$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa1ef3fc-8457-3766-9cee-13d2585328c9.roa File: aa1ef3fc-8457-3766-9cee-13d2585328c9.roa (raw, json) Hash identifier: 6vcR/kIjLgfLGQSm0uwjKrJDaXnnwMHbaedDT6f4EfY= Subject key identifier: 3D:7D:81:18:F0:60:B4:23:60:30:A8:0C:56:74:46:70:30:E6:99:73 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C58231B5A7EEA5E804878F80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa1ef3fc-8457-3766-9cee-13d2585328c9.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 34.116.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:31:b5:a7:ee:a5:e8:04:87:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=2c336918-ef03-461c-9313-4038c32ba8fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c5:2d:e5:6a:7e:50:6a:90:5a:f5:e6:b1:19: 86:86:21:e2:60:f1:b4:62:bb:cb:cc:04:c6:6e:21: b5:7a:7b:fb:ad:32:1b:a0:3a:aa:8e:91:ea:fe:09: 78:86:b7:39:49:c5:8e:ce:30:0c:da:c7:93:aa:5d: a7:95:dd:28:13:bb:da:27:cd:28:e8:d3:96:b3:a1: 05:a5:c3:70:0e:b7:c8:64:59:5a:46:33:aa:29:65: ce:86:52:22:cc:6b:5a:a3:41:a7:c0:71:03:a6:e0: 29:c4:90:ef:06:1f:7f:67:2d:45:72:31:d7:f2:4c: 32:07:8b:40:8a:55:d2:78:50:b9:97:1b:22:e7:b7: 74:64:b2:2d:7f:3d:52:b5:7c:2f:b7:a8:44:49:da: ed:96:bf:cb:b7:56:ff:7a:e1:52:00:04:08:8e:6b: f8:a1:c8:92:d5:50:bd:e1:c9:73:66:a0:59:34:ef: 99:27:ec:1b:a2:75:76:03:7a:1f:4f:c6:a0:13:e5: 5b:d6:56:63:f5:e4:b8:05:06:e7:b7:91:a3:e4:08: 9f:04:24:df:4b:75:e8:7f:be:94:97:6b:c0:69:6a: 61:27:00:31:e4:38:3f:75:6a:db:3e:05:e0:d4:dd: 88:07:b5:3d:70:9e:1f:3c:fb:45:af:cb:3e:7a:57: 17:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:7D:81:18:F0:60:B4:23:60:30:A8:0C:56:74:46:70:30:E6:99:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa1ef3fc-8457-3766-9cee-13d2585328c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.116.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:f4:24:0d:a5:da:98:0e:8b:fb:fd:97:ff:82:83:2e:bb:8c: f9:bb:c6:74:52:b0:2d:c6:5f:e8:84:7e:13:e7:30:49:7f:d7: 22:4b:ec:a5:12:a4:fe:b0:a1:07:ab:88:8c:1c:25:87:35:bb: 65:19:fe:c3:e9:d0:8f:d1:74:a9:91:dd:53:0a:10:66:ac:4f: d3:92:c2:76:e9:20:2d:97:5f:80:bc:05:9d:23:cb:f8:11:b1: 39:ab:ca:f3:72:5e:7c:db:65:75:87:c0:46:6d:52:9c:61:f4: d8:cb:cc:3c:1c:24:d3:4e:aa:e9:eb:f8:68:bd:5b:ae:3f:0a: a1:62:f4:48:56:00:46:90:35:f0:d9:9f:80:8d:4a:76:a8:c1: 2c:5e:4d:aa:cb:3a:4e:ee:a3:83:81:c2:d1:c3:3d:6d:c3:c9: 8b:6e:3d:9b:7f:c9:e4:d7:2d:30:af:2e:62:80:7f:55:73:72: 26:3d:fb:e8:c3:da:60:f3:95:b2:fd:45:d0:a2:78:b6:6f:40: ca:62:14:84:98:c2:55:f3:55:be:d9:0c:3b:ea:b5:67:db:52: 80:da:5f:fc:ce:aa:6e:d3:4e:a3:89:10:96:6d:eb:ac:2c:74: ae:ef:79:a4:48:50:5a:6f:bf:85:c8:4d:19:a3:ee:f7:a3:00: 13:6a:a9:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgjG1p+6l6ASHj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MmMzMzY5MTgtZWYwMy00NjFjLTkzMTMtNDAzOGMzMmJhOGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsUt5Wp+UGqQWvXmsRmGhiHiYPG0YrvLzATG biG1env7rTIboDqqjpHq/gl4hrc5ScWOzjAM2seTql2nld0oE7vaJ80o6NOWs6EF pcNwDrfIZFlaRjOqKWXOhlIizGtao0GnwHEDpuApxJDvBh9/Zy1FcjHX8kwyB4tA ilXSeFC5lxsi57d0ZLItfz1StXwvt6hESdrtlr/Lt1b/euFSAAQIjmv4ociS1VC9 4clzZqBZNO+ZJ+wbonV2A3ofT8agE+Vb1lZj9eS4BQbnt5Gj5AifBCTfS3Xof76U l2vAaWphJwAx5Dg/dWrbPgXg1N2IB7U9cJ4fPPtFr8s+elcXAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD19gRjwYLQjYDCoDFZ0RnAw5plzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWExZWYzZmMtODQ1Ny0z NzY2LTljZWUtMTNkMjU4NTMyOGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEr0JA2l2pgOi/v9l/+Cgy67jPm7xnRSsC3GX+iEfhPnMEl/1yJL7KUS pP6woQeriIwcJYc1u2UZ/sPp0I/RdKmR3VMKEGasT9OSwnbpIC2XX4C8BZ0jy/gR sTmryvNyXnzbZXWHwEZtUpxh9NjLzDwcJNNOqunr+Gi9W64/CqFi9EhWAEaQNfDZ n4CNSnaowSxeTarLOk7uo4OBwtHDPW3DyYtuPZt/yeTXLTCvLmKAf1VzciY9++jD 2mDzlbL9RdCieLZvQMpiFISYwlXzVb7ZDDvqtWfbUoDaX/zOqm7TTqOJEJZt66ws dK7veaRIUFpvv4XITRmj7vejABNqqaU= -----END CERTIFICATE-----Generated at Fri Apr 4 21:40:37 2025 by rpki-client