$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5dac173-9159-3a25-8137-0fd8cf1f6c52.roa File: d5dac173-9159-3a25-8137-0fd8cf1f6c52.roa (raw, json) Hash identifier: dspHo1F8oBc6SWlUq5t2W+0T6hzlIp/ayP9JQKI1Glw= Subject key identifier: B4:25:61:23:07:7C:02:7A:CD:BC:AA:A7:C5:BA:E0:65:9B:F1:43:BB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BD9F4AEAD81CEF1BC56C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5dac173-9159-3a25-8137-0fd8cf1f6c52.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.128.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:d9:f4:ae:ad:81:ce:f1:bc:56:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=b97077f1-2801-4a40-896d-da70b9b853ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f8:d7:b4:62:00:fb:bb:44:43:db:c2:05:96: 86:5e:b4:97:e3:6b:a9:9c:8f:23:66:db:66:4e:f9: ea:62:b6:f9:de:79:c6:d1:69:f9:06:6d:4e:7f:36: 88:e0:8b:5d:34:51:73:26:36:a9:53:15:06:10:1c: b4:05:8e:58:c6:b6:77:92:f6:ee:ac:78:f0:79:f2: 76:40:f2:27:2a:0d:79:4d:92:6d:8b:97:e6:56:6f: 6c:12:01:96:09:4d:25:ef:1d:9e:4b:40:82:9d:b8: 8d:e9:6a:43:67:12:eb:04:29:a1:32:ee:2a:9a:ef: bd:83:e7:94:03:f1:e4:e2:db:33:61:f2:30:a4:bb: a4:f0:19:ad:3d:73:09:69:05:95:aa:1c:42:c1:18: 86:6d:4a:8e:e2:6a:92:9b:8a:95:a5:b5:74:7e:d9: 72:6b:b0:60:7c:97:1a:44:31:de:3d:bc:e2:e2:ec: 98:cb:21:c1:01:d3:c3:53:db:b1:5f:4d:22:db:8d: aa:24:ed:60:fa:d0:7f:de:66:2e:4e:24:b8:ad:cb: 78:5e:a3:b1:63:b8:3d:04:64:2b:97:60:99:7d:4d: 6c:dd:ae:41:e8:44:3a:e5:51:66:2a:16:39:3a:1e: 2a:17:c8:49:b7:90:4a:83:4a:f7:c2:85:89:3d:73: c8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:25:61:23:07:7C:02:7A:CD:BC:AA:A7:C5:BA:E0:65:9B:F1:43:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5dac173-9159-3a25-8137-0fd8cf1f6c52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.128.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:48:65:77:20:35:cb:0e:fa:a8:3c:f5:3b:83:ee:b9:f8:54: 65:5c:08:01:6f:4d:12:13:ab:ba:f9:cf:63:72:94:2a:7e:11: b3:b7:c0:50:be:ae:0f:62:3a:51:5d:16:e2:e3:9b:e8:20:5e: 8d:37:e1:2f:66:41:ca:6e:21:70:b3:63:0e:2f:05:b6:fb:bd: 88:db:a7:63:50:01:d1:3e:5c:c4:8c:b3:e9:65:ed:62:c8:8e: b7:54:87:5d:0b:6f:11:ce:b1:65:6c:94:78:d2:dd:ce:be:dd: 0e:f3:77:e3:b0:b4:aa:62:43:7a:6c:9f:cb:6a:d0:3f:8d:2b: 41:a1:ea:2b:06:6f:34:be:19:2c:4e:1e:30:06:91:ab:26:57: 52:5e:6f:85:14:c1:9c:b0:70:88:ea:19:1b:9d:5e:16:88:e2: 8a:d2:58:9a:0f:65:e3:ea:64:3b:79:7f:a6:57:3d:4c:dd:cb: f1:b8:92:ee:1b:93:c7:60:8a:6e:ed:a5:f3:51:26:d5:c5:27: 95:bf:41:bc:88:d2:c2:3c:21:ec:ab:4f:e7:b9:93:0f:cb:7c: b2:81:48:7e:be:7d:de:d1:c3:ae:2b:93:79:9f:1d:50:67:c5: 54:60:7a:da:d5:cf:85:e7:ab:e2:48:36:d1:ef:b1:5b:37:45: c6:01:a6:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS9n0rq2BzvG8VsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk Yjk3MDc3ZjEtMjgwMS00YTQwLTg5NmQtZGE3MGI5Yjg1M2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfjXtGIA+7tEQ9vCBZaGXrSX42upnI8jZttm TvnqYrb53nnG0Wn5Bm1OfzaI4ItdNFFzJjapUxUGEBy0BY5YxrZ3kvburHjwefJ2 QPInKg15TZJti5fmVm9sEgGWCU0l7x2eS0CCnbiN6WpDZxLrBCmhMu4qmu+9g+eU A/Hk4tszYfIwpLuk8BmtPXMJaQWVqhxCwRiGbUqO4mqSm4qVpbV0ftlya7BgfJca RDHePbzi4uyYyyHBAdPDU9uxX00i242qJO1g+tB/3mYuTiS4rct4XqOxY7g9BGQr l2CZfU1s3a5B6EQ65VFmKhY5Oh4qF8hJt5BKg0r3woWJPXPINQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQlYSMHfAJ6zbyqp8W64GWb8UO7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDVkYWMxNzMtOTE1OS0z YTI1LTgxMzctMGZkOGNmMWY2YzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdIZXcgNcsO+qg89TuD7rn4VGVcCAFvTRITq7r5z2NylCp+EbO3wFC+ rg9iOlFdFuLjm+ggXo034S9mQcpuIXCzYw4vBbb7vYjbp2NQAdE+XMSMs+ll7WLI jrdUh10LbxHOsWVslHjS3c6+3Q7zd+OwtKpiQ3psn8tq0D+NK0Gh6isGbzS+GSxO HjAGkasmV1Jeb4UUwZywcIjqGRudXhaI4orSWJoPZePqZDt5f6ZXPUzdy/G4ku4b k8dgim7tpfNRJtXFJ5W/QbyI0sI8IeyrT+e5kw/LfLKBSH6+fd7Rw64rk3mfHVBn xVRgetrVz4Xnq+JINtHvsVs3RcYBpk4= -----END CERTIFICATE-----Generated at Fri Apr 4 21:49:55 2025 by rpki-client