$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0c57a7a7-6898-36fe-ac33-cc1884ecdb0d.roa File: 0c57a7a7-6898-36fe-ac33-cc1884ecdb0d.roa (raw, json) Hash identifier: YdVfry3/8CKjvXDUUR3PpVdRxNhwQoAd1ZvwklZrbmw= Subject key identifier: 31:BD:D4:8E:C6:D4:37:42:64:1F:8A:A8:15:64:BF:7B:3F:6A:79:2E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784E0319C80D589C8D34C00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0c57a7a7-6898-36fe-ac33-cc1884ecdb0d.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.71.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e0:31:9c:80:d5:89:c8:d3:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=27dc34fa-c612-44da-85e7-bd1ea290231a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:07:a7:68:fc:62:3e:84:d9:ab:de:77:05:98: ec:aa:96:93:be:6c:4f:e7:61:e9:c8:ca:a1:ed:36: 42:60:02:81:6f:77:86:aa:f4:a8:41:35:6e:61:57: 3e:7b:63:06:04:c5:58:73:dc:ad:4e:0d:e2:56:3f: 97:41:b2:bb:28:62:7e:63:72:dd:d6:6d:25:a1:26: 0d:88:a1:83:12:31:c6:9c:19:33:0d:3f:82:aa:6a: a3:72:27:75:06:c2:f0:c8:7f:f6:12:a7:e2:ee:0a: 30:91:ed:42:34:4c:85:23:66:3c:8b:4d:5d:8f:49: d9:a5:8d:7e:db:7a:27:50:0c:c6:86:23:db:96:6a: 62:9c:83:5b:d6:cf:e3:b6:f6:e7:44:e7:32:af:ba: 82:86:39:7b:fe:b8:90:de:24:22:14:63:32:e9:0d: 38:93:8d:25:6a:af:f6:cf:71:01:40:ea:be:d2:46: e0:04:07:37:5f:8c:38:90:86:a5:92:12:4b:a4:55: d8:22:ac:81:d7:57:48:47:8a:ae:a4:dd:ad:21:cd: a5:92:4c:e5:b9:cf:83:ad:40:f3:16:5a:eb:9b:da: f6:ca:ae:d9:86:f9:a8:d6:33:c8:d1:da:ff:f7:21: e6:ee:d2:fc:bb:d4:c0:ef:92:3c:df:f1:0c:3f:e2: da:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:BD:D4:8E:C6:D4:37:42:64:1F:8A:A8:15:64:BF:7B:3F:6A:79:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0c57a7a7-6898-36fe-ac33-cc1884ecdb0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.71.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:67:7b:23:4a:4a:23:ce:d3:2f:cf:f1:c7:0b:83:2a:f0:70: c7:e8:7a:6a:7a:c1:82:49:a8:b3:e6:14:40:4d:83:eb:be:93: 4a:1c:2b:c3:f3:d3:5c:49:27:b7:a6:13:26:d0:fa:10:c4:57: 3f:e0:c1:f4:42:99:c8:43:02:fe:ff:fe:62:cd:b2:ee:61:38: 4e:a9:8d:3f:4e:24:cf:47:c3:17:23:28:ee:8a:4d:cf:5b:ae: d3:57:0e:10:d8:7c:0a:48:a9:45:5b:d0:e7:54:70:21:1c:7b: 53:e9:7c:07:cb:2c:90:85:ee:12:2e:6a:45:d7:b7:f2:67:7e: 2a:28:b2:67:8e:a4:ae:76:18:a2:3a:78:59:5b:82:9d:0e:9f: 2c:ee:aa:72:3e:b3:35:58:8a:5d:e6:23:05:3a:e8:96:c0:78: 3a:ce:da:81:15:9d:3e:f8:4b:fd:ae:97:f4:04:b1:2b:5a:17: dd:1e:b8:59:8a:19:17:55:cf:b3:84:8e:77:93:f4:a9:4d:ab: e3:2b:b7:8a:67:ca:2f:8b:e4:6b:d4:7c:1a:f5:1a:0b:52:f1: 99:ca:3b:5f:e8:64:9c:d3:82:d4:15:10:85:fa:01:4c:01:98: 4a:2b:f9:1a:1e:bf:cf:bf:72:7c:26:1f:d9:f8:f5:ee:2f:29: a6:68:9c:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOAxnIDVicjTTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MjdkYzM0ZmEtYzYxMi00NGRhLTg1ZTctYmQxZWEyOTAyMzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowenaPxiPoTZq953BZjsqpaTvmxP52HpyMqh 7TZCYAKBb3eGqvSoQTVuYVc+e2MGBMVYc9ytTg3iVj+XQbK7KGJ+Y3Ld1m0loSYN iKGDEjHGnBkzDT+Cqmqjcid1BsLwyH/2Eqfi7gowke1CNEyFI2Y8i01dj0nZpY1+ 23onUAzGhiPblmpinINb1s/jtvbnROcyr7qChjl7/riQ3iQiFGMy6Q04k40laq/2 z3EBQOq+0kbgBAc3X4w4kIalkhJLpFXYIqyB11dIR4qupN2tIc2lkkzluc+DrUDz Flrrm9r2yq7Zhvmo1jPI0dr/9yHm7tL8u9TA75I83/EMP+La1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDG91I7G1DdCZB+KqBVkv3s/ankuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGM1N2E3YTctNjg5OC0z NmZlLWFjMzMtY2MxODg0ZWNkYjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkeQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJneyNKSiPO0y/P8ccLgyrwcMfoemp6wYJJqLPmFEBNg+u+k0ocK8Pz 01xJJ7emEybQ+hDEVz/gwfRCmchDAv7//mLNsu5hOE6pjT9OJM9HwxcjKO6KTc9b rtNXDhDYfApIqUVb0OdUcCEce1PpfAfLLJCF7hIuakXXt/JnfioosmeOpK52GKI6 eFlbgp0OnyzuqnI+szVYil3mIwU66JbAeDrO2oEVnT74S/2ul/QEsStaF90euFmK GRdVz7OEjneT9KlNq+Mrt4pnyi+L5GvUfBr1GgtS8ZnKO1/oZJzTgtQVEIX6AUwB mEor+Roev8+/cnwmH9n49e4vKaZonIY= -----END CERTIFICATE-----Generated at Sat Apr 26 19:11:22 2025 by rpki-client