$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d32c3afa-e997-3493-8d64-a819e0e5c167.roa File: d32c3afa-e997-3493-8d64-a819e0e5c167.roa (raw, json) Hash identifier: j3UzOQnitFA4F2xceczTPul5ZxnepzlpjRW2wY1Pds0= Subject key identifier: 07:72:02:15:CA:D8:56:89:D0:9A:4D:F2:BE:8C:3C:A3:6C:DB:7A:08 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BCA5ED1ED237C0762BAC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d32c3afa-e997-3493-8d64-a819e0e5c167.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.168.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:ca:5e:d1:ed:23:7c:07:62:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=e9c04efb-df5a-43a9-a63c-6e290e238fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:67:03:2c:42:71:41:23:23:3f:fd:ff:f6:4f: d3:b8:54:be:8a:cc:72:10:9c:eb:c5:df:8a:28:75: 82:d9:27:fa:04:5c:f2:67:da:c7:e8:65:b0:c3:70: ba:d1:2d:3b:89:e8:3d:1f:27:52:db:d0:9f:2f:6f: 91:60:56:91:dc:28:96:11:a1:fc:5b:b1:40:52:53: 8a:3e:ea:42:3a:d1:65:16:11:ce:66:85:bf:03:85: bc:5e:5f:ba:d8:d6:4b:f1:f6:1c:13:17:3e:0c:53: 98:7c:f7:46:16:6b:91:a9:bd:f0:00:e6:8f:c8:27: 15:e7:9b:a7:41:22:69:42:85:3c:34:63:88:52:12: 3d:f5:74:1f:6f:75:02:21:10:94:82:f8:73:33:47: 85:34:df:8d:ce:df:89:dc:ef:84:47:c8:55:9e:20: 54:59:23:a6:48:c4:43:26:67:bd:4c:7e:3d:4c:4e: 17:7e:07:b6:f8:dd:88:8b:4b:ec:42:97:49:7a:9b: 72:09:90:55:7a:c7:f5:79:91:9b:7c:f7:eb:68:30: 15:2e:60:5d:59:ab:10:d4:bd:e5:72:44:63:a4:09: 0a:bd:7d:0a:25:37:a7:93:fe:e0:94:b0:05:c8:3a: 4c:ee:04:03:41:71:b0:59:96:12:ad:ae:d4:0d:cc: 85:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:72:02:15:CA:D8:56:89:D0:9A:4D:F2:BE:8C:3C:A3:6C:DB:7A:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d32c3afa-e997-3493-8d64-a819e0e5c167.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.168.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:38:5a:58:36:cc:13:b9:85:43:3a:fa:61:71:99:88:16:52: 91:c5:ea:8f:40:65:ed:3b:ab:81:7f:68:85:31:97:2e:7e:65: 04:ab:c7:ed:ca:a1:cf:91:bf:4c:74:57:f9:82:2e:80:2d:d6: 1f:a7:4a:dd:18:b5:ec:71:07:7a:bd:6f:99:79:ee:42:6d:c5: e8:89:69:0d:26:d3:84:7a:ba:46:7f:08:64:22:23:32:b9:24: fd:85:c0:03:19:fd:1d:14:d6:58:28:4f:12:65:de:2c:85:d4: d4:36:03:b2:2a:46:63:83:4b:6e:25:bd:94:57:4e:b3:61:1a: 1f:5a:60:03:82:60:cf:08:6c:08:39:84:14:98:a6:02:bb:23: 5b:13:be:86:bc:28:3c:97:cf:db:ba:e8:00:ca:d4:b3:81:1c: 19:63:65:69:4f:ef:b5:6f:2d:42:64:52:6f:56:8e:17:67:6a: 7a:0a:eb:b0:9f:fb:eb:56:8e:4c:c3:98:ef:2a:bb:a0:73:a7: 15:2c:1c:23:bc:30:30:10:e3:2d:0c:bd:cc:29:66:84:c0:0b: dd:c3:6f:78:22:c1:d0:5d:2a:3f:45:43:b1:6b:66:52:56:ab: 63:e1:07:9d:5e:8b:b8:4b:16:68:75:6c:98:40:ba:02:64:5b: a8:49:74:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8pe0e0jfAdiusAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZTljMDRlZmItZGY1YS00M2E5LWE2M2MtNmUyOTBlMjM4ZmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2cDLEJxQSMjP/3/9k/TuFS+isxyEJzrxd+K KHWC2Sf6BFzyZ9rH6GWww3C60S07ieg9HydS29CfL2+RYFaR3CiWEaH8W7FAUlOK PupCOtFlFhHOZoW/A4W8Xl+62NZL8fYcExc+DFOYfPdGFmuRqb3wAOaPyCcV55un QSJpQoU8NGOIUhI99XQfb3UCIRCUgvhzM0eFNN+Nzt+J3O+ER8hVniBUWSOmSMRD Jme9TH49TE4Xfge2+N2Ii0vsQpdJeptyCZBVesf1eZGbfPfraDAVLmBdWasQ1L3l ckRjpAkKvX0KJTenk/7glLAFyDpM7gQDQXGwWZYSra7UDcyFfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdyAhXK2FaJ0JpN8r6MPKNs23oIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDMyYzNhZmEtZTk5Ny0z NDkzLThkNjQtYTgxOWUwZTVjMTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIqgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJg4Wlg2zBO5hUM6+mFxmYgWUpHF6o9AZe07q4F/aIUxly5+ZQSrx+3K oc+Rv0x0V/mCLoAt1h+nSt0YtexxB3q9b5l57kJtxeiJaQ0m04R6ukZ/CGQiIzK5 JP2FwAMZ/R0U1lgoTxJl3iyF1NQ2A7IqRmODS24lvZRXTrNhGh9aYAOCYM8IbAg5 hBSYpgK7I1sTvoa8KDyXz9u66ADK1LOBHBljZWlP77VvLUJkUm9WjhdnanoK67Cf ++tWjkzDmO8qu6BzpxUsHCO8MDAQ4y0MvcwpZoTAC93Db3giwdBdKj9FQ7FrZlJW q2PhB51ei7hLFmh1bJhAugJkW6hJdFo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:55 2025 by rpki-client