$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd7699ab-4990-3cb4-a38d-d21affd6272b.roa File: dd7699ab-4990-3cb4-a38d-d21affd6272b.roa (raw, json) Hash identifier: yXYI7aayBwGc/ov+mKS3mrjiMrQjiV8h98IiiuM7/50= Subject key identifier: 24:56:BB:DB:AE:86:69:8B:E1:2F:0F:5A:D8:66:F5:D6:DD:35:05:86 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C161E568CB2D164771500 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd7699ab-4990-3cb4-a38d-d21affd6272b.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.152.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:16:1e:56:8c:b2:d1:64:77:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=396c5e76-5574-415d-bbfe-ceb8d1f9579f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d5:a2:16:92:b7:f9:11:d9:5a:41:3f:3a:7f: 07:d7:1b:c4:72:70:c7:8c:01:bb:c8:ba:09:04:84: ef:24:61:c0:2c:2c:ac:15:07:7e:21:d0:03:7e:0e: 74:ca:96:14:dd:f9:ad:09:16:a1:c4:19:a4:37:41: 07:10:8f:67:d1:d4:2c:0e:33:df:17:59:1d:bf:6d: 73:79:6d:e4:94:3b:41:0f:ea:e3:dc:ce:12:9f:08: 08:ba:17:b3:60:8d:39:58:d0:4c:ad:e3:85:de:3a: af:b9:b6:f9:a9:5b:d5:88:ab:6e:7e:0d:b8:bc:94: 0a:d0:2b:cd:60:00:7a:13:c7:7f:bb:cc:7a:e5:3d: 8a:8d:be:53:ec:d3:d4:f1:73:17:91:6c:98:1e:6e: 51:1f:a4:c0:4c:b9:32:fc:06:3d:ff:28:b3:2b:18: d8:11:9a:09:54:60:61:69:5d:e0:95:6c:84:ae:49: fc:93:d0:51:86:fb:c9:b1:c1:28:9d:fc:ee:7b:1b: 81:05:d1:81:9b:bc:48:1a:c9:b2:ea:74:cb:f7:ec: af:a3:39:32:ca:30:80:50:4b:62:71:83:b2:4f:73: b6:2e:27:0f:6a:c2:ce:b1:2e:c7:07:67:08:22:b5: ca:61:db:44:bb:5a:f8:b9:eb:c2:9b:cc:cc:c2:4a: 26:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:56:BB:DB:AE:86:69:8B:E1:2F:0F:5A:D8:66:F5:D6:DD:35:05:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd7699ab-4990-3cb4-a38d-d21affd6272b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.152.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:9f:b8:f1:ea:84:ad:71:1a:e2:4f:ae:f2:6b:45:d8:00:14: 25:3a:29:1a:3d:ae:15:2c:3b:ea:19:92:c3:f9:ac:a4:97:fe: b4:03:df:65:35:a3:56:3f:4d:84:31:03:8d:c6:63:78:b4:90: b7:58:42:8b:63:00:63:e6:62:f1:2f:53:05:4c:2a:6c:30:3e: 78:46:e9:78:56:2b:9d:65:0c:82:82:b6:a5:e6:dc:5f:ad:93: 95:3a:ab:d2:66:ec:19:22:b5:56:8f:58:48:99:63:55:8f:17: 86:d0:2c:6b:b0:88:88:30:9f:06:ec:cb:17:61:a9:78:a2:70: e9:82:b1:09:eb:64:2d:e8:e1:4d:db:d8:bc:18:3b:eb:75:4f: b9:7d:ab:0f:33:a4:b3:0c:ae:99:b9:82:97:0b:10:61:09:c7: 5b:bf:54:47:e9:7d:6b:bc:c3:e3:d8:53:4e:41:d8:f3:98:84: 42:e6:5b:68:1e:bc:fa:78:65:af:0d:b8:71:9d:d6:c7:a4:ea: 41:d7:26:bc:b5:11:ae:84:57:bb:c9:09:60:18:57:8c:d8:45: 66:e3:b5:40:9b:8a:2b:8d:8b:a9:aa:5b:2c:62:ca:a8:35:25: ae:97:00:fe:47:f1:27:a4:85:d5:4e:c6:64:7b:90:f7:01:9e: 21:c7:a2:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITBYeVoyy0WR3FQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk Mzk2YzVlNzYtNTU3NC00MTVkLWJiZmUtY2ViOGQxZjk1NzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tWiFpK3+RHZWkE/On8H1xvEcnDHjAG7yLoJ BITvJGHALCysFQd+IdADfg50ypYU3fmtCRahxBmkN0EHEI9n0dQsDjPfF1kdv21z eW3klDtBD+rj3M4SnwgIuhezYI05WNBMreOF3jqvubb5qVvViKtufg24vJQK0CvN YAB6E8d/u8x65T2Kjb5T7NPU8XMXkWyYHm5RH6TATLky/AY9/yizKxjYEZoJVGBh aV3glWyErkn8k9BRhvvJscEonfzuexuBBdGBm7xIGsmy6nTL9+yvozkyyjCAUEti cYOyT3O2LicPasLOsS7HB2cIIrXKYdtEu1r4uevCm8zMwkomtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRWu9uuhmmL4S8PWthm9dbdNQWGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGQ3Njk5YWItNDk5MC0z Y2I0LWEzOGQtZDIxYWZmZDYyNzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIpiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyfuPHqhK1xGuJPrvJrRdgAFCU6KRo9rhUsO+oZksP5rKSX/rQD32U1 o1Y/TYQxA43GY3i0kLdYQotjAGPmYvEvUwVMKmwwPnhG6XhWK51lDIKCtqXm3F+t k5U6q9Jm7BkitVaPWEiZY1WPF4bQLGuwiIgwnwbsyxdhqXiicOmCsQnrZC3o4U3b 2LwYO+t1T7l9qw8zpLMMrpm5gpcLEGEJx1u/VEfpfWu8w+PYU05B2POYhELmW2ge vPp4Za8NuHGd1sek6kHXJry1Ea6EV7vJCWAYV4zYRWbjtUCbiiuNi6mqWyxiyqg1 Ja6XAP5H8SekhdVOxmR7kPcBniHHoi4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:35 2025 by rpki-client