$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b6022d7c-2584-31df-9af2-01aa074a465c.roa File: b6022d7c-2584-31df-9af2-01aa074a465c.roa (raw, json) Hash identifier: W4bd19nxlkt6gtohdQgdtlcMt5P0GCKUwrd4yDypcvY= Subject key identifier: F3:C7:1E:3D:6C:7B:E7:86:D5:6E:62:8A:9B:15:0F:6C:B5:92:98:B5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C1139838477C008EB3EA0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b6022d7c-2584-31df-9af2-01aa074a465c.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.87.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:11:39:83:84:77:c0:08:eb:3e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=1a719014-c40d-44e9-997b-22611011237a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:27:6b:df:d7:87:dd:61:37:2e:e0:9a:3e:fb: 34:17:c4:0b:7b:ea:fa:4b:89:71:3f:b8:72:10:63: a2:42:99:52:6e:15:f1:fe:da:a6:15:00:4b:fd:92: 6c:8d:f2:29:f9:60:d3:6f:c9:52:38:0e:8d:7b:dd: 1b:d6:c5:24:22:93:96:3e:86:2a:f1:fb:15:b6:1b: 48:38:75:42:39:09:d5:16:73:5d:7a:38:4e:dd:d7: 6e:ab:d7:12:7f:47:0d:3a:75:6d:9d:78:72:19:09: f0:5a:af:46:1e:53:28:b4:b9:b9:51:97:89:ef:8c: 3b:72:49:fe:7e:e7:34:83:37:a3:d2:9b:69:82:32: d0:21:46:8d:7b:b0:11:27:42:12:d8:75:c6:ab:8a: 4f:44:5e:24:0d:23:cb:3a:b3:13:ec:66:97:81:c1: 2a:77:07:f9:8d:09:53:be:06:fd:c7:01:da:97:21: 5c:99:60:eb:97:dd:06:eb:d5:29:c2:10:53:fa:7c: f9:58:84:94:67:d9:21:c2:3b:1e:17:5d:eb:bc:00: 30:cd:d5:7b:03:1b:4e:49:ab:67:05:e5:a1:77:50: 42:15:d5:92:ef:51:7c:5c:3f:b7:58:62:fc:2d:9a: c7:99:86:c4:7e:cf:9b:20:72:b8:da:31:22:50:f1: 9a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C7:1E:3D:6C:7B:E7:86:D5:6E:62:8A:9B:15:0F:6C:B5:92:98:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b6022d7c-2584-31df-9af2-01aa074a465c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.87.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:92:e0:7d:6a:36:6a:ee:9c:7d:c8:44:d3:04:59:f9:51:7e: 94:b7:c1:25:4f:43:2c:f6:5f:f9:57:a6:97:42:ea:40:e2:03: ca:1c:e8:f8:ad:b1:ec:e1:a4:96:6c:53:a7:bd:15:b3:b0:f4: 8f:5f:54:47:10:8e:bc:6c:d7:84:45:ff:ce:00:16:80:a7:0f: 87:2d:0b:bc:36:04:bd:a0:57:de:e6:30:cd:65:c5:fc:ad:4c: 47:04:f4:73:fe:e4:d3:a3:8a:69:49:4b:7e:e6:1a:96:a5:52: 4e:47:37:10:b6:c4:2c:03:4c:bc:c0:08:ac:52:48:f2:11:1f: c4:c3:a3:14:5a:f5:22:c7:33:d5:8c:a4:25:e3:62:f8:bf:0a: 2e:68:2d:06:ee:14:1c:dd:84:65:cf:35:45:51:1b:5e:53:58: 53:cc:4f:3a:fe:ec:fd:95:4a:df:d2:3b:f1:fd:98:6a:b6:0b: bb:1d:ff:8d:df:32:10:74:b6:b4:85:09:5b:3f:60:6a:74:cd: 4f:af:41:9c:1c:81:d9:52:06:f1:2d:63:70:08:2f:83:8e:bc: d2:05:e8:6d:d6:28:06:02:f4:74:89:d2:87:f8:56:46:d9:3d: f9:9f:d5:aa:73:76:95:9b:27:d3:60:37:02:ca:85:63:8b:41: 85:6b:2b:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITBE5g4R3wAjrPqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MWE3MTkwMTQtYzQwZC00NGU5LTk5N2ItMjI2MTEwMTEyMzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAridr39eH3WE3LuCaPvs0F8QLe+r6S4lxP7hy EGOiQplSbhXx/tqmFQBL/ZJsjfIp+WDTb8lSOA6Ne90b1sUkIpOWPoYq8fsVthtI OHVCOQnVFnNdejhO3dduq9cSf0cNOnVtnXhyGQnwWq9GHlMotLm5UZeJ74w7ckn+ fuc0gzej0ptpgjLQIUaNe7ARJ0IS2HXGq4pPRF4kDSPLOrMT7GaXgcEqdwf5jQlT vgb9xwHalyFcmWDrl90G69UpwhBT+nz5WISUZ9khwjseF13rvAAwzdV7AxtOSatn BeWhd1BCFdWS71F8XD+3WGL8LZrHmYbEfs+bIHK42jEiUPGaDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPHHj1se+eG1W5iipsVD2y1kpi1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjYwMjJkN2MtMjU4NC0z MWRmLTlhZjItMDFhYTA3NGE0NjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIleAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKS4H1qNmrunH3IRNMEWflRfpS3wSVPQyz2X/lXppdC6kDiA8oc6Pit sezhpJZsU6e9FbOw9I9fVEcQjrxs14RF/84AFoCnD4ctC7w2BL2gV97mMM1lxfyt TEcE9HP+5NOjimlJS37mGpalUk5HNxC2xCwDTLzACKxSSPIRH8TDoxRa9SLHM9WM pCXjYvi/Ci5oLQbuFBzdhGXPNUVRG15TWFPMTzr+7P2VSt/SO/H9mGq2C7sd/43f MhB0trSFCVs/YGp0zU+vQZwcgdlSBvEtY3AIL4OOvNIF6G3WKAYC9HSJ0of4VkbZ Pfmf1apzdpWbJ9NgNwLKhWOLQYVrK5A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:55 2025 by rpki-client