$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f11069b8-0d35-380f-acb1-1cd190315ba7.roa File: f11069b8-0d35-380f-acb1-1cd190315ba7.roa (raw, json) Hash identifier: Tr1niXQe592Xxp/FQVz7NUGlsOqPYUxFpMkBYf0aaWk= Subject key identifier: 23:13:CD:45:FE:E6:C8:5F:AB:9F:ED:BC:EC:3F:C8:91:F8:2E:6A:3B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BE98975714D7E6F801080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f11069b8-0d35-380f-acb1-1cd190315ba7.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.20.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:e9:89:75:71:4d:7e:6f:80:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=ff16e85f-5bf6-47ef-9372-e73929d7ae6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7b:de:fc:b9:bf:8d:ee:4f:1f:c2:d4:6b:52: b5:82:70:88:7b:1e:77:8e:cf:f4:02:af:cf:3a:4e: 7b:d3:47:f3:84:1a:96:16:c8:03:3a:eb:f4:18:1f: 12:0a:2c:8b:c5:e5:5b:23:ee:81:75:2a:91:5c:c2: 35:3f:bc:34:e4:96:9d:e4:15:bb:da:1d:58:a0:c6: 32:70:f9:4b:6b:49:a5:02:a6:ed:fe:49:48:12:20: 6c:b8:32:b7:a5:50:11:76:2a:30:a0:a9:55:95:8b: 84:32:88:1e:dc:ad:af:22:6f:90:89:1d:8f:eb:f6: 9e:44:ee:8f:4c:c9:d6:a5:a2:44:31:a3:2e:e3:3e: 52:ce:d9:fb:ec:ad:e8:95:ca:fb:67:99:32:f9:28: 68:d0:8c:4b:ac:48:7e:d6:5a:ae:d3:45:c5:0b:b6: 23:c3:c1:4b:2a:60:c9:3b:ad:93:fb:81:e1:f8:64: ba:ae:e3:a9:d6:09:59:5b:e3:90:9c:d9:d7:f5:e3: 82:31:fc:9e:ae:62:6e:27:58:2a:44:d5:1f:c9:6f: 78:0f:69:dc:8a:98:10:57:55:18:b6:ee:81:f2:fd: 95:c5:f4:f9:53:e2:42:8c:9e:c9:86:0d:41:9d:99: 18:14:10:3f:8f:68:c7:9e:93:ff:14:ba:cc:5f:ff: 13:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:13:CD:45:FE:E6:C8:5F:AB:9F:ED:BC:EC:3F:C8:91:F8:2E:6A:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f11069b8-0d35-380f-acb1-1cd190315ba7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.20.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:80:16:58:51:61:2a:87:1d:0d:6a:ef:2a:94:78:f7:f9:87: 56:4c:17:61:25:08:7f:cb:41:f9:ca:30:a2:23:60:6e:4e:34: eb:5a:e0:5c:7a:2c:2b:90:d4:0f:a9:99:d7:42:01:f8:de:84: a5:00:4d:20:1b:1e:fd:31:38:f6:00:4b:75:62:4b:25:7f:7c: 62:2f:c7:57:3d:48:ee:53:e2:8a:34:cf:02:29:df:d8:05:73: d7:26:a5:b1:29:e0:17:83:c8:3a:16:f7:e0:9b:0c:1d:fc:19: b1:54:7b:c2:e1:50:5d:a2:12:3d:fa:1f:21:46:61:1f:6d:c2: 09:c4:35:74:a6:18:6f:c2:ea:b2:da:5a:a3:7b:86:5b:ea:9c: 41:23:6e:10:1b:17:74:a8:4a:d1:cc:de:56:56:87:a1:f7:9c: 8b:c2:b6:04:bf:f0:90:16:a8:7d:19:38:fa:70:cd:32:73:4d: ae:7b:7f:f1:16:4b:96:4f:63:87:eb:fd:8b:13:dc:2e:43:db: 7e:4d:65:0e:59:04:50:71:66:6e:78:01:fa:0e:b8:4e:64:7d: 3b:c8:56:47:9e:fe:eb:e7:83:ed:8a:80:a1:54:09:6f:c2:74: 90:f9:59:31:cb:b5:18:39:ab:fd:b1:5d:d2:07:70:5d:c2:79: 5a:04:c6:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+mJdXFNfm+AEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZmYxNmU4NWYtNWJmNi00N2VmLTkzNzItZTczOTI5ZDdhZTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3ve/Lm/je5PH8LUa1K1gnCIex53js/0Aq/P Ok5700fzhBqWFsgDOuv0GB8SCiyLxeVbI+6BdSqRXMI1P7w05Jad5BW72h1YoMYy cPlLa0mlAqbt/klIEiBsuDK3pVARdiowoKlVlYuEMoge3K2vIm+QiR2P6/aeRO6P TMnWpaJEMaMu4z5Sztn77K3olcr7Z5ky+Sho0IxLrEh+1lqu00XFC7Yjw8FLKmDJ O62T+4Hh+GS6ruOp1glZW+OQnNnX9eOCMfyermJuJ1gqRNUfyW94D2ncipgQV1UY tu6B8v2VxfT5U+JCjJ7Jhg1BnZkYFBA/j2jHnpP/FLrMX/8TfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMTzUX+5shfq5/tvOw/yJH4Lmo7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjExMDY5YjgtMGQzNS0z ODBmLWFjYjEtMWNkMTkwMzE1YmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIhSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmAFlhRYSqHHQ1q7yqUePf5h1ZMF2ElCH/LQfnKMKIjYG5ONOta4Fx6 LCuQ1A+pmddCAfjehKUATSAbHv0xOPYAS3ViSyV/fGIvx1c9SO5T4oo0zwIp39gF c9cmpbEp4BeDyDoW9+CbDB38GbFUe8LhUF2iEj36HyFGYR9twgnENXSmGG/C6rLa WqN7hlvqnEEjbhAbF3SoStHM3lZWh6H3nIvCtgS/8JAWqH0ZOPpwzTJzTa57f/EW S5ZPY4fr/YsT3C5D235NZQ5ZBFBxZm54AfoOuE5kfTvIVkee/uvng+2KgKFUCW/C dJD5WTHLtRg5q/2xXdIHcF3CeVoExjk= -----END CERTIFICATE-----Generated at Fri Apr 4 21:45:17 2025 by rpki-client