$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8925c65-6075-3fe9-a89b-d2bb250c7fa6.roa File: f8925c65-6075-3fe9-a89b-d2bb250c7fa6.roa (raw, json) Hash identifier: 7VZSI1nEUmuZIEfFzl2HtRtbynZ6XN17+jOIDoYDTSE= Subject key identifier: 7A:81:B7:73:FB:FA:30:F1:98:86:CC:3B:0F:10:9D:EA:88:45:03:52 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BB28D494D399488346E80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8925c65-6075-3fe9-a89b-d2bb250c7fa6.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 34.66.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:b2:8d:49:4d:39:94:88:34:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=b4ef5b54-015f-4633-91d1-b089af1bf769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e7:ad:9c:66:b6:7a:ba:d1:be:22:c0:2e:31: d7:af:d0:65:1d:e9:3e:7e:5d:fe:54:09:14:02:d6: 95:fb:09:a9:31:b2:50:35:4e:0d:e7:2b:80:99:ae: 9a:fa:f6:bf:c0:02:66:1a:26:02:8a:ba:50:4f:7a: b1:12:30:b2:e6:5e:ec:2e:de:c4:67:a3:df:e0:7e: 45:4b:8f:f9:35:7f:11:e8:0f:0f:41:ca:ff:93:86: 0f:f4:00:c9:bf:14:72:7e:f3:64:67:4e:1a:7e:38: 7c:c6:ab:b6:de:05:1f:bd:b0:e1:f0:82:8a:e5:9d: 92:be:89:1e:9c:74:c3:6c:0b:e0:60:07:04:f8:92: a3:6e:68:98:c0:03:be:20:06:21:72:cb:b8:28:d7: f2:80:fa:8c:e5:24:44:30:05:d5:4d:81:da:f9:05: d7:e9:b8:ea:99:82:16:8f:08:cd:f2:52:dd:db:7b: 01:e0:8b:f1:4e:a2:14:0a:a2:1a:17:e8:4e:82:8e: be:84:e4:4c:81:0c:ae:ed:f3:d9:bd:2e:1b:a0:77: c2:60:e0:c1:ef:9f:2b:5d:06:6a:e3:38:74:3e:7f: 99:04:a7:9c:d4:00:bd:e3:78:90:d9:9a:53:2c:e5: 61:69:cb:bd:73:46:19:22:0e:6b:c1:e0:77:1e:af: b6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:81:B7:73:FB:FA:30:F1:98:86:CC:3B:0F:10:9D:EA:88:45:03:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f8925c65-6075-3fe9-a89b-d2bb250c7fa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.66.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:73:24:88:86:0e:98:64:60:9a:e1:dd:aa:cb:3d:60:82:d4: 31:14:63:dd:5c:de:dc:00:56:b0:f3:48:e4:48:a8:0d:d1:eb: e7:80:1b:a6:9e:f3:7e:b2:b5:43:b2:ef:3d:c5:d8:84:e3:16: 48:b5:e3:cc:71:cc:7e:58:53:41:c1:df:8e:7c:fd:9d:44:40: e4:69:32:64:a5:35:2f:cb:60:07:9c:39:41:d3:1a:e3:02:d9: 7b:cd:ff:b5:70:0e:31:ec:e8:75:61:63:a0:21:88:70:3a:c7: 38:5d:ea:89:37:12:51:a2:d4:4c:4c:89:c5:40:28:cb:16:cd: ed:5e:45:d7:04:5d:9a:b9:84:02:cc:b6:0a:c6:9a:82:33:af: 90:bd:ab:09:3a:ca:86:05:8b:60:a9:c9:47:20:0d:73:4b:5a: 93:65:d1:34:35:3a:3a:5e:82:1b:fc:77:38:97:cb:c4:7d:33: 8f:ba:3d:73:8e:42:8b:5f:4b:5e:4f:de:85:37:22:3b:84:4a: 7c:84:d1:62:a4:7e:87:ee:e3:ed:dc:20:2e:ab:cf:cc:47:16: 68:b3:99:11:1c:8a:85:9d:9a:fb:0c:42:9c:ed:e6:b8:4b:00: a1:e2:62:2d:bb:9a:ba:96:22:0c:c5:8d:ac:44:b2:4a:96:20: 0b:7f:6f:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS7KNSU05lIg0boAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YjRlZjViNTQtMDE1Zi00NjMzLTkxZDEtYjA4OWFmMWJmNzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOetnGa2errRviLALjHXr9BlHek+fl3+VAkU AtaV+wmpMbJQNU4N5yuAma6a+va/wAJmGiYCirpQT3qxEjCy5l7sLt7EZ6Pf4H5F S4/5NX8R6A8PQcr/k4YP9ADJvxRyfvNkZ04afjh8xqu23gUfvbDh8IKK5Z2Svoke nHTDbAvgYAcE+JKjbmiYwAO+IAYhcsu4KNfygPqM5SREMAXVTYHa+QXX6bjqmYIW jwjN8lLd23sB4IvxTqIUCqIaF+hOgo6+hORMgQyu7fPZvS4boHfCYODB758rXQZq 4zh0Pn+ZBKec1AC943iQ2ZpTLOVhacu9c0YZIg5rweB3Hq+20wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqBt3P7+jDxmIbMOw8QneqIRQNSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjg5MjVjNjUtNjA3NS0z ZmU5LWE4OWItZDJiYjI1MGM3ZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlzJIiGDphkYJrh3arLPWCC1DEUY91c3twAVrDzSORIqA3R6+eAG6ae 836ytUOy7z3F2ITjFki148xxzH5YU0HB3458/Z1EQORpMmSlNS/LYAecOUHTGuMC 2XvN/7VwDjHs6HVhY6AhiHA6xzhd6ok3ElGi1ExMicVAKMsWze1eRdcEXZq5hALM tgrGmoIzr5C9qwk6yoYFi2CpyUcgDXNLWpNl0TQ1Ojpeghv8dziXy8R9M4+6PXOO QotfS15P3oU3IjuESnyE0WKkfofu4+3cIC6rz8xHFmizmREcioWdmvsMQpzt5rhL AKHiYi27mrqWIgzFjaxEskqWIAt/b4g= -----END CERTIFICATE-----Generated at Fri Apr 4 21:40:23 2025 by rpki-client