$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2295f90-4fbf-3d4d-b454-6992830a2568.roa File: f2295f90-4fbf-3d4d-b454-6992830a2568.roa (raw, json) Hash identifier: j7foP79yNFVAsJBOjC4D8x4DZ7J2GrZpnp5M7bHSB+E= Subject key identifier: AB:E3:3E:A2:C0:AD:82:79:C1:ED:57:17:0C:60:43:F8:AA:41:19:FF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BBBD4355D91121DF81740 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2295f90-4fbf-3d4d-b454-6992830a2568.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.173.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:bb:d4:35:5d:91:12:1d:f8:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=3cc61176-47cf-4d4d-9c65-4112283dd875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f1:46:19:da:62:13:e8:45:c3:75:b7:d2:87: c5:c8:fe:96:8e:69:16:70:cf:e4:45:1d:2e:29:99: d9:57:b1:0d:40:90:82:0a:0e:81:2c:d8:8f:82:f3: f8:2a:d9:77:b9:07:01:f8:ca:6f:e2:e9:fc:23:f9: 2b:e3:b6:fb:4d:97:3e:83:3d:cd:0c:20:c6:e6:65: 52:8b:1a:3c:bf:4f:e7:95:aa:9c:e5:1d:b6:97:f8: 04:50:bf:b9:a7:f6:54:db:ee:b5:1b:16:9b:2a:eb: 55:13:91:c1:13:32:d0:d7:8e:2a:23:d2:d5:a7:29: b8:05:a7:a9:43:5c:81:07:f7:22:1d:84:62:28:94: 93:5f:1d:ee:0f:b9:ba:e3:12:a3:2b:13:2e:ff:46: 2c:a1:3c:fb:f9:fd:53:c4:c6:48:f0:27:6f:c6:55: 80:ae:76:c5:30:be:3f:2c:92:2d:65:29:83:67:84: 8f:dd:70:10:93:4c:52:f2:79:ed:29:3b:79:d6:b0: d0:f1:b2:cf:29:46:3f:6a:55:27:1f:2d:3c:f8:e5: 2d:00:fa:06:21:69:e6:28:15:82:a7:23:3d:b3:a3: 56:11:21:da:e6:bf:74:2b:d2:3d:a2:3b:25:cf:de: 91:c4:dd:ae:83:e0:22:94:66:62:74:f0:6b:8e:4c: e3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E3:3E:A2:C0:AD:82:79:C1:ED:57:17:0C:60:43:F8:AA:41:19:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2295f90-4fbf-3d4d-b454-6992830a2568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.173.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:b3:08:61:df:c6:3f:82:be:51:23:1d:02:e9:35:08:d8:25: f7:a0:8c:bb:01:31:07:31:8a:0f:dc:33:6e:57:60:8c:65:99: c2:18:b5:00:c4:1b:b4:1d:fc:84:fc:37:ef:99:5c:d4:76:fa: 65:d2:48:d6:e8:dc:42:5e:61:95:fd:1e:7b:b7:cb:1e:31:4e: ce:cc:e5:30:b2:84:4e:d9:9c:fa:82:d6:8d:4a:95:64:b6:df: c9:fd:ed:c9:d7:6c:fa:36:7f:44:13:f4:61:be:bf:40:b6:4b: 30:ab:c3:fa:82:f4:35:a8:bb:3d:8f:71:32:f3:35:46:28:b6: 99:75:7b:3a:e5:fe:7b:38:f7:f9:c5:01:bf:42:42:84:08:ef: e1:a4:b2:e0:5d:a8:f9:6d:39:73:49:ef:74:41:c9:05:a0:2e: e1:76:f0:15:2e:0f:c0:8d:39:8d:46:6d:d4:7d:33:f8:9c:9a: 0a:e9:e9:0a:2a:db:f0:7d:98:12:2e:9f:f9:1f:c8:bd:53:ad: 1f:d9:6a:61:36:d6:ae:15:de:8d:2a:2a:a6:5c:a2:33:8f:7e: 44:93:7e:53:50:4e:8c:af:6a:54:e7:33:68:33:6b:81:2d:7f: 9b:63:13:01:a0:fb:93:eb:5c:2b:86:b9:30:0c:33:8a:c4:59: a5:b5:56:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS7vUNV2REh34F0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk M2NjNjExNzYtNDdjZi00ZDRkLTljNjUtNDExMjI4M2RkODc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfFGGdpiE+hFw3W30ofFyP6WjmkWcM/kRR0u KZnZV7ENQJCCCg6BLNiPgvP4Ktl3uQcB+Mpv4un8I/kr47b7TZc+gz3NDCDG5mVS ixo8v0/nlaqc5R22l/gEUL+5p/ZU2+61GxabKutVE5HBEzLQ144qI9LVpym4Baep Q1yBB/ciHYRiKJSTXx3uD7m64xKjKxMu/0YsoTz7+f1TxMZI8CdvxlWArnbFML4/ LJItZSmDZ4SP3XAQk0xS8nntKTt51rDQ8bLPKUY/alUnHy08+OUtAPoGIWnmKBWC pyM9s6NWESHa5r90K9I9ojslz96RxN2ug+AilGZidPBrjkzjyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvjPqLArYJ5we1XFwxgQ/iqQRn/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjIyOTVmOTAtNGZiZi0z ZDRkLWI0NTQtNjk5MjgzMGEyNTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIq2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6zCGHfxj+CvlEjHQLpNQjYJfegjLsBMQcxig/cM25XYIxlmcIYtQDE G7Qd/IT8N++ZXNR2+mXSSNbo3EJeYZX9Hnu3yx4xTs7M5TCyhE7ZnPqC1o1KlWS2 38n97cnXbPo2f0QT9GG+v0C2SzCrw/qC9DWouz2PcTLzNUYotpl1ezrl/ns49/nF Ab9CQoQI7+GksuBdqPltOXNJ73RByQWgLuF28BUuD8CNOY1GbdR9M/icmgrp6Qoq 2/B9mBIun/kfyL1TrR/ZamE21q4V3o0qKqZcojOPfkSTflNQToyvalTnM2gza4Et f5tjEwGg+5PrXCuGuTAMM4rEWaW1Vik= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:44 2025 by rpki-client