$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1b076a1a-01d6-3ad3-b100-bfbca7092b14.roa File: 1b076a1a-01d6-3ad3-b100-bfbca7092b14.roa (raw, json) Hash identifier: UqmK17ZW+33Jn5LX8TBpj6emHtVXokdHZFfnDgM195E= Subject key identifier: FF:82:7B:1A:0F:7C:06:E7:E3:A3:F4:15:38:A2:7E:AE:9B:C4:BC:89 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784C8CF2DD41CF506218050 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1b076a1a-01d6-3ad3-b100-bfbca7092b14.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.90.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:c8:cf:2d:d4:1c:f5:06:21:80:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=af2cdb01-8ab8-4fcf-a43f-20cea427e9cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:91:06:70:c1:b7:63:7c:fc:e5:bd:40:41:fe: 3b:45:d2:5d:9e:62:00:aa:0a:5e:4d:2f:e2:59:b9: 13:ab:cd:52:0f:7f:55:1b:9d:32:90:8a:8d:96:4f: b4:1f:a0:8a:a4:84:b0:ff:d3:5d:5c:44:43:cd:fc: 20:c3:ef:ce:11:03:f7:f8:3e:8d:5a:26:04:d9:33: 74:e5:25:9a:0a:95:07:13:6a:3f:c5:d7:90:8c:53: 47:5a:df:91:8d:65:ff:ba:62:03:24:46:8e:8a:d5: c8:31:90:43:55:b0:e1:d4:ac:22:78:d2:18:9b:af: 3a:e5:32:dc:88:fd:5d:ba:0a:32:2b:dc:82:b7:b0: 2d:43:43:21:b0:91:65:d0:47:11:e5:02:1a:b6:d1: ec:7b:1a:b9:72:8b:c7:1f:7d:ce:03:9c:3d:f6:9d: cb:9d:30:5c:f7:19:23:ed:1d:0c:cb:40:5a:e2:d2: aa:40:ca:e4:1c:dd:bb:af:dd:e4:54:d2:6d:f3:33: dd:35:46:4b:76:6e:23:60:a9:7d:71:4b:8d:5c:e9: 9a:7d:03:69:f8:4c:d5:98:1c:a5:94:5e:5a:3d:77: 20:8f:62:8d:ca:d3:00:75:e2:2e:e4:6e:c6:7d:78: 29:c9:67:f6:5c:64:be:24:44:2c:5e:5f:9d:50:b6: 03:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:82:7B:1A:0F:7C:06:E7:E3:A3:F4:15:38:A2:7E:AE:9B:C4:BC:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1b076a1a-01d6-3ad3-b100-bfbca7092b14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.90.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:c5:31:cd:6d:96:6c:1e:25:cd:b4:d2:9a:8a:e4:35:8a:cd: cb:c0:0b:81:b1:84:7a:c3:44:f4:bc:6c:f6:14:f9:c1:fc:f7: 49:e5:a1:8f:5e:f7:d7:8b:b3:78:ba:2b:96:73:5e:55:98:e1: 9d:5d:7c:fb:6b:ab:3a:73:75:ea:48:c2:b2:93:e8:c3:c3:39: b6:87:62:6c:a4:47:5f:a3:92:c4:2f:b8:34:1b:7a:75:3d:27: 64:f0:67:ad:c4:d2:40:18:5f:1b:b5:46:0c:53:82:2a:98:34: 15:64:a1:19:73:a7:09:ce:be:01:80:78:3e:d2:ca:f6:61:7d: 8e:04:53:d1:32:d6:e5:b6:8c:61:b6:7d:61:60:19:ad:3d:32: 0d:07:5f:67:1e:16:90:6d:45:19:c5:27:5b:1b:46:f9:9d:cb: b0:55:44:2a:83:92:f3:cc:4f:2e:a1:7b:72:85:91:cb:68:75: af:9e:ca:db:9f:b7:2d:5f:99:9d:c6:44:43:27:b2:92:84:97: 8f:2c:cf:10:cc:ea:7e:ea:5b:6f:65:08:ad:3d:0e:77:b2:9e: 20:e3:72:7d:0c:fd:57:8b:63:84:54:b4:16:8f:37:54:09:61: 76:ab:e7:0c:5d:b6:8e:d2:51:5f:dd:71:30:e5:d3:e1:a9:44: 87:79:92:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMjPLdQc9QYhgFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YWYyY2RiMDEtOGFiOC00ZmNmLWE0M2YtMjBjZWE0MjdlOWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZEGcMG3Y3z85b1AQf47RdJdnmIAqgpeTS/i WbkTq81SD39VG50ykIqNlk+0H6CKpISw/9NdXERDzfwgw+/OEQP3+D6NWiYE2TN0 5SWaCpUHE2o/xdeQjFNHWt+RjWX/umIDJEaOitXIMZBDVbDh1KwieNIYm6865TLc iP1dugoyK9yCt7AtQ0MhsJFl0EcR5QIattHsexq5covHH33OA5w99p3LnTBc9xkj 7R0My0Ba4tKqQMrkHN27r93kVNJt8zPdNUZLdm4jYKl9cUuNXOmafQNp+EzVmByl lF5aPXcgj2KNytMAdeIu5G7GfXgpyWf2XGS+JEQsXl+dULYDyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+CexoPfAbn46P0FTiifq6bxLyJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWIwNzZhMWEtMDFkNi0z YWQzLWIxMDAtYmZiY2E3MDkyYjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIloQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLFMc1tlmweJc200pqK5DWKzcvAC4GxhHrDRPS8bPYU+cH890nloY9e 99eLs3i6K5ZzXlWY4Z1dfPtrqzpzdepIwrKT6MPDObaHYmykR1+jksQvuDQbenU9 J2TwZ63E0kAYXxu1RgxTgiqYNBVkoRlzpwnOvgGAeD7SyvZhfY4EU9Ey1uW2jGG2 fWFgGa09Mg0HX2ceFpBtRRnFJ1sbRvmdy7BVRCqDkvPMTy6he3KFkctoda+eytuf ty1fmZ3GREMnspKEl48szxDM6n7qW29lCK09DneyniDjcn0M/VeLY4RUtBaPN1QJ YXar5wxdto7SUV/dcTDl0+GpRId5kpc= -----END CERTIFICATE-----Generated at Sat Apr 26 18:36:32 2025 by rpki-client