$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1ee0fa4-171b-316f-ac6a-f751f2abd61b.roa File: d1ee0fa4-171b-316f-ac6a-f751f2abd61b.roa (raw, json) Hash identifier: sZgzuG7pUOBQADXdA1uX7XKaHfDUXSU8wP4LYktKUHQ= Subject key identifier: D5:AF:69:68:56:9B:CD:C0:A4:16:07:F8:39:5F:6A:94:73:7C:1D:0D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BBCA3DD2BDDAC6E46FD00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1ee0fa4-171b-316f-ac6a-f751f2abd61b.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.159.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:bc:a3:dd:2b:dd:ac:6e:46:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=07f48e49-141c-4351-9005-acc9315a9dab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:75:56:06:b0:44:a7:35:64:a7:da:bb:5c:59: 3a:85:db:c9:a4:66:81:cb:a5:74:39:91:95:ae:ad: f8:3b:b8:85:ed:e8:88:21:40:13:14:0d:65:ef:cc: 6a:63:85:91:10:f0:bc:bd:e3:39:94:d6:4f:1c:44: db:43:07:0b:ab:87:8d:e5:e5:c5:1d:d9:01:2f:64: fe:0e:4d:84:da:66:e2:2a:ae:3d:0e:2b:43:11:8f: d6:7d:7c:95:37:d7:1a:7b:d5:46:de:fb:08:af:fd: de:6c:c6:c4:ec:8c:7b:25:55:ae:04:c9:76:25:9d: 5b:8b:79:c5:d5:93:5f:65:5a:51:86:30:90:c2:61: 4a:78:30:0b:96:15:1c:14:c7:d9:72:1d:df:be:9c: a4:9b:41:1c:16:36:18:b4:6d:3d:f1:b6:9e:5b:85: 0b:78:c6:20:df:eb:bf:35:bc:bb:9e:76:8f:2a:93: d8:9f:7c:1e:97:07:d7:db:59:49:9b:7c:fe:b1:09: 27:c9:f2:8f:9f:2c:bb:1e:17:cc:a4:f8:ec:b4:d7: 24:b1:8e:dc:5a:ee:db:a4:72:8f:16:7f:34:68:3a: 9b:fc:ae:a3:b7:e0:f0:b8:8c:b6:63:64:01:0c:04: 9b:bd:9f:18:e2:ce:f7:22:1d:09:c6:eb:ca:2f:da: cc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:AF:69:68:56:9B:CD:C0:A4:16:07:F8:39:5F:6A:94:73:7C:1D:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1ee0fa4-171b-316f-ac6a-f751f2abd61b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.159.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:2e:dc:cd:8c:fa:23:97:b7:04:71:a2:be:a0:8d:e6:21:fd: 0c:77:c5:8d:e4:bf:69:5f:4e:48:6f:ea:54:f5:0e:90:43:f3: eb:04:03:cd:33:0c:51:70:6a:ec:45:73:fd:e1:96:dd:51:ab: ca:8c:5c:dd:48:e0:0e:2c:0e:ba:c1:a4:c1:e3:ff:8b:92:d2: 7e:e1:1d:e9:11:5b:33:4b:41:2e:8b:b8:22:8b:df:b1:ce:d8: ae:4d:13:82:ce:bb:88:19:53:e4:25:8f:4b:72:27:f4:e1:42: 34:1b:0e:94:93:ec:b0:ed:ee:2b:33:af:75:1c:3a:ee:d6:4a: 95:bb:68:3d:5d:27:4f:2e:18:98:62:14:52:03:39:51:6f:58: 7d:ee:2d:a9:21:f0:47:7b:54:ed:e5:37:38:11:36:22:d6:e7: 4f:17:0e:42:7c:92:0f:f1:b8:d6:4c:f5:08:c7:26:f3:d2:32: 0b:dd:d9:f3:51:43:98:eb:26:2a:5b:2e:40:b3:9b:a5:2e:73: 97:82:42:ed:4d:48:37:ed:9c:4f:9c:21:24:98:74:80:be:a9: 7e:5d:fd:32:8a:8f:dc:1c:e8:b4:1f:e2:bc:d9:14:e7:62:23: c8:f1:4f:5a:13:a3:5f:2d:87:bb:29:83:ab:19:b4:81:81:8c: c5:11:cc:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS7yj3SvdrG5G/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MDdmNDhlNDktMTQxYy00MzUxLTkwMDUtYWNjOTMxNWE5ZGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXVWBrBEpzVkp9q7XFk6hdvJpGaBy6V0OZGV rq34O7iF7eiIIUATFA1l78xqY4WREPC8veM5lNZPHETbQwcLq4eN5eXFHdkBL2T+ Dk2E2mbiKq49DitDEY/WfXyVN9cae9VG3vsIr/3ebMbE7Ix7JVWuBMl2JZ1bi3nF 1ZNfZVpRhjCQwmFKeDALlhUcFMfZch3fvpykm0EcFjYYtG098baeW4ULeMYg3+u/ Nby7nnaPKpPYn3welwfX21lJm3z+sQknyfKPnyy7HhfMpPjstNcksY7cWu7bpHKP Fn80aDqb/K6jt+DwuIy2Y2QBDASbvZ8Y4s73Ih0JxuvKL9rM+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWvaWhWm83ApBYH+DlfapRzfB0NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDFlZTBmYTQtMTcxYi0z MTZmLWFjNmEtZjc1MWYyYWJkNjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIp+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMu3M2M+iOXtwRxor6gjeYh/Qx3xY3kv2lfTkhv6lT1DpBD8+sEA80z DFFwauxFc/3hlt1Rq8qMXN1I4A4sDrrBpMHj/4uS0n7hHekRWzNLQS6LuCKL37HO 2K5NE4LOu4gZU+Qlj0tyJ/ThQjQbDpST7LDt7iszr3UcOu7WSpW7aD1dJ08uGJhi FFIDOVFvWH3uLakh8Ed7VO3lNzgRNiLW508XDkJ8kg/xuNZM9QjHJvPSMgvd2fNR Q5jrJipbLkCzm6Uuc5eCQu1NSDftnE+cISSYdIC+qX5d/TKKj9wc6LQf4rzZFOdi I8jxT1oTo18th7spg6sZtIGBjMURzM0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:23 2025 by rpki-client