$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb3bb106-3ff2-32e1-b6c6-d0d5b9e1f77d.roa File: cb3bb106-3ff2-32e1-b6c6-d0d5b9e1f77d.roa (raw, json) Hash identifier: rI+DWmVbRBoNpk/z/xsPYv33yvZnbzZ4uy34gORdohY= Subject key identifier: 4A:5D:C1:3F:8B:F7:1B:A6:45:BB:86:76:D2:EB:52:CB:D9:CB:85:67 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BC8F178F661A8BEEAD980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb3bb106-3ff2-32e1-b6c6-d0d5b9e1f77d.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.134.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:c8:f1:78:f6:61:a8:be:ea:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=1dc3a9fe-3d5b-4748-bc5c-a7eb6487ed99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2f:9c:ac:ca:4a:ec:0a:9b:bf:07:64:85:1f: 8a:6e:5e:34:f5:d5:ad:81:b9:98:e2:c0:4d:9d:93: 18:88:d6:c7:10:7b:3f:75:e9:f4:80:30:ca:6e:f7: ea:89:6a:a1:03:37:1c:3b:a4:85:82:f1:7a:0d:9f: 43:c8:90:03:b6:6b:68:20:38:07:d7:6d:09:5a:f7: 83:1c:28:ae:cf:af:9b:12:9c:cc:69:d2:34:f2:16: 67:8e:e9:37:10:c3:ee:6d:d2:54:6c:5b:11:b2:f2: e7:10:36:a7:26:6a:a9:0c:55:14:d0:87:2a:cb:e7: 94:ab:03:23:ee:81:c9:5c:c0:1d:3c:8e:2a:9b:d0: 1c:0c:10:bf:4e:c1:9d:d6:86:ff:a0:53:31:af:75: c8:1c:8e:2b:bd:40:0b:dd:84:07:42:96:d1:65:2a: 1c:fa:7a:f1:46:ee:75:86:37:1c:b6:fa:dc:54:e4: e8:17:a1:89:2d:f6:bf:a2:e3:74:96:fb:7d:62:59: cd:f5:fe:20:9f:80:c0:70:ce:75:bb:0a:1b:e5:2b: de:56:d5:05:81:fb:ea:44:44:1b:14:05:50:9c:64: 62:10:ef:83:5b:0e:96:c7:f6:38:54:2d:d6:9a:92: 57:6f:40:7e:6d:51:7b:32:52:3c:fa:ef:a4:3f:d0: 6e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:5D:C1:3F:8B:F7:1B:A6:45:BB:86:76:D2:EB:52:CB:D9:CB:85:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb3bb106-3ff2-32e1-b6c6-d0d5b9e1f77d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.134.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:35:96:ef:67:d2:be:22:18:6a:7e:57:18:76:0b:8a:dd:1c: 08:53:0d:c8:04:82:ab:09:bc:e1:b3:b6:56:9f:eb:66:0d:f2: c2:89:7b:d0:3d:24:ed:0e:74:34:9c:75:b1:97:74:37:6d:b5: b7:3e:6a:20:be:74:00:86:be:27:b6:73:62:bd:83:4a:03:49: 9a:ae:3d:0b:07:1b:3b:a7:2a:e6:6c:5c:d3:71:f9:a4:02:6d: ee:08:61:a6:69:76:93:71:e7:e2:80:bd:e8:54:bb:c5:80:e7: a6:cd:0f:bd:76:6c:1a:48:08:a1:45:b7:ab:53:95:f9:fd:ed: 45:43:93:8c:0a:b8:5c:54:99:ba:cf:40:ef:e8:20:47:f3:dd: 40:27:f5:73:61:27:35:71:09:1f:b6:42:b9:41:f3:05:8b:54: f4:1e:7e:f6:aa:63:ed:2f:96:03:ee:93:77:09:93:2c:1c:71: 69:f8:f7:59:80:7b:da:66:11:10:29:a4:e5:77:f9:18:46:2f: 4c:e0:e8:03:45:3e:d8:4e:e7:9e:19:9a:98:9f:02:66:a0:a1: 1b:89:a7:8b:22:c2:e0:c2:a0:5b:4b:c0:7d:1a:f3:64:75:f1: 82:93:0e:da:dc:79:34:9c:ce:4c:7a:fd:dd:6c:f3:e8:63:92: 82:23:41:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8jxePZhqL7q2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MWRjM2E5ZmUtM2Q1Yi00NzQ4LWJjNWMtYTdlYjY0ODdlZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC+crMpK7AqbvwdkhR+Kbl409dWtgbmY4sBN nZMYiNbHEHs/den0gDDKbvfqiWqhAzccO6SFgvF6DZ9DyJADtmtoIDgH120JWveD HCiuz6+bEpzMadI08hZnjuk3EMPubdJUbFsRsvLnEDanJmqpDFUU0Icqy+eUqwMj 7oHJXMAdPI4qm9AcDBC/TsGd1ob/oFMxr3XIHI4rvUAL3YQHQpbRZSoc+nrxRu51 hjcctvrcVOToF6GJLfa/ouN0lvt9YlnN9f4gn4DAcM51uwob5SveVtUFgfvqREQb FAVQnGRiEO+DWw6Wx/Y4VC3WmpJXb0B+bVF7MlI8+u+kP9BuywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpdwT+L9xumRbuGdtLrUsvZy4VnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2IzYmIxMDYtM2ZmMi0z MmUxLWI2YzYtZDBkNWI5ZTFmNzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKg1lu9n0r4iGGp+Vxh2C4rdHAhTDcgEgqsJvOGztlaf62YN8sKJe9A9 JO0OdDScdbGXdDdttbc+aiC+dACGvie2c2K9g0oDSZquPQsHGzunKuZsXNNx+aQC be4IYaZpdpNx5+KAvehUu8WA56bND712bBpICKFFt6tTlfn97UVDk4wKuFxUmbrP QO/oIEfz3UAn9XNhJzVxCR+2QrlB8wWLVPQefvaqY+0vlgPuk3cJkywccWn491mA e9pmERAppOV3+RhGL0zg6ANFPthO554ZmpifAmagoRuJp4siwuDCoFtLwH0a82R1 8YKTDtrceTSczkx6/d1s8+hjkoIjQR0= -----END CERTIFICATE-----Generated at Fri Apr 4 21:40:47 2025 by rpki-client