$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf6529c1-f201-3bf5-8c3a-a9065c893a2f.roa File: bf6529c1-f201-3bf5-8c3a-a9065c893a2f.roa (raw, json) Hash identifier: Q/p1a6pWKUE57ad7l/i0GUoUEZ/UTbCYRBVLCvEU8w4= Subject key identifier: 20:9A:BB:21:57:C6:34:A8:F5:B3:E2:6E:00:DB:17:9C:D9:A0:C6:5D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BBFD0762D0D31E34A9E80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf6529c1-f201-3bf5-8c3a-a9065c893a2f.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.145.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:bf:d0:76:2d:0d:31:e3:4a:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=776e88bd-19a8-4bf5-ab7d-a8d4e16fa700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9f:52:a9:ca:b7:61:d7:54:b0:92:cf:35:55: 29:85:15:69:56:76:22:bf:66:76:fb:a4:04:0b:c7: b2:8d:7a:d0:d0:e6:1a:a6:85:40:da:31:0b:c3:bf: 98:29:1d:26:ff:e0:3c:a7:08:24:89:58:1d:87:58: b1:6f:6c:ec:9a:30:1d:f3:59:33:00:91:34:0c:25: 7a:ec:5b:5e:e7:50:be:44:9a:12:8a:29:44:fa:08: f5:1f:e9:69:0f:31:64:66:91:13:63:bd:b0:06:d5: 3c:15:f6:38:b7:f5:37:20:a9:30:70:ac:85:77:9e: 4b:29:20:e8:3f:9a:29:82:b8:62:1c:53:83:7e:cf: 4c:3c:a4:76:79:63:78:cb:60:04:78:fb:63:3f:5a: 0c:0f:84:af:e7:7b:e8:5a:16:c9:7d:70:61:df:e7: 6a:c9:74:17:c1:dc:d4:c4:dc:6a:44:49:48:18:4b: b8:5e:68:86:43:d8:3e:60:c3:04:4a:11:d8:30:15: e3:b7:ca:01:31:3f:f7:47:12:9f:61:e3:63:c6:d3: 9e:e7:e0:33:d8:3a:cc:78:6e:74:6a:dc:2b:b5:a7: b2:24:a5:94:26:5f:1f:d3:60:fc:f4:a9:3d:40:2a: 44:32:a2:55:29:e1:4d:22:dd:c0:3a:f7:8f:0c:29: 2b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9A:BB:21:57:C6:34:A8:F5:B3:E2:6E:00:DB:17:9C:D9:A0:C6:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf6529c1-f201-3bf5-8c3a-a9065c893a2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.145.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:09:a2:58:1d:94:14:80:bd:4d:03:b0:ac:85:77:24:1d:94: ad:e0:e5:c7:ee:01:9f:fe:ff:62:15:7a:47:bc:e3:5b:38:07: 08:23:22:bf:ba:09:fb:73:70:33:11:94:c0:92:dd:0d:1f:4c: 44:04:0f:ce:56:77:18:85:92:20:3a:04:6e:55:70:f0:79:8b: e0:a9:53:d5:cf:e8:04:b6:f5:51:fd:14:75:50:a0:85:33:f8: 00:e5:5c:d8:ea:87:1c:84:51:75:2b:26:64:1c:55:9d:24:56: f8:74:53:38:fb:72:9e:e7:4f:b3:15:38:14:a3:96:88:00:cc: ac:b8:e3:a0:81:c0:ba:93:cf:6b:7c:a0:03:10:29:fd:c4:7d: 60:66:56:9c:fd:09:1b:3e:76:be:ca:b2:05:ae:5b:95:9d:b7: 80:3d:02:3e:ed:f1:29:e1:00:e8:24:7c:36:bd:bb:ac:24:4f: 50:14:46:fa:f7:63:db:e6:c6:b2:db:51:67:ab:8f:cb:61:e1: 06:e7:b3:5d:c8:5f:94:73:97:4f:57:43:ef:3d:9a:4c:0c:5f: a0:12:60:95:48:1e:2f:35:24:83:14:8f:a9:ae:58:01:c6:7f: 6c:ff:9d:ed:19:06:5c:ed:50:6a:79:94:b1:15:10:8a:42:45: 3d:c7:27:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS7/Qdi0NMeNKnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk Nzc2ZTg4YmQtMTlhOC00YmY1LWFiN2QtYThkNGUxNmZhNzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtp9Sqcq3YddUsJLPNVUphRVpVnYiv2Z2+6QE C8eyjXrQ0OYapoVA2jELw7+YKR0m/+A8pwgkiVgdh1ixb2zsmjAd81kzAJE0DCV6 7Fte51C+RJoSiilE+gj1H+lpDzFkZpETY72wBtU8FfY4t/U3IKkwcKyFd55LKSDo P5opgrhiHFODfs9MPKR2eWN4y2AEePtjP1oMD4Sv53voWhbJfXBh3+dqyXQXwdzU xNxqRElIGEu4XmiGQ9g+YMMEShHYMBXjt8oBMT/3RxKfYeNjxtOe5+Az2DrMeG50 atwrtaeyJKWUJl8f02D89Kk9QCpEMqJVKeFNIt3AOvePDCkroQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCauyFXxjSo9bPibgDbF5zZoMZdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmY2NTI5YzEtZjIwMS0z YmY1LThjM2EtYTkwNjVjODkzYTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsJolgdlBSAvU0DsKyFdyQdlK3g5cfuAZ/+/2IVeke841s4BwgjIr+6 CftzcDMRlMCS3Q0fTEQED85WdxiFkiA6BG5VcPB5i+CpU9XP6AS29VH9FHVQoIUz +ADlXNjqhxyEUXUrJmQcVZ0kVvh0Uzj7cp7nT7MVOBSjlogAzKy446CBwLqTz2t8 oAMQKf3EfWBmVpz9CRs+dr7KsgWuW5Wdt4A9Aj7t8SnhAOgkfDa9u6wkT1AURvr3 Y9vmxrLbUWerj8th4Qbns13IX5Rzl09XQ+89mkwMX6ASYJVIHi81JIMUj6muWAHG f2z/ne0ZBlztUGp5lLEVEIpCRT3HJzc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:12:13 2025 by rpki-client