$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a1087be2-ad1b-34bf-9381-6289e15647a5.roa File: a1087be2-ad1b-34bf-9381-6289e15647a5.roa (raw, json) Hash identifier: EZmyB7G1+aDL14tkNs2ewIGK6X1Xvcu/KIlFtGZuNBY= Subject key identifier: 03:AD:39:21:09:A1:5F:8E:0E:48:F7:06:85:32:70:52:D2:61:CD:E3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C58175944769FE1C55182B00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a1087be2-ad1b-34bf-9381-6289e15647a5.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 34.101.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:75:94:47:69:fe:1c:55:18:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=74e4e751-67dc-4f60-b2b5-72d730d62ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fa:5a:e5:d8:db:b7:96:e4:c6:23:4f:b3:bb: ab:17:a7:a3:39:ac:5f:d3:47:66:fc:d1:58:a0:42: 7f:48:c9:45:0a:2f:4a:3e:58:5f:03:ae:b7:0b:92: 02:8a:1e:31:fc:48:f4:cd:5e:0a:24:28:09:7d:5c: 57:a6:65:20:2c:cc:99:8b:99:e1:90:2c:4d:46:37: e8:51:e5:e6:02:48:41:54:30:69:ac:14:4e:89:18: b1:ba:32:b1:1d:94:4b:7a:93:b7:00:27:c2:6e:da: 4c:65:6e:84:a4:25:99:50:74:5f:a7:1a:96:49:18: fd:00:83:de:6e:a0:7e:1d:e6:1a:ea:4f:91:fd:29: bf:07:09:09:60:7c:8c:e6:9a:63:5c:36:8b:63:14: 93:2b:0a:16:36:65:09:b9:9c:b6:98:27:61:7c:d3: b7:40:c3:76:81:32:ba:6d:43:c0:0f:59:99:e0:6c: 7b:ef:76:e5:cf:fb:85:b3:58:78:e3:fa:de:dd:df: 51:91:0d:e4:e4:cf:c3:c3:d1:8a:40:ea:d5:1e:a3: d4:cd:66:f8:90:ad:81:d4:10:8f:97:ec:7c:3d:22: dc:d3:f0:85:66:16:6c:60:92:e4:29:66:05:ce:8a: 7b:dc:15:3f:9b:0b:6f:fe:d9:e6:ae:a6:a7:ad:89: 80:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:AD:39:21:09:A1:5F:8E:0E:48:F7:06:85:32:70:52:D2:61:CD:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a1087be2-ad1b-34bf-9381-6289e15647a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.101.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:b4:9b:db:bf:ea:fe:e4:3c:48:8d:ca:1d:9a:cd:5f:42:b7: ef:a6:c0:fe:de:f8:c1:5c:2c:5e:cd:ae:2d:d1:46:91:0f:50: 94:11:1d:18:31:4f:a0:d2:40:14:18:26:d2:74:76:b5:94:43: ad:b9:37:11:74:a7:b4:af:0b:52:ad:8e:d0:84:34:b4:b8:61: 9c:3e:9e:00:79:a4:70:85:38:49:f2:60:d5:42:dc:c7:21:66: ad:a8:e8:8a:cc:e7:76:cc:6b:c4:53:19:12:8b:10:11:00:73: 94:67:69:d4:e6:2c:7e:5d:8c:bb:3b:0c:28:85:c3:ea:ce:5e: 58:8c:7e:f1:b3:6e:c8:b3:0d:1d:73:dd:b9:d6:03:d2:01:62: 97:14:1c:85:ee:0a:9f:e1:56:fe:98:7b:8d:06:20:94:2c:ac: ac:a2:c6:0c:cd:07:86:09:77:69:e4:ee:cd:15:ea:19:16:cb: ea:9d:b0:8f:d0:83:65:ac:b9:c9:d5:e4:48:f3:73:d8:d1:93: 9e:25:89:86:86:41:2d:ed:85:66:dd:d0:6f:76:a0:ae:9c:44: 56:10:70:6b:58:47:84:88:90:17:4d:26:a4:3c:ae:ac:31:a9: 31:11:01:cc:34:64:65:5d:56:66:89:44:0b:c2:e8:1c:4d:28: 1f:af:95:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXWUR2n+HFUYKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NzRlNGU3NTEtNjdkYy00ZjYwLWIyYjUtNzJkNzMwZDYyYWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPpa5djbt5bkxiNPs7urF6ejOaxf00dm/NFY oEJ/SMlFCi9KPlhfA663C5ICih4x/Ej0zV4KJCgJfVxXpmUgLMyZi5nhkCxNRjfo UeXmAkhBVDBprBROiRixujKxHZRLepO3ACfCbtpMZW6EpCWZUHRfpxqWSRj9AIPe bqB+HeYa6k+R/Sm/BwkJYHyM5ppjXDaLYxSTKwoWNmUJuZy2mCdhfNO3QMN2gTK6 bUPAD1mZ4Gx773blz/uFs1h44/re3d9RkQ3k5M/Dw9GKQOrVHqPUzWb4kK2B1BCP l+x8PSLc0/CFZhZsYJLkKWYFzop73BU/mwtv/tnmrqanrYmAXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOtOSEJoV+ODkj3BoUycFLSYc3jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTEwODdiZTItYWQxYi0z NGJmLTkzODEtNjI4OWUxNTY0N2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJu0m9u/6v7kPEiNyh2azV9Ct++mwP7e+MFcLF7Nri3RRpEPUJQRHRgx T6DSQBQYJtJ0drWUQ625NxF0p7SvC1KtjtCENLS4YZw+ngB5pHCFOEnyYNVC3Mch Zq2o6IrM53bMa8RTGRKLEBEAc5RnadTmLH5djLs7DCiFw+rOXliMfvGzbsizDR1z 3bnWA9IBYpcUHIXuCp/hVv6Ye40GIJQsrKyixgzNB4YJd2nk7s0V6hkWy+qdsI/Q g2WsucnV5Ejzc9jRk54liYaGQS3thWbd0G92oK6cRFYQcGtYR4SIkBdNJqQ8rqwx qTERAcw0ZGVdVmaJRAvC6BxNKB+vldw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:43 2025 by rpki-client