$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0fe9311e-fede-30e2-8d1e-5ab3f9ff14d3.roa File: 0fe9311e-fede-30e2-8d1e-5ab3f9ff14d3.roa (raw, json) Hash identifier: Ht2wagNqn0D0u6gpm+t0CbsVynDHZ0uLytpx14hPW/U= Subject key identifier: 09:1A:77:D1:DD:E7:72:2F:7A:46:2C:AF:3C:71:12:93:DC:32:A4:53 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785337A749B024063FC7E40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0fe9311e-fede-30e2-8d1e-5ab3f9ff14d3.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.141.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:33:7a:74:9b:02:40:63:fc:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=3c4f3fc2-5977-4694-b753-b9ad6eb16c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fd:44:a8:2a:6b:b5:66:d7:14:7d:67:74:c6: ff:24:41:71:7f:2a:9c:0d:8b:6d:0a:ac:8b:94:b8: a4:66:d5:36:a1:7d:a9:22:b8:d5:80:c0:85:95:78: 8c:0a:13:f3:92:79:ad:0e:11:19:d1:9a:03:b6:50: 16:02:d9:dc:1f:99:37:9e:96:6c:74:7b:92:5e:44: 51:0e:ae:03:51:b8:cb:e1:a8:d0:92:5f:c6:04:12: d6:fe:7b:f8:04:84:9e:9d:c7:5d:6f:fc:28:01:0c: 45:62:64:5e:d6:90:63:7e:98:5e:00:d4:6c:5b:95: bf:c1:d4:e6:f7:05:ea:f2:a8:d0:83:7a:1c:99:84: 89:f7:89:21:9b:19:02:94:bd:10:cd:8f:f5:80:b4: 67:09:43:f8:a6:60:43:e5:5b:c0:85:6a:a2:0e:eb: ce:93:fc:b9:b3:9d:e3:15:d0:7e:5e:2b:1b:99:22: f2:4a:72:36:d6:15:bd:7f:e1:4f:d1:a0:56:5c:15: 44:9c:72:79:dd:e7:2e:57:26:c3:7b:bf:00:45:32: 5f:6d:c5:4a:10:54:90:ef:5c:41:3e:e2:1f:4b:f2: a5:2c:f6:e5:39:97:18:6f:24:ee:9e:6a:bc:92:b5: f5:b7:2e:d4:e8:2e:c0:03:d4:a5:f9:64:0b:31:76: 59:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:1A:77:D1:DD:E7:72:2F:7A:46:2C:AF:3C:71:12:93:DC:32:A4:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0fe9311e-fede-30e2-8d1e-5ab3f9ff14d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.141.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:02:27:89:0e:05:69:f9:36:de:0e:7d:df:53:93:e1:2b:48: 41:eb:68:fd:3f:eb:b5:89:15:e7:94:41:70:42:a7:44:6b:14: ed:59:f8:fc:56:61:83:87:73:e1:d1:2f:f5:3f:2a:ea:ea:43: 82:e1:24:fe:e3:cb:5f:d9:6f:b2:54:41:2e:5c:42:d4:f3:91: 29:e2:a9:8a:33:ec:96:7a:2d:61:1e:52:5b:fb:81:e1:9b:bc: 52:44:57:a4:65:c6:b5:2c:17:9a:6c:54:5f:1d:1a:e0:fd:47: 80:d8:ba:dd:99:97:48:8c:91:d8:1a:ea:ba:63:d7:a4:51:c0: e6:e6:79:0a:2e:a8:27:a9:e8:05:6f:c7:ba:30:94:d3:5b:d7: 10:b6:fb:20:b4:1a:39:30:1e:2e:5f:52:38:8c:2f:74:51:a7: 76:ba:94:2d:15:d3:b3:79:ca:7c:27:d2:6b:76:ca:9e:3a:2e: 1e:89:94:a9:de:3e:e7:eb:55:97:83:74:ce:fb:f4:a9:53:7d: 32:12:52:50:dd:54:4d:42:b8:24:8e:d9:6c:0b:fd:23:fc:18: 7b:71:a7:0e:80:08:7c:be:cd:ba:30:26:85:f8:cf:45:56:1f: 79:fe:41:69:fe:01:e2:74:fa:01:c4:57:d0:13:06:7b:64:f2: 8f:5d:fc:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTN6dJsCQGP8fkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk M2M0ZjNmYzItNTk3Ny00Njk0LWI3NTMtYjlhZDZlYjE2YzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/1EqCprtWbXFH1ndMb/JEFxfyqcDYttCqyL lLikZtU2oX2pIrjVgMCFlXiMChPzknmtDhEZ0ZoDtlAWAtncH5k3npZsdHuSXkRR Dq4DUbjL4ajQkl/GBBLW/nv4BISencddb/woAQxFYmRe1pBjfpheANRsW5W/wdTm 9wXq8qjQg3ocmYSJ94khmxkClL0QzY/1gLRnCUP4pmBD5VvAhWqiDuvOk/y5s53j FdB+XisbmSLySnI21hW9f+FP0aBWXBVEnHJ53ecuVybDe78ARTJfbcVKEFSQ71xB PuIfS/KlLPblOZcYbyTunmq8krX1ty7U6C7AA9Sl+WQLMXZZvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkad9Hd53IvekYsrzxxEpPcMqRTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGZlOTMxMWUtZmVkZS0z MGUyLThkMWUtNWFiM2Y5ZmYxNGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIo0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4CJ4kOBWn5Nt4Ofd9Tk+ErSEHraP0/67WJFeeUQXBCp0RrFO1Z+PxW YYOHc+HRL/U/KurqQ4LhJP7jy1/Zb7JUQS5cQtTzkSniqYoz7JZ6LWEeUlv7geGb vFJEV6RlxrUsF5psVF8dGuD9R4DYut2Zl0iMkdga6rpj16RRwObmeQouqCep6AVv x7owlNNb1xC2+yC0GjkwHi5fUjiML3RRp3a6lC0V07N5ynwn0mt2yp46Lh6JlKne PufrVZeDdM779KlTfTISUlDdVE1CuCSO2WwL/SP8GHtxpw6ACHy+zbowJoX4z0VW H3n+QWn+AeJ0+gHEV9ATBntk8o9d/HM= -----END CERTIFICATE-----Generated at Sat Apr 26 19:07:54 2025 by rpki-client