$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3bc3a00-c7a7-39bc-b440-63b92a15d2a1.roa File: b3bc3a00-c7a7-39bc-b440-63b92a15d2a1.roa (raw, json) Hash identifier: A3WQVCINPlD/47eYstyqz9cFeBx/4j+DpzVSQh/nfXU= Subject key identifier: E3:4B:D3:5D:3D:53:D0:AE:D0:79:9E:0D:94:7D:AA:51:E6:B0:D7:50 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C5817DC5B6F88B1F6D972980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3bc3a00-c7a7-39bc-b440-63b92a15d2a1.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 34.106.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:7d:c5:b6:f8:8b:1f:6d:97:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=529bb1e3-57ae-4710-8d92-44c56ddd51c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:37:29:43:6c:1f:fb:3d:38:24:da:4c:10:ca: 36:9c:ff:77:e2:30:a0:30:0c:1c:fb:8b:db:47:29: a4:9e:f8:66:1b:b5:21:e0:8c:01:02:d7:53:8c:bc: 62:02:33:9d:d0:1a:3f:93:3b:51:84:0a:fe:08:df: 92:4e:83:33:30:ca:18:b1:77:24:48:11:ea:de:59: 4b:9b:5c:90:b3:f3:3b:90:f5:c6:81:92:7f:7c:ef: fb:20:12:bf:32:fe:63:a6:3f:ac:94:32:70:a4:af: 43:0d:af:c4:02:c0:d3:20:4a:d9:8d:24:38:c2:14: 9f:08:e5:c3:2a:26:1c:5f:19:96:39:9a:eb:62:41: 62:ce:c3:a2:89:6f:c7:a3:06:13:a9:f4:5d:c6:40: 28:0d:f0:86:fb:ab:a6:d5:6b:1f:51:4e:c8:bd:b5: 6c:09:18:43:1a:db:1b:e8:6f:ca:f5:b5:50:48:11: c5:29:68:03:52:dc:9d:2f:1d:0b:f0:d6:93:3c:b4: 16:a6:6f:37:3f:25:9a:27:2a:5d:91:f5:81:c1:7f: f5:a9:f0:4f:af:d6:b4:8f:27:c2:82:b2:a2:87:6d: b6:b1:dc:47:1c:cb:9f:d9:e2:39:36:3d:f7:9c:16: b6:63:dc:64:9e:ba:7e:f5:bf:df:39:7b:2c:5a:03: 79:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:4B:D3:5D:3D:53:D0:AE:D0:79:9E:0D:94:7D:AA:51:E6:B0:D7:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3bc3a00-c7a7-39bc-b440-63b92a15d2a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.106.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:4d:2e:d0:5b:20:07:5e:df:6b:0c:db:74:4a:e8:bb:af:09: 3c:11:fa:f5:05:a0:e4:07:7d:7a:bd:14:72:df:9b:bb:e2:0b: 5b:ba:fe:3c:aa:46:07:c1:67:ed:63:8a:bb:78:2e:33:21:f6: ac:16:0a:c5:62:8e:4b:1a:62:14:d3:1e:75:9f:47:e7:84:4e: b6:43:b0:dc:42:08:00:83:4a:c5:cd:db:6c:35:62:5e:85:9d: 60:11:9a:81:8f:54:91:ed:0c:5d:27:7b:0f:9d:d6:2d:cd:38: af:f4:20:0a:65:37:5e:9a:f3:33:bb:16:22:91:b0:b9:40:fa: de:a0:3a:f0:ea:48:7d:82:72:7b:e5:02:85:84:aa:3e:5a:e3: 78:28:6b:1f:99:a0:8a:10:c3:e1:32:c6:5e:31:3e:e6:4b:33: 5e:d8:07:43:34:03:3a:74:65:eb:3d:08:98:12:4e:ca:c5:5a: 4f:1f:a7:99:9a:77:6f:8f:18:50:de:8c:3f:b1:3a:6a:d3:52: 90:fc:c0:38:3a:85:64:80:2a:6d:22:27:2a:da:2b:be:19:70: 20:f2:b2:2f:3a:95:ce:e0:19:9d:3f:3e:92:b0:e9:c6:1e:68: 58:44:66:84:84:5c:60:a1:96:91:f1:44:af:0c:c5:6a:8f:86: 0e:e7:8a:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgX3FtviLH22XKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NTI5YmIxZTMtNTdhZS00NzEwLThkOTItNDRjNTZkZGQ1MWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjcpQ2wf+z04JNpMEMo2nP934jCgMAwc+4vb RymknvhmG7Uh4IwBAtdTjLxiAjOd0Bo/kztRhAr+CN+SToMzMMoYsXckSBHq3llL m1yQs/M7kPXGgZJ/fO/7IBK/Mv5jpj+slDJwpK9DDa/EAsDTIErZjSQ4whSfCOXD KiYcXxmWOZrrYkFizsOiiW/HowYTqfRdxkAoDfCG+6um1WsfUU7IvbVsCRhDGtsb 6G/K9bVQSBHFKWgDUtydLx0L8NaTPLQWpm83PyWaJypdkfWBwX/1qfBPr9a0jyfC grKih222sdxHHMuf2eI5Nj33nBa2Y9xknrp+9b/fOXssWgN5FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONL0109U9Cu0HmeDZR9qlHmsNdQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjNiYzNhMDAtYzdhNy0z OWJjLWI0NDAtNjNiOTJhMTVkMmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZNLtBbIAde32sM23RK6LuvCTwR+vUFoOQHfXq9FHLfm7viC1u6/jyq RgfBZ+1jirt4LjMh9qwWCsVijksaYhTTHnWfR+eETrZDsNxCCACDSsXN22w1Yl6F nWARmoGPVJHtDF0new+d1i3NOK/0IAplN16a8zO7FiKRsLlA+t6gOvDqSH2Ccnvl AoWEqj5a43goax+ZoIoQw+Eyxl4xPuZLM17YB0M0Azp0Zes9CJgSTsrFWk8fp5ma d2+PGFDejD+xOmrTUpD8wDg6hWSAKm0iJyraK74ZcCDysi86lc7gGZ0/PpKw6cYe aFhEZoSEXGChlpHxRK8MxWqPhg7nihA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:31:29 2025 by rpki-client