$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf6f3051-38bc-3abf-a853-242b9b807f71.roa File: bf6f3051-38bc-3abf-a853-242b9b807f71.roa (raw, json) Hash identifier: YzYdCGqkHw0gkMonBufH1ERo7PDNbGoMsbBNmKr1YY0= Subject key identifier: 75:0D:BD:B4:CA:69:34:4D:D1:3A:05:B0:A4:11:64:04:66:77:69:A9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C210F5A0FE69D36BCAE40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf6f3051-38bc-3abf-a853-242b9b807f71.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.171.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:21:0f:5a:0f:e6:9d:36:bc:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=57f3a7b5-05cc-48cf-a44a-935405852869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:69:07:3b:cd:5f:78:04:ee:9c:ec:71:cd:c2: ce:50:29:73:b1:9e:9f:68:6f:a1:87:a3:96:21:27: 57:dc:27:10:ee:07:b8:e1:ac:88:93:81:4c:f5:a4: 5f:cc:40:1d:1f:46:b2:e6:d9:f5:85:30:ac:c1:1e: 4a:af:2a:ab:df:ac:ed:5e:5d:9a:57:c3:9a:86:13: 14:27:fb:eb:36:48:6e:ff:23:dc:d0:7b:ec:2e:27: 2a:bc:c9:1a:5c:aa:f5:42:66:fe:98:b6:4c:0e:0f: 59:e8:71:03:45:7f:6d:5a:59:a4:ec:38:c1:82:e4: d4:39:79:55:4f:e6:3a:45:e2:5c:c5:b0:fb:e5:6c: 0f:fc:8e:4e:cd:de:19:55:9c:94:e3:32:74:3f:6f: f1:3d:b8:c7:a2:38:e4:fb:c8:48:68:89:0e:f6:25: fe:56:43:c6:99:ac:bc:b9:5f:40:da:19:93:7d:f2: 2e:3f:b7:a6:aa:18:cf:c7:d6:ba:11:68:24:a3:88: f1:ca:8a:6e:d7:de:7b:b8:4a:e1:38:c6:7a:ce:64: 34:74:5c:56:53:e8:5b:d5:12:59:4b:99:b9:32:a7: 96:4e:96:9a:5f:da:30:1f:46:51:30:d9:62:f4:e4: 01:12:42:ec:65:c6:45:59:75:72:48:1d:09:ca:e4: 2d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:0D:BD:B4:CA:69:34:4D:D1:3A:05:B0:A4:11:64:04:66:77:69:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf6f3051-38bc-3abf-a853-242b9b807f71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.171.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:0b:f4:9f:ed:04:da:5b:ed:fb:a1:f2:1f:22:94:55:52:02: 3e:9d:d3:2d:3f:41:0c:97:ec:2b:58:7a:72:91:99:80:b9:de: 3a:0c:28:ee:07:b5:8f:5c:b8:f0:1f:37:a7:9c:cd:6e:56:92: 92:bf:a3:fc:48:8d:c8:e9:fd:3d:10:91:2b:9e:ed:b2:95:4b: e4:a2:37:7e:1a:b0:f4:98:15:76:d6:b9:48:a7:6b:1f:2b:ba: b4:3f:df:65:92:25:8d:90:e4:4c:a2:7e:25:e8:60:35:94:a9: 03:30:75:63:21:92:c4:bd:5c:2c:0d:d5:8a:a5:0b:e3:20:6c: e8:a9:6b:19:f7:ab:f4:96:72:3f:07:8e:50:b2:53:39:5e:b8: c1:e9:3e:db:3d:d0:a2:e1:cd:40:ed:a9:6c:8e:00:33:bb:96: a5:93:10:02:8a:2d:bf:d3:a7:2e:44:b0:45:d5:79:b2:4f:25: 17:f8:2b:b4:c3:4b:3e:92:95:98:02:ec:ce:69:4b:9e:91:67: d3:c0:2f:eb:2b:9b:10:e5:f2:46:dc:71:dd:13:f7:b1:55:23: 3b:5d:91:ea:a4:15:05:7c:d2:96:fc:f1:52:84:4f:00:48:22: 0f:06:c4:4e:82:f7:5c:91:3f:6a:84:df:e1:7d:97:00:1b:0d: 4f:18:55:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITCEPWg/mnTa8rkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NTdmM2E3YjUtMDVjYy00OGNmLWE0NGEtOTM1NDA1ODUyODY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWkHO81feATunOxxzcLOUClzsZ6faG+hh6OW ISdX3CcQ7ge44ayIk4FM9aRfzEAdH0ay5tn1hTCswR5Kryqr36ztXl2aV8OahhMU J/vrNkhu/yPc0HvsLicqvMkaXKr1Qmb+mLZMDg9Z6HEDRX9tWlmk7DjBguTUOXlV T+Y6ReJcxbD75WwP/I5Ozd4ZVZyU4zJ0P2/xPbjHojjk+8hIaIkO9iX+VkPGmay8 uV9A2hmTffIuP7emqhjPx9a6EWgko4jxyopu1957uErhOMZ6zmQ0dFxWU+hb1RJZ S5m5MqeWTpaaX9owH0ZRMNli9OQBEkLsZcZFWXVySB0JyuQtDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUNvbTKaTRN0ToFsKQRZARmd2mpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmY2ZjMwNTEtMzhiYy0z YWJmLWE4NTMtMjQyYjliODA3ZjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIquAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkL9J/tBNpb7fuh8h8ilFVSAj6d0y0/QQyX7CtYenKRmYC53joMKO4H tY9cuPAfN6eczW5WkpK/o/xIjcjp/T0QkSue7bKVS+SiN34asPSYFXbWuUinax8r urQ/32WSJY2Q5EyifiXoYDWUqQMwdWMhksS9XCwN1YqlC+MgbOipaxn3q/SWcj8H jlCyUzleuMHpPts90KLhzUDtqWyOADO7lqWTEAKKLb/Tpy5EsEXVebJPJRf4K7TD Sz6SlZgC7M5pS56RZ9PAL+srmxDl8kbccd0T97FVIztdkeqkFQV80pb88VKETwBI Ig8GxE6C91yRP2qE3+F9lwAbDU8YVRA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:29 2025 by rpki-client