$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a565cb9-8927-30c5-a44b-da61e9a33dfe.roa File: 0a565cb9-8927-30c5-a44b-da61e9a33dfe.roa (raw, json) Hash identifier: FvcRjh4KPCDtDVkND+AcFDU89HooNT3WAKNl1v8C7sA= Subject key identifier: 4E:FF:E0:1D:D2:91:51:F1:0F:F9:5B:6F:33:0C:B4:45:AE:50:F2:33 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785232059F6E52F59494F00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a565cb9-8927-30c5-a44b-da61e9a33dfe.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 34.98.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:23:20:59:f6:e5:2f:59:49:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=52e90065-6cd9-4e5f-b9f9-d843ba505ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9f:09:b4:4a:20:d0:37:58:0e:09:85:90:8d: 77:6d:42:88:33:3b:0d:c3:b4:f8:c8:97:6d:27:d3: ac:48:f0:4e:22:1c:7d:57:6c:44:86:d4:38:3c:1e: ee:d0:e4:c6:7d:bd:a5:17:50:bd:cb:9f:46:19:b1: 55:22:f7:90:ff:17:0c:6b:85:7a:60:e4:59:4e:ec: 05:87:23:9e:2e:90:fb:f0:ee:c3:a3:68:62:af:be: 13:27:b9:33:53:a8:b5:4a:64:76:0e:d2:9b:58:1b: f1:fe:68:c8:17:0d:d8:69:88:c0:95:89:27:e0:ef: 8c:9c:c9:10:43:2f:4a:8e:83:0f:63:e2:88:cf:63: 69:bf:89:af:28:14:26:66:c4:59:ba:4c:7d:92:0f: f6:bb:15:13:72:01:b7:78:9d:4c:f6:3e:07:92:6a: fb:70:e5:40:b9:a0:3d:a4:61:20:51:b9:f6:07:a4: 5c:51:af:12:c0:5d:03:70:49:ad:08:4b:b8:ad:0d: 88:49:26:16:fa:07:67:95:c3:3f:3c:6d:b5:23:87: e7:47:9c:95:a5:11:f0:f0:ab:dc:d4:6e:09:62:6e: d0:87:e0:c4:d6:20:b1:ac:c0:6f:9c:30:b5:7e:1e: aa:5b:b2:3c:77:3a:5d:44:15:a4:fb:ac:56:51:fc: c6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:FF:E0:1D:D2:91:51:F1:0F:F9:5B:6F:33:0C:B4:45:AE:50:F2:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a565cb9-8927-30c5-a44b-da61e9a33dfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.98.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:6c:02:46:b6:86:64:4f:b4:66:57:ce:5d:d6:42:57:40:4d: ce:63:52:3e:07:ee:99:22:7d:42:65:c0:01:a0:f4:34:23:ba: b0:f5:c9:79:3b:54:e2:db:47:d4:38:b2:d2:6c:fb:60:f7:d8: ca:76:c8:7e:11:2a:fd:c5:96:8f:f0:26:49:24:76:92:78:04: 2b:6f:58:19:69:d5:ee:26:d6:3f:3c:73:a2:65:d4:9f:65:7c: a1:c8:6c:8e:82:ea:1a:5a:e7:3a:71:e8:16:e0:ad:25:91:50: 65:e1:14:b7:9b:58:0c:ab:89:fd:9a:04:18:4d:f3:d4:fd:76: 0b:1e:3d:10:e7:3b:50:3f:33:8a:cc:46:5a:5f:de:2a:4b:f6: 16:e9:c7:4e:f0:5e:7a:8b:09:c5:95:8f:c3:d6:bf:b2:5f:3c: f2:59:73:39:12:9b:7d:89:22:32:9b:fb:e4:7b:c1:61:4b:51: b9:11:17:a6:44:05:2b:ce:90:95:1c:d5:39:3b:1e:36:04:76: 03:5b:0d:4e:5d:8b:77:1f:7f:c8:d9:1c:9f:c5:ea:2c:57:3f: 37:2e:7a:e1:51:a5:3b:4c:b6:43:c6:37:86:87:c2:3e:d8:e2: 67:bf:70:51:3e:9e:12:79:dc:ae:ed:d1:9f:79:fc:d7:08:6a: a8:4c:ed:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhSMgWfblL1lJTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NTJlOTAwNjUtNmNkOS00ZTVmLWI5ZjktZDg0M2JhNTA1YWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3p8JtEog0DdYDgmFkI13bUKIMzsNw7T4yJdt J9OsSPBOIhx9V2xEhtQ4PB7u0OTGfb2lF1C9y59GGbFVIveQ/xcMa4V6YORZTuwF hyOeLpD78O7Do2hir74TJ7kzU6i1SmR2DtKbWBvx/mjIFw3YaYjAlYkn4O+MnMkQ Qy9KjoMPY+KIz2Npv4mvKBQmZsRZukx9kg/2uxUTcgG3eJ1M9j4Hkmr7cOVAuaA9 pGEgUbn2B6RcUa8SwF0DcEmtCEu4rQ2ISSYW+gdnlcM/PG21I4fnR5yVpRHw8Kvc 1G4JYm7Qh+DE1iCxrMBvnDC1fh6qW7I8dzpdRBWk+6xWUfzGJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7/4B3SkVHxD/lbbzMMtEWuUPIzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGE1NjVjYjktODkyNy0z MGM1LWE0NGItZGE2MWU5YTMzZGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAImKUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANsAka2hmRPtGZXzl3WQldATc5jUj4H7pkifUJlwAGg9DQjurD1yXk7 VOLbR9Q4stJs+2D32Mp2yH4RKv3Flo/wJkkkdpJ4BCtvWBlp1e4m1j88c6Jl1J9l fKHIbI6C6hpa5zpx6BbgrSWRUGXhFLebWAyrif2aBBhN89T9dgsePRDnO1A/M4rM Rlpf3ipL9hbpx07wXnqLCcWVj8PWv7JfPPJZczkSm32JIjKb++R7wWFLUbkRF6ZE BSvOkJUc1Tk7HjYEdgNbDU5di3cff8jZHJ/F6ixXPzcueuFRpTtMtkPGN4aHwj7Y 4me/cFE+nhJ53K7t0Z95/NcIaqhM7Sg= -----END CERTIFICATE-----Generated at Sun Apr 27 09:49:22 2025 by rpki-client