$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc2a8861-3822-37af-89b3-1c9cebe0dc3a.roa File: bc2a8861-3822-37af-89b3-1c9cebe0dc3a.roa (raw, json) Hash identifier: q+akEKi49ctDjZxYCbyo4rC8/HjLNdStmgtBuo+eQJo= Subject key identifier: 25:2C:08:54:7C:66:31:34:87:88:C8:C8:A4:6B:E7:7E:91:2A:70:EF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BC0F535C96F6001A68400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc2a8861-3822-37af-89b3-1c9cebe0dc3a.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.123.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:c0:f5:35:c9:6f:60:01:a6:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=9fc92555-e884-48fa-ad6f-f241531232dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:34:3c:ea:36:da:bd:a7:62:7d:53:83:08:c6: 2d:48:1b:6e:7d:a2:1e:3e:58:74:cd:49:f9:ca:12: a5:20:71:c3:49:f9:9a:f3:5e:d2:fa:35:3e:bc:ba: 67:fc:91:72:81:a9:cb:61:d1:ed:1d:16:6f:1a:7e: ce:40:14:ea:e4:4f:3b:a0:43:c6:3c:3d:c9:0e:4c: 0c:31:01:26:05:4f:b3:8b:f9:77:a6:40:a6:fa:ad: e3:79:33:20:1a:8b:a6:39:63:b7:a8:42:03:21:f1: 27:ba:a0:7a:b1:7e:e2:2e:e1:9a:91:1b:2e:f5:2b: eb:5d:ea:d2:a4:88:14:4b:b5:fb:78:27:41:9f:74: 2a:8b:19:0a:ab:43:71:de:3b:a2:c1:d7:63:fd:58: b4:bd:e0:d9:66:26:f3:70:a3:22:a0:1f:c1:e3:7d: 23:02:5f:11:4d:9f:ef:7c:b4:ae:5d:d4:cb:1c:a1: ac:97:08:33:71:a7:47:16:ca:e5:e0:e3:f6:37:08: e4:a1:32:85:4d:de:50:4d:49:ab:fe:b8:85:3f:6e: 11:7e:a2:68:82:18:c7:42:7a:ee:9e:60:57:cc:b0: bd:7b:96:57:b1:e5:a9:d7:0d:97:d3:76:58:72:9d: 6f:72:f4:2a:22:a6:16:3a:ee:0b:b0:b8:0f:b2:64: 93:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:2C:08:54:7C:66:31:34:87:88:C8:C8:A4:6B:E7:7E:91:2A:70:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc2a8861-3822-37af-89b3-1c9cebe0dc3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.123.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:f0:76:21:3d:d8:09:f1:9a:96:7d:de:5a:cb:1a:a6:8c:5f: 65:ca:2c:36:dc:96:c0:60:f7:f0:fe:9f:dd:f6:87:fc:64:e4: ba:df:cd:d1:42:cf:6f:d3:7c:cd:18:b8:8c:a1:3c:f2:f3:62: 5e:c9:38:02:e4:a8:e9:a0:30:8d:7a:41:32:fa:ba:8b:f8:44: b2:0f:bf:8a:cf:12:87:7c:61:1a:c4:14:2a:2e:59:f1:5c:c1: 48:31:fe:78:82:ba:ef:c1:18:9b:14:71:2b:5f:87:f7:6b:eb: b0:00:9d:c8:75:03:57:dc:0c:6a:89:22:20:5b:a6:ff:6f:2f: 1c:2e:b5:51:cc:fb:6b:23:86:e5:2a:51:a4:b6:25:2e:3d:a5: 24:15:bb:cf:4a:c4:81:d5:5c:24:96:d1:de:b8:ed:2e:f1:e5: 7d:b7:9c:1f:ff:d7:1f:98:f3:e0:26:e9:6e:a5:5a:5f:b9:17: 11:6f:e7:aa:c0:94:4c:c8:20:89:0e:d8:de:7e:cd:60:6e:54: 8a:96:59:e5:a0:fe:6c:d8:36:06:71:7c:a3:67:16:2e:69:a0: 3b:e4:c9:c3:98:20:de:b0:41:d2:a2:99:23:96:51:64:fa:f8: c6:e5:56:99:51:2c:89:bb:05:07:51:37:b6:c4:26:fd:5b:eb: 18:2f:52:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8D1NclvYAGmhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk OWZjOTI1NTUtZTg4NC00OGZhLWFkNmYtZjI0MTUzMTIzMmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zQ86jbavadifVODCMYtSBtufaIePlh0zUn5 yhKlIHHDSfma817S+jU+vLpn/JFyganLYdHtHRZvGn7OQBTq5E87oEPGPD3JDkwM MQEmBU+zi/l3pkCm+q3jeTMgGoumOWO3qEIDIfEnuqB6sX7iLuGakRsu9SvrXerS pIgUS7X7eCdBn3QqixkKq0Nx3juiwddj/Vi0veDZZibzcKMioB/B430jAl8RTZ/v fLSuXdTLHKGslwgzcadHFsrl4OP2NwjkoTKFTd5QTUmr/riFP24RfqJoghjHQnru nmBXzLC9e5ZXseWp1w2X03ZYcp1vcvQqIqYWOu4LsLgPsmSTNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUsCFR8ZjE0h4jIyKRr536RKnDvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmMyYTg4NjEtMzgyMi0z N2FmLTg5YjMtMWM5Y2ViZTBkYzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInuwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbwdiE92AnxmpZ93lrLGqaMX2XKLDbclsBg9/D+n932h/xk5LrfzdFC z2/TfM0YuIyhPPLzYl7JOALkqOmgMI16QTL6uov4RLIPv4rPEod8YRrEFCouWfFc wUgx/niCuu/BGJsUcStfh/dr67AAnch1A1fcDGqJIiBbpv9vLxwutVHM+2sjhuUq UaS2JS49pSQVu89KxIHVXCSW0d647S7x5X23nB//1x+Y8+Am6W6lWl+5FxFv56rA lEzIIIkO2N5+zWBuVIqWWeWg/mzYNgZxfKNnFi5poDvkycOYIN6wQdKimSOWUWT6 +MblVplRLIm7BQdRN7bEJv1b6xgvUlA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:46:17 2025 by rpki-client