$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a7c1c7e0-b70a-3abb-91c2-93348e83dd1b.roa File: a7c1c7e0-b70a-3abb-91c2-93348e83dd1b.roa (raw, json) Hash identifier: qSSRFlbG+eWlAtfH1mTN6xECoK5TVXFFILaGVzSIQDQ= Subject key identifier: 0A:4B:D0:2C:06:AC:69:34:6D:8A:77:AE:C8:28:D2:CB:A6:FB:57:98 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858489405C82DA87FC4B0AFDB2180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a7c1c7e0-b70a-3abb-91c2-93348e83dd1b.roa Signing time: Fri 17 Jan 2025 20:38:10 +0000 ROA not before: Fri 17 Jan 2025 20:38:10 +0000 ROA not after: Thu 17 Apr 2025 19:38:10 +0000 asID: 19527 IP address blocks: 34.2.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:94:05:c8:2d:a8:7f:c4:b0:af:db:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jan 17 20:38:10 2025 GMT Not After : Apr 17 19:38:10 2025 GMT Subject: CN=0257829f-45b5-4998-b573-db921262f25c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d9:b1:d4:bd:0e:41:ab:f3:03:6c:b0:62:dd: 87:bb:33:1a:40:0b:82:75:1d:8c:8a:1d:be:8e:b2: 98:43:97:44:31:df:69:e0:ec:85:1a:2f:72:04:eb: e8:31:f4:76:86:68:a4:45:08:37:e5:37:1d:f2:6c: bd:c0:7c:c4:2d:62:bd:fd:9d:b2:4b:f5:f8:28:2b: d2:e0:d0:6c:57:8b:55:ca:4f:8f:18:14:37:2d:60: 9d:5b:bb:76:83:22:bc:3a:95:b3:97:7f:64:7d:c9: 66:a1:d1:32:69:cb:e8:16:bb:70:bf:e4:27:5f:3c: 3f:49:da:c5:88:c7:86:a7:a4:44:8e:6b:cb:a7:ca: 0e:f6:3a:df:79:6a:f4:fa:97:c4:b6:8c:86:3f:2e: ce:d4:63:d2:f2:38:86:c3:ad:56:12:62:0c:34:f7: 3f:03:ab:c3:c9:db:c1:c7:7a:d3:f9:79:8c:7d:76: 9d:86:6c:b7:ea:8c:9c:5c:77:30:95:84:99:6b:fa: d6:0b:b3:77:f9:7c:0d:6d:3a:fa:b9:2b:de:40:90: 5d:e5:cf:05:54:a2:8a:f7:23:5e:84:1b:de:90:80: eb:b7:dc:c4:52:cc:e5:9c:e0:78:3c:3d:6d:83:2c: 97:ab:b4:3e:7d:31:d8:53:cc:50:07:89:2d:cc:da: 82:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4B:D0:2C:06:AC:69:34:6D:8A:77:AE:C8:28:D2:CB:A6:FB:57:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a7c1c7e0-b70a-3abb-91c2-93348e83dd1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:6b:f7:30:a9:35:2f:9a:1d:f8:ba:b8:35:40:2d:27:b5:b8: a1:95:40:4e:31:ad:1a:07:33:4f:fa:d6:f6:39:9c:9d:ed:04: c3:0f:7c:1a:92:0d:b0:36:24:c7:d5:b5:4b:43:5b:f0:57:82: 5a:21:c2:0b:90:52:53:88:a6:64:f4:95:0d:7f:a2:b3:e0:d8: 4e:7d:aa:75:2a:27:1f:b3:34:66:c3:38:a0:85:36:65:96:59: 4a:22:6a:3a:3b:8c:4c:fe:2c:a9:e7:c3:59:1c:00:b6:6b:42: a2:5a:32:0f:c2:d9:e0:ef:fe:a4:fc:80:cd:db:7c:d5:5b:f1: 5a:d7:d6:e5:01:1e:d4:dc:f9:dd:80:f2:0b:0d:b3:28:e6:9e: fc:0b:de:b5:ba:f6:a6:d9:05:0b:2c:4c:b4:83:33:55:fe:94: 8a:17:3e:1f:a8:d1:e5:75:63:e5:e8:4a:7c:10:bf:30:b5:2d: ff:5d:1d:89:ca:2c:f5:88:13:f7:0e:18:fc:89:b3:be:20:7d: 94:d3:14:19:ed:67:b9:87:99:60:ac:c1:21:dd:a5:f2:20:fe: c7:f9:3f:63:74:18:be:4f:25:0e:72:d0:1d:18:b4:49:56:67: b4:c5:c7:28:14:a1:85:58:bd:31:4f:f0:f5:c5:f0:2e:42:ee: 0c:bc:83:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiUBcgtqH/EsK/bIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDExNzIwMzgxMFoXDTI1MDQxNzE5MzgxMFowLzEtMCsGA1UEAxMk MDI1NzgyOWYtNDViNS00OTk4LWI1NzMtZGI5MjEyNjJmMjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutmx1L0OQavzA2ywYt2HuzMaQAuCdR2Mih2+ jrKYQ5dEMd9p4OyFGi9yBOvoMfR2hmikRQg35Tcd8my9wHzELWK9/Z2yS/X4KCvS 4NBsV4tVyk+PGBQ3LWCdW7t2gyK8OpWzl39kfclmodEyacvoFrtwv+QnXzw/SdrF iMeGp6REjmvLp8oO9jrfeWr0+pfEtoyGPy7O1GPS8jiGw61WEmIMNPc/A6vDydvB x3rT+XmMfXadhmy36oycXHcwlYSZa/rWC7N3+XwNbTr6uSveQJBd5c8FVKKK9yNe hBvekIDrt9zEUszlnOB4PD1tgyyXq7Q+fTHYU8xQB4ktzNqCNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApL0CwGrGk0bYp3rsgo0sum+1eYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTdjMWM3ZTAtYjcwYS0z YWJiLTkxYzItOTMzNDhlODNkZDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIgJeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhr9zCpNS+aHfi6uDVALSe1uKGVQE4xrRoHM0/61vY5nJ3tBMMPfBqS DbA2JMfVtUtDW/BXglohwguQUlOIpmT0lQ1/orPg2E59qnUqJx+zNGbDOKCFNmWW WUoiajo7jEz+LKnnw1kcALZrQqJaMg/C2eDv/qT8gM3bfNVb8VrX1uUBHtTc+d2A 8gsNsyjmnvwL3rW69qbZBQssTLSDM1X+lIoXPh+o0eV1Y+XoSnwQvzC1Lf9dHYnK LPWIE/cOGPyJs74gfZTTFBntZ7mHmWCswSHdpfIg/sf5P2N0GL5PJQ5y0B0YtElW Z7TFxygUoYVYvTFP8PXF8C5C7gy8gxI= -----END CERTIFICATE-----Generated at Fri Apr 4 08:40:40 2025 by rpki-client