$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db2da034-1959-398c-97ed-ff47b60a9995.roa File: db2da034-1959-398c-97ed-ff47b60a9995.roa (raw, json) Hash identifier: VJqNFrBZW3hd/tpxv+OF6g2aml/WMXqEFYE20RjUGJ8= Subject key identifier: 6B:37:B3:D2:C4:D8:6D:B3:DE:F6:53:B5:50:C8:60:DF:AF:1C:55:69 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BB89EF442F35C5B218C00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db2da034-1959-398c-97ed-ff47b60a9995.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.28.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:b8:9e:f4:42:f3:5c:5b:21:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=80bc32f1-fcb6-49c4-b90a-31662524c5dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b3:07:22:f0:f7:cc:47:d7:b7:b2:f5:7b:96: 00:a4:51:a4:55:0c:f7:85:d8:c2:c9:69:d6:c6:f6: a9:b2:4e:da:c6:73:50:30:5d:e0:07:78:89:5a:d0: dd:05:ce:6a:ca:97:21:c4:fd:00:96:7e:2b:3f:29: 7b:9b:72:c9:f0:a8:1c:63:91:80:1b:54:bf:83:bb: f8:d0:a0:2f:67:c7:4a:94:f6:27:b9:e1:82:f1:28: d8:3a:ac:88:1c:a8:c2:d5:d4:8f:a4:88:9c:0c:99: 74:b4:57:e0:d8:ac:70:bf:2e:36:cd:bb:b0:68:bd: 73:fd:35:d7:bb:f0:10:82:d1:23:08:6c:ab:02:fc: 08:cd:88:82:d4:0b:a6:d5:db:d9:c0:9a:f6:22:0c: 36:7b:0f:19:b1:e4:37:d1:6d:38:21:95:e2:3b:b4: de:cd:61:6e:dd:a5:4a:65:cc:03:d7:b6:80:4d:07: 4f:a5:6a:d8:23:af:5a:ad:c8:53:de:2c:39:60:b3: 6a:27:31:63:4d:c4:6b:ea:94:6f:23:62:d8:f2:d1: 7e:42:2f:9b:ad:78:20:c8:1f:c7:97:d0:ab:16:f0: 87:dd:60:b3:fd:db:ed:6c:7e:ee:bf:e3:f3:42:3e: 09:d5:90:b5:f2:35:04:9e:96:f6:5a:9a:0a:06:d3: e5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:37:B3:D2:C4:D8:6D:B3:DE:F6:53:B5:50:C8:60:DF:AF:1C:55:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db2da034-1959-398c-97ed-ff47b60a9995.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.28.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:15:55:2b:7e:01:d6:9c:5b:f0:22:61:f3:88:71:f0:7f:ba: 20:96:8b:67:3c:dd:40:bb:96:56:9f:44:c2:8a:d6:f2:c6:3c: 47:6a:19:a3:69:c1:0b:37:95:46:9b:27:6c:ee:a6:39:f6:be: 9c:e7:39:ce:99:b7:07:49:14:89:f4:57:c8:0e:3d:08:18:a0: 55:b6:8d:bd:e2:89:18:56:16:ac:4a:ae:96:c1:46:6f:31:2a: 94:9d:c0:72:70:6d:96:c3:ba:11:72:23:b0:22:a3:c8:19:59: 11:27:ba:14:14:d4:32:86:fe:90:c9:73:5f:af:bb:e8:61:1e: fb:35:74:44:76:f2:bf:b3:ac:32:07:3f:a5:c5:81:fa:21:0b: bf:c4:85:e7:0e:50:6e:47:71:60:9b:0d:1e:d8:5d:ae:f5:26: c3:79:e7:f0:19:39:2b:a6:c5:85:9f:f8:bd:12:66:cc:e5:10: a5:a3:08:c1:bc:fc:44:88:48:fb:18:06:6c:2c:59:0a:f0:69: 47:d1:3b:69:b0:0e:9d:26:dd:22:73:f9:69:1e:de:6b:d0:64: 30:95:2f:fb:f5:9a:33:3e:82:ef:eb:66:7c:2a:23:42:cf:cd: 90:34:67:af:e2:a6:5d:00:8b:78:ae:60:f6:83:73:e6:61:b9: f9:32:b1:77 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjIS7ie9ELzXFshjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ODBiYzMyZjEtZmNiNi00OWM0LWI5MGEtMzE2NjI1MjRjNWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbMHIvD3zEfXt7L1e5YApFGkVQz3hdjCyWnW xvapsk7axnNQMF3gB3iJWtDdBc5qypchxP0Aln4rPyl7m3LJ8KgcY5GAG1S/g7v4 0KAvZ8dKlPYnueGC8SjYOqyIHKjC1dSPpIicDJl0tFfg2Kxwvy42zbuwaL1z/TXX u/AQgtEjCGyrAvwIzYiC1Aum1dvZwJr2Igw2ew8ZseQ30W04IZXiO7TezWFu3aVK ZcwD17aATQdPpWrYI69archT3iw5YLNqJzFjTcRr6pRvI2LY8tF+Qi+brXggyB/H l9CrFvCH3WCz/dvtbH7uv+PzQj4J1ZC18jUEnpb2WpoKBtPl3wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGs3s9LE2G2z3vZTtVDIYN+vHFVpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGIyZGEwMzQtMTk1OS0z OThjLTk3ZWQtZmY0N2I2MGE5OTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIhwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAchVVK34B1pxb8CJh84hx8H+6IJaLZzzdQLuWVp9EworW8sY8R2oZo2nB CzeVRpsnbO6mOfa+nOc5zpm3B0kUifRXyA49CBigVbaNveKJGFYWrEqulsFGbzEq lJ3AcnBtlsO6EXIjsCKjyBlZESe6FBTUMob+kMlzX6+76GEe+zV0RHbyv7OsMgc/ pcWB+iELv8SF5w5QbkdxYJsNHthdrvUmw3nn8Bk5K6bFhZ/4vRJmzOUQpaMIwbz8 RIhI+xgGbCxZCvBpR9E7abAOnSbdInP5aR7ea9BkMJUv+/WaMz6C7+tmfCojQs/N kDRnr+KmXQCLeK5g9oNz5mG5+TKxdw== -----END CERTIFICATE-----Generated at Fri Apr 4 21:42:47 2025 by rpki-client