$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2c1c513-c47a-37bf-ade0-d57b875c7f81.roa File: f2c1c513-c47a-37bf-ade0-d57b875c7f81.roa (raw, json) Hash identifier: cPAzu2YL9nQ8HZmz1z9qSEZdyaB9APW33/jW/705WQU= Subject key identifier: 68:BE:95:94:3F:C3:32:F7:BA:85:4F:78:F9:6A:F9:86:6C:AC:61:CE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BCE68167490DF598D2680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2c1c513-c47a-37bf-ade0-d57b875c7f81.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.145.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:ce:68:16:74:90:df:59:8d:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=77c3cfb5-0046-45cd-9d21-7d6402359f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:83:f7:8c:86:ab:bd:23:25:25:b4:3a:3f:d3: 29:b2:4c:f5:c6:8e:ed:44:ef:43:41:c2:70:fc:68: b6:e0:ab:14:b3:49:c0:48:dc:34:d8:1f:49:1e:b2: 23:90:00:86:81:6a:24:57:d9:b1:02:ae:0e:7d:35: 2a:03:83:97:ef:d5:9a:67:7f:af:a7:20:aa:9e:28: 91:b3:82:5f:65:f5:11:a3:f5:67:f4:f7:77:d7:d7: 9e:4a:67:d7:3e:42:7d:a5:0d:b1:7d:34:de:3d:78: 1c:73:a7:4f:a0:d3:2e:eb:b0:9f:91:78:7c:46:65: 0b:a6:c1:f0:12:40:a7:37:8e:04:51:da:1e:96:7b: c8:22:fa:77:60:76:61:15:d2:95:50:9a:1f:ec:16: e2:df:d9:3d:99:9f:43:7f:10:e0:48:80:10:c1:d9: d1:95:36:a6:86:c9:64:9c:d4:6f:27:63:f4:dd:44: 43:6d:7f:09:06:d6:98:dc:4e:29:66:6b:05:35:dd: 47:e1:7f:ec:6c:6b:bf:fb:46:80:85:84:33:63:cc: 75:fd:1c:7f:a5:be:b8:a8:a1:70:08:5f:45:c1:41: 73:7b:27:99:c2:93:19:75:39:a4:2d:8f:0d:27:20: d1:ef:4d:5f:1b:61:33:97:0f:9f:83:a9:e6:99:8e: 54:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BE:95:94:3F:C3:32:F7:BA:85:4F:78:F9:6A:F9:86:6C:AC:61:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f2c1c513-c47a-37bf-ade0-d57b875c7f81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.145.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:62:67:6d:2a:cd:42:af:c9:ec:fe:84:0c:0d:02:38:c6:63: 4a:42:2a:70:ee:1e:82:ae:ae:2e:e7:c7:dd:b5:b8:2d:61:e2: 89:53:f8:67:5a:d9:8a:22:a4:b3:9b:a5:60:86:18:94:37:ae: d3:cd:bc:5a:36:50:29:73:d8:6a:42:2b:8a:8e:cb:bc:79:4e: 11:88:3a:7b:9b:ab:9f:6c:34:e3:e0:51:4a:6d:e6:00:15:36: 79:ec:e5:18:8c:a1:c7:02:65:15:a2:cc:6a:93:5e:c5:3e:71: 9d:59:fc:99:8b:cf:88:81:f2:30:ec:99:5b:26:e8:1a:33:fa: 3e:e2:d4:aa:85:5a:64:27:00:51:0c:92:a2:68:0a:44:9a:7a: df:8d:ea:82:2b:58:0e:f2:cd:29:ff:35:06:08:cb:18:c9:05: e9:ed:36:fc:cc:7e:a4:f0:47:4c:a7:32:60:8d:50:2f:3e:e5: ee:06:d5:57:87:ac:bb:a5:20:91:bd:d4:9a:23:67:cc:b3:35: 42:08:88:4b:fa:e0:6e:a4:0d:cb:6a:5b:8d:3d:cd:dc:5e:5b: e9:24:ff:0d:4a:2b:23:1a:c8:0f:13:90:84:c2:8b:b9:02:79: de:94:ed:2f:fd:d3:a0:f9:6c:04:73:4f:47:ad:1a:49:c6:2d: fb:52:8d:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS85oFnSQ31mNJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NzdjM2NmYjUtMDA0Ni00NWNkLTlkMjEtN2Q2NDAyMzU5ZjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4P3jIarvSMlJbQ6P9Mpskz1xo7tRO9DQcJw /Gi24KsUs0nASNw02B9JHrIjkACGgWokV9mxAq4OfTUqA4OX79WaZ3+vpyCqniiR s4JfZfURo/Vn9Pd319eeSmfXPkJ9pQ2xfTTePXgcc6dPoNMu67CfkXh8RmULpsHw EkCnN44EUdoelnvIIvp3YHZhFdKVUJof7Bbi39k9mZ9DfxDgSIAQwdnRlTamhslk nNRvJ2P03URDbX8JBtaY3E4pZmsFNd1H4X/sbGu/+0aAhYQzY8x1/Rx/pb64qKFw CF9FwUFzeyeZwpMZdTmkLY8NJyDR701fG2Ezlw+fg6nmmY5UkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGi+lZQ/wzL3uoVPePlq+YZsrGHOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjJjMWM1MTMtYzQ3YS0z N2JmLWFkZTAtZDU3Yjg3NWM3ZjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJliZ20qzUKvyez+hAwNAjjGY0pCKnDuHoKuri7nx921uC1h4olT+Gda 2YoipLObpWCGGJQ3rtPNvFo2UClz2GpCK4qOy7x5ThGIOnubq59sNOPgUUpt5gAV Nnns5RiMoccCZRWizGqTXsU+cZ1Z/JmLz4iB8jDsmVsm6Boz+j7i1KqFWmQnAFEM kqJoCkSaet+N6oIrWA7yzSn/NQYIyxjJBentNvzMfqTwR0ynMmCNUC8+5e4G1VeH rLulIJG91JojZ8yzNUIIiEv64G6kDctqW409zdxeW+kk/w1KKyMayA8TkITCi7kC ed6U7S/906D5bARzT0etGknGLftSjeQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:07 2025 by rpki-client