$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d29fd2f-f996-3286-8bc4-07bc6b52248a.roa File: 1d29fd2f-f996-3286-8bc4-07bc6b52248a.roa (raw, json) Hash identifier: G6daCpCiz1N9Sc/RTGWXT3AyMPskAmWLBNPiHB/LFBI= Subject key identifier: DC:10:90:14:D4:B3:07:81:F4:77:4C:56:D4:40:EB:8A:48:32:6A:D4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848FE1CC2682EF9E306E7B14700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d29fd2f-f996-3286-8bc4-07bc6b52248a.roa Signing time: Mon 24 Feb 2025 20:40:09 +0000 ROA not before: Mon 24 Feb 2025 20:40:09 +0000 ROA not after: Sun 25 May 2025 19:40:09 +0000 asID: 396982 IP address blocks: 34.3.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fe:1c:c2:68:2e:f9:e3:06:e7:b1:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 24 20:40:09 2025 GMT Not After : May 25 19:40:09 2025 GMT Subject: CN=67add8c8-9bda-41a7-aac1-2b703ca3a31e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:82:8e:a1:b6:74:74:04:da:35:5a:93:a6:42: 70:be:ad:36:1f:ba:c7:c9:d2:75:a4:2a:bd:97:47: b1:27:37:6f:33:1b:d6:e7:dd:1f:32:fa:a1:53:04: 39:7f:d3:87:6a:8d:42:58:f5:e1:fc:ea:51:12:10: 90:55:9f:40:a4:01:06:e4:db:a1:0e:50:35:b8:fc: cc:e5:85:68:77:41:d3:86:c9:64:9f:73:51:c5:a5: b3:49:70:c4:0e:6d:c1:39:6a:86:e8:e5:ba:8e:ed: 09:59:d8:72:8c:c5:15:26:48:30:89:24:72:07:bc: a6:21:87:a4:25:9e:bc:22:86:1b:3e:14:9a:e5:a4: 21:f7:40:2a:a7:58:96:ec:6e:85:04:7c:18:3f:0f: f1:73:b0:96:b4:35:c3:ca:86:f0:d9:77:6e:a1:d6: 35:47:f6:a6:54:db:69:8b:c0:1a:e3:a4:dc:c1:4d: 07:8e:f1:5d:38:5b:13:06:3f:81:21:6d:8f:c3:98: 0e:8e:d5:41:7a:65:54:93:5c:fd:9a:19:1e:da:80: 34:a1:9b:e5:3e:76:27:ed:12:db:97:d8:f6:26:65: 0d:36:f9:c3:a9:24:89:9d:f1:12:7f:ea:0f:cb:51: c9:1b:85:78:44:15:a0:b7:26:07:3c:7c:0a:a1:7a: 07:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:10:90:14:D4:B3:07:81:F4:77:4C:56:D4:40:EB:8A:48:32:6A:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d29fd2f-f996-3286-8bc4-07bc6b52248a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:14:fe:de:2a:75:d1:f8:c3:6a:a7:92:d5:7b:17:78:16:1a: a9:d1:b9:63:83:3d:2c:09:86:95:98:e4:01:f9:76:3f:4e:d9: 39:b9:e3:1a:9b:e7:7a:bc:fc:18:7d:83:05:c7:58:71:4b:e7: 64:d1:37:91:d9:38:60:1d:43:ff:d6:76:11:2a:dd:68:9f:a9: 39:21:15:d4:73:e9:0d:0c:fe:cf:87:2a:71:4b:1f:e3:c1:a1: 58:84:cd:f1:93:50:c7:92:1e:67:db:02:9f:20:67:30:d7:64: 0c:5a:55:b2:06:69:35:c1:39:45:7b:0d:4c:16:08:4a:dc:f0: e4:09:3d:b5:45:74:35:d0:35:25:b0:94:5f:57:d5:07:97:41: 3d:cd:93:de:d2:2b:e5:2d:b6:79:0d:d7:1e:1a:b8:28:c7:67: 27:e0:cf:e3:0c:af:6e:10:2d:16:ee:c1:92:15:39:dd:d3:e3: b6:6b:3e:c4:3e:32:ea:38:ab:67:89:4c:61:8b:3d:70:4b:42: f3:55:d5:66:7a:fe:99:b3:be:60:6d:29:05:34:7b:66:59:d0: b3:f3:5c:99:a8:24:d8:03:f2:60:05:8e:24:11:dc:f4:cd:44: b3:8b:e5:99:4a:bd:29:05:5c:68:fc:3b:12:52:09:7f:db:f5: f1:d2:62:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj+HMJoLvnjBuexRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIyNDIwNDAwOVoXDTI1MDUyNTE5NDAwOVowLzEtMCsGA1UEAxMk NjdhZGQ4YzgtOWJkYS00MWE3LWFhYzEtMmI3MDNjYTNhMzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYKOobZ0dATaNVqTpkJwvq02H7rHydJ1pCq9 l0exJzdvMxvW590fMvqhUwQ5f9OHao1CWPXh/OpREhCQVZ9ApAEG5NuhDlA1uPzM 5YVod0HThslkn3NRxaWzSXDEDm3BOWqG6OW6ju0JWdhyjMUVJkgwiSRyB7ymIYek JZ68IoYbPhSa5aQh90Aqp1iW7G6FBHwYPw/xc7CWtDXDyobw2XduodY1R/amVNtp i8Aa46TcwU0HjvFdOFsTBj+BIW2Pw5gOjtVBemVUk1z9mhke2oA0oZvlPnYn7RLb l9j2JmUNNvnDqSSJnfESf+oPy1HJG4V4RBWgtyYHPHwKoXoHwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwQkBTUsweB9HdMVtRA64pIMmrUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWQyOWZkMmYtZjk5Ni0z Mjg2LThiYzQtMDdiYzZiNTIyNDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIgPWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwU/t4qddH4w2qnktV7F3gWGqnRuWODPSwJhpWY5AH5dj9O2Tm54xqb 53q8/Bh9gwXHWHFL52TRN5HZOGAdQ//WdhEq3WifqTkhFdRz6Q0M/s+HKnFLH+PB oViEzfGTUMeSHmfbAp8gZzDXZAxaVbIGaTXBOUV7DUwWCErc8OQJPbVFdDXQNSWw lF9X1QeXQT3Nk97SK+UttnkN1x4auCjHZyfgz+MMr24QLRbuwZIVOd3T47ZrPsQ+ Muo4q2eJTGGLPXBLQvNV1WZ6/pmzvmBtKQU0e2ZZ0LPzXJmoJNgD8mAFjiQR3PTN RLOL5ZlKvSkFXGj8OxJSCX/b9fHSYuA= -----END CERTIFICATE-----Generated at Sat Apr 26 19:11:02 2025 by rpki-client