$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f3adbdcc-db51-3cd5-b11e-c6f96c8063b7.roa File: f3adbdcc-db51-3cd5-b11e-c6f96c8063b7.roa (raw, json) Hash identifier: aV0NXTG23QDo/Er2sAvd14MRjEo8Xr2rzYq00KQYYrU= Subject key identifier: 64:63:05:48:65:EC:6A:46:7E:83:08:45:D3:03:B4:D0:0B:4C:D7:11 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BCD8C8308D94DB6F9E0E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f3adbdcc-db51-3cd5-b11e-c6f96c8063b7.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.64.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:cd:8c:83:08:d9:4d:b6:f9:e0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=feb2195b-f1cd-4660-981e-832995c267b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b7:22:11:21:37:e6:bb:d1:cf:de:46:6c:a7: dc:c8:60:a4:11:4a:07:61:53:e0:28:a6:b5:07:d0: 32:fb:47:91:5a:e2:1b:83:2f:5d:60:4a:d0:c2:61: 90:02:29:11:a8:97:63:18:e8:6a:60:11:2c:b2:2d: 51:17:6a:92:18:0e:4a:dd:b6:d8:d2:5c:09:17:7c: 44:d3:a7:c8:32:34:87:f5:a0:c5:5d:75:79:35:04: e9:f2:6b:82:0e:fc:56:59:fb:ad:7b:20:8d:3b:84: 64:36:31:20:74:b0:a9:b4:17:95:96:9b:64:f4:76: e9:c0:e2:0e:90:4a:3d:c9:ac:86:f0:cf:60:df:81: bc:d3:f7:d2:f1:91:90:42:da:16:f8:7d:c3:14:cc: ff:85:57:58:c2:4a:81:93:cc:43:76:bb:65:a4:a0: 9d:1a:41:1b:c8:0f:c1:19:56:4f:83:d9:29:f9:46: 15:37:49:db:a8:a1:99:56:5f:95:8f:b6:3b:c5:2b: 3a:96:8b:38:ed:1b:90:43:6f:6a:10:a7:24:02:a6: 24:58:43:84:91:f6:ab:ec:d8:b2:e2:39:7a:05:cc: 17:84:d0:91:1d:6b:9c:46:6a:47:bc:a0:cd:0b:7d: 3d:47:cf:79:c5:d2:8b:0c:5e:ab:5e:67:e4:5f:00: f0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:63:05:48:65:EC:6A:46:7E:83:08:45:D3:03:B4:D0:0B:4C:D7:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f3adbdcc-db51-3cd5-b11e-c6f96c8063b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.64.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:40:0a:e9:8b:5a:0c:b1:71:df:67:77:24:67:a3:da:2a:96: a8:e4:a3:34:74:a4:36:2e:96:c1:3c:3b:a1:be:da:93:86:1d: 9c:70:ac:b1:ec:2d:d5:79:40:46:82:f3:c9:07:9d:e2:25:9f: 2f:b4:a9:b2:6a:07:df:3c:35:96:83:03:24:16:01:ee:0d:e4: b2:77:f1:60:e8:50:04:81:09:83:ae:25:da:2c:60:f6:9e:ef: 25:ac:53:85:38:7a:40:18:25:51:bb:21:2c:f2:d1:e0:22:73: 34:d6:6d:41:87:bf:fa:d5:d0:0c:b8:6f:d4:5c:fc:b4:19:94: 1e:0d:ae:ee:04:ad:20:ad:b5:5c:8b:c9:cf:a1:cf:36:e9:57: bf:a5:fd:c0:61:81:f8:f5:09:30:c4:36:ae:72:43:34:0b:8b: c7:57:66:7e:32:a4:6e:5c:5b:2f:ec:33:f8:17:3d:21:a4:99: f8:97:3b:b4:5f:82:42:8f:7d:49:03:f6:c3:e4:86:27:12:cd: 0c:20:86:42:58:d9:f8:10:32:0e:f9:bb:82:da:00:0b:63:19: 81:43:53:99:0c:e5:af:90:e4:8e:09:13:b4:1e:00:e9:b2:47: 64:3f:c4:f5:9d:1b:3e:55:79:64:e4:bf:b6:ab:5c:0d:19:78: 30:a1:10:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS82MgwjZTbb54OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZmViMjE5NWItZjFjZC00NjYwLTk4MWUtODMyOTk1YzI2N2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7ciESE35rvRz95GbKfcyGCkEUoHYVPgKKa1 B9Ay+0eRWuIbgy9dYErQwmGQAikRqJdjGOhqYBEssi1RF2qSGA5K3bbY0lwJF3xE 06fIMjSH9aDFXXV5NQTp8muCDvxWWfuteyCNO4RkNjEgdLCptBeVlptk9HbpwOIO kEo9yayG8M9g34G80/fS8ZGQQtoW+H3DFMz/hVdYwkqBk8xDdrtlpKCdGkEbyA/B GVZPg9kp+UYVN0nbqKGZVl+Vj7Y7xSs6los47RuQQ29qEKckAqYkWEOEkfar7Niy 4jl6BcwXhNCRHWucRmpHvKDNC309R895xdKLDF6rXmfkXwDwrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRjBUhl7GpGfoMIRdMDtNALTNcRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjNhZGJkY2MtZGI1MS0z Y2Q1LWIxMWUtYzZmOTZjODA2M2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIkBIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVACumLWgyxcd9ndyRno9oqlqjkozR0pDYulsE8O6G+2pOGHZxwrLHs LdV5QEaC88kHneIlny+0qbJqB988NZaDAyQWAe4N5LJ38WDoUASBCYOuJdosYPae 7yWsU4U4ekAYJVG7ISzy0eAiczTWbUGHv/rV0Ay4b9Rc/LQZlB4Nru4ErSCttVyL yc+hzzbpV7+l/cBhgfj1CTDENq5yQzQLi8dXZn4ypG5cWy/sM/gXPSGkmfiXO7Rf gkKPfUkD9sPkhicSzQwghkJY2fgQMg75u4LaAAtjGYFDU5kM5a+Q5I4JE7QeAOmy R2Q/xPWdGz5VeWTkv7arXA0ZeDChECo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:01 2025 by rpki-client