53:23:7e:d7:58:29:47:c9:a2:dc:9c:b9:c9:fe:df:31:47: 4f:4d:97:fd:df:a6:b4:fd:81:14:03:a1:aa:39:3b:59:db:2c: 3e:a1:a4:4e:82:64:cc:ef:7c:f3:d3:c6:db:6c:d5:4c:04:36: 69:bd:25:d6:41:17:53:0c:23:1a:a2:79:13:87:a9:c0:27:1f: 59:c9:e4:9e:d4:91:02:16:09:d8:31:80:91:18:62:ac:5b:e6: 4c:a6:c5:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITALdAdiPOck/2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZGRhMjk5MzItMzM4Yy00ZWQ3LWI0Y2UtYmQ0NDA5YWM1NGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4GBpRkqwabx+e21DSPZj+FMe52OfdAaj3DN LsJbnkis4Mmf9/cW6TS6qPMbf0GzBA1+ef6Jmf390ltmvxPFAad2UAjomLlkyOdv RgFrAzjJH82brES8HGbubAGy7xRLIQDTAXelkq0kLCBEqovxPhQd1Mp9ORSpNg5+ eqhWet0X0m0FpvxbykXnpal+a9KCSyVo9Pvrf7SHiWnURrhjdCaUiHjZ2EEJC0jt aM4F4F4ajlixTKSdAbhy+q/yxJhi7ksqCSmz193oe7BEPZGKeLxqCya6TnFnX8HR Wfk5pYgvFluF2WWV/YAxaZKotwG1z3svowuUGELi4HHER/vFKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNqkuO45cagpKHDe/f7IxHBEn4GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWEwNzdkMzUtNWEwOS0z ZjM4LThhZjctYTRjMDMwMjZiMzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImGgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQZQeeb5yDxVc0DZsKu5MPcl7nQ7e89AlkfXp6nAOxCThExk3qGVaqn SeNZIt6/GM3k2hbnaWFDfgqCsK/zLT+MCfnlcSZ/FyryO0FzDFRi1GNwKtP/QaxT RE1CUf1q6sXKENUZvDBNWhu7ewkSfYEgw6u9dHvml5eGglbnkNw5G4nIP1Sx9yt5 hP8A6UsklEK2ogbqnLLCe6iJ7GqVTfTyO6RTI37XWClHyaLcnLnJ/t8xR09Nl/3f prT9gRQDoao5O1nbLD6hpE6CZMzvfPPTxtts1UwENmm9JdZBF1MMIxqieROHqcAn H1nJ5J7UkQIWCdgxgJEYYqxb5kymxdg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:15 2025 by rpki-client