$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df26c213-e8cf-35ac-80c4-252c455f379b.roa File: df26c213-e8cf-35ac-80c4-252c455f379b.roa (raw, json) Hash identifier: qqrnU2WMrRhz/28fD79Vd2gBn78Hed2xRRvjunCDoE0= Subject key identifier: 5A:BA:BF:28:57:24:30:5E:34:40:03:E4:2B:63:17:36:CF:FE:EC:D7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BF357699FB4AB83720B80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df26c213-e8cf-35ac-80c4-252c455f379b.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.124.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:f3:57:69:9f:b4:ab:83:72:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=2aef139f-9b43-4401-b4e0-252ea00554d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:16:a9:c4:28:7f:2f:29:1e:bf:47:d6:45:1b: 22:86:a7:2c:94:17:98:c8:b3:8f:f1:3c:bc:13:8d: 3c:fd:23:44:f5:ac:30:43:f7:01:d7:4c:bf:04:a7: 37:00:62:a9:20:2a:40:49:8a:b1:cd:0a:cc:87:f2: 5e:16:b1:1c:9a:1d:9e:a6:fe:82:94:70:1b:f4:07: b1:81:00:20:91:e9:89:63:6d:e0:36:18:ba:3c:69: 1d:a6:db:05:c2:ae:e2:cb:e5:1b:04:e0:7c:8e:49: f0:1e:f5:06:56:ea:dc:8e:87:6c:65:30:d9:98:a8: ac:be:95:fb:e8:b3:81:bf:26:b6:49:ec:cc:02:00: 3b:1b:2a:ba:8f:f3:2a:bd:2f:ea:bc:aa:11:70:88: 6e:4b:d0:1d:8d:21:53:ae:94:e2:53:3d:62:d0:3e: 66:d1:54:16:c7:17:07:31:c2:06:00:1e:7c:9d:50: 77:19:23:ed:d1:05:bc:38:13:8d:63:df:f5:ae:7c: 8f:d0:76:f9:94:7f:b1:1d:4b:c1:d5:84:e4:b0:17: 10:a1:45:c2:45:7e:a2:b7:0d:c8:a2:b8:78:e7:b9: e8:3d:49:ff:f6:2b:81:ef:b2:71:e5:f9:f4:a9:d9: a1:eb:d9:e2:89:b6:53:7f:2c:ac:b7:bb:09:89:f9: d7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BA:BF:28:57:24:30:5E:34:40:03:E4:2B:63:17:36:CF:FE:EC:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df26c213-e8cf-35ac-80c4-252c455f379b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.124.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:11:1d:73:57:1f:ca:16:b2:5f:c6:24:5a:09:f6:0f:94:d9: 04:0f:6e:5d:b6:92:2d:4f:35:5b:bb:4f:7a:b2:e0:ef:b3:6e: 87:bc:b4:6d:0e:8c:e9:31:65:e3:12:f3:d2:18:1b:ee:e7:c1: dd:7c:7c:15:66:7f:8c:5b:9d:a7:c9:8d:a8:91:fc:51:af:75: a2:3d:93:3b:b7:ad:6c:f7:60:8b:ca:75:b7:67:cf:9c:ca:cb: 26:53:da:04:67:8f:84:77:0a:78:1a:5e:d4:89:ee:a6:57:25: a6:27:77:a6:ec:d4:bf:2a:8f:79:14:5f:7a:ca:31:dd:c7:f8: e3:cd:a2:d4:b2:e2:c8:df:89:a6:83:da:5c:2d:6c:09:7e:d6: 97:b7:c9:e0:63:07:63:91:a2:8a:c1:67:e1:e1:98:8d:fb:57: 09:84:54:b2:55:0b:f7:33:4a:89:bc:b5:5e:3e:49:f9:0d:2b: 7e:c5:de:04:13:b1:4c:fe:48:ad:0c:75:22:45:36:cd:f1:80: 1c:63:e6:f0:ce:a7:1a:b2:b4:ef:f5:5d:c0:da:8b:07:c4:b7: a8:e0:6c:41:15:de:e7:f9:e7:d9:2e:d7:93:86:bc:13:21:bb: 49:55:c7:62:d9:25:98:36:e5:4e:a6:95:68:5f:fe:81:00:58: 44:c9:22:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS/NXaZ+0q4NyC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MmFlZjEzOWYtOWI0My00NDAxLWI0ZTAtMjUyZWEwMDU1NGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxapxCh/Lykev0fWRRsihqcslBeYyLOP8Ty8 E408/SNE9awwQ/cB10y/BKc3AGKpICpASYqxzQrMh/JeFrEcmh2epv6ClHAb9Aex gQAgkemJY23gNhi6PGkdptsFwq7iy+UbBOB8jknwHvUGVurcjodsZTDZmKisvpX7 6LOBvya2SezMAgA7Gyq6j/MqvS/qvKoRcIhuS9AdjSFTrpTiUz1i0D5m0VQWxxcH McIGAB58nVB3GSPt0QW8OBONY9/1rnyP0Hb5lH+xHUvB1YTksBcQoUXCRX6itw3I orh457noPUn/9iuB77Jx5fn0qdmh69niibZTfyyst7sJifnXFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFq6vyhXJDBeNEAD5CtjFzbP/uzXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGYyNmMyMTMtZThjZi0z NWFjLTgwYzQtMjUyYzQ1NWYzNzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEARHXNXH8oWsl/GJFoJ9g+U2QQPbl22ki1PNVu7T3qy4O+zboe8tG0O jOkxZeMS89IYG+7nwd18fBVmf4xbnafJjaiR/FGvdaI9kzu3rWz3YIvKdbdnz5zK yyZT2gRnj4R3CngaXtSJ7qZXJaYnd6bs1L8qj3kUX3rKMd3H+OPNotSy4sjfiaaD 2lwtbAl+1pe3yeBjB2ORoorBZ+HhmI37VwmEVLJVC/czSom8tV4+SfkNK37F3gQT sUz+SK0MdSJFNs3xgBxj5vDOpxqytO/1XcDaiwfEt6jgbEEV3uf559ku15OGvBMh u0lVx2LZJZg25U6mlWhf/oEAWETJIuc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:42 2025 by rpki-client