$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22709356-d3d9-3948-8c21-3b595f02ca7a.roa File: 22709356-d3d9-3948-8c21-3b595f02ca7a.roa (raw, json) Hash identifier: nbQ5Sh8zwqPByimrMao70uPVkUOMIa6DTxTdUb1VEHQ= Subject key identifier: 5F:4A:99:C2:14:49:DF:F7:2C:1F:1C:C5:E7:CF:4D:A2:1D:54:AA:04 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784FB8D07405A5110F3A600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22709356-d3d9-3948-8c21-3b595f02ca7a.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.95.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:fb:8d:07:40:5a:51:10:f3:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=dc91f090-5509-4718-9a96-64a62e84610b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:19:f6:4d:ad:bd:c7:c7:8b:b9:fb:da:ed:80: e8:b9:b8:44:f3:d0:5e:35:14:04:ca:b8:f0:e1:81: 87:dc:6d:d9:88:aa:24:e7:bd:7c:e4:18:f0:82:f5: 3a:db:e6:f7:22:83:a4:0f:cc:d8:88:e1:96:63:42: 32:22:c1:0c:cd:0a:b3:5c:db:78:f1:9b:33:fb:e7: 5a:85:a0:11:8f:f0:a7:3f:07:cc:0b:7e:65:06:54: 1d:ab:11:38:fe:6a:d8:d1:73:1e:2a:af:f9:a8:c6: ab:06:9f:e4:72:32:8b:7c:04:26:26:74:78:a7:43: 5e:c6:47:b2:a1:70:6a:e7:a5:fd:00:b2:eb:43:78: ce:7c:73:bf:55:3f:ab:94:6d:2c:a6:4c:82:83:cf: 25:70:7f:8c:59:0f:4f:bb:d7:25:47:73:99:48:d7: c4:ee:54:25:77:7f:2d:d6:9e:8e:ae:a0:44:f6:f9: 0e:26:3f:86:0d:7d:3d:6b:e2:02:87:7b:a5:8b:6f: 2f:07:20:80:97:6d:95:56:1d:22:1e:f6:a5:09:42: 7e:27:9f:cc:dd:2b:a7:4e:17:b1:77:b5:12:84:e6: b8:67:27:50:80:b2:59:f7:de:1e:61:4c:7b:47:76: ba:89:e2:a8:a8:6d:dd:e6:23:58:59:e8:ce:e4:6a: 06:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4A:99:C2:14:49:DF:F7:2C:1F:1C:C5:E7:CF:4D:A2:1D:54:AA:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22709356-d3d9-3948-8c21-3b595f02ca7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.95.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:34:46:0a:56:6a:ff:f5:62:7a:60:89:67:6e:a1:b0:c6:d7: 69:41:93:af:21:54:50:fb:f0:ae:a5:da:fd:d9:92:2e:65:d1: 8d:da:87:2e:b8:39:b3:e2:25:85:8b:75:ba:60:ac:97:fe:d7: 65:1d:01:ca:c9:a2:7d:db:40:fc:d9:1e:f5:64:08:9c:1b:4f: b7:06:b1:df:91:5c:d4:c2:af:f2:1e:cd:35:e3:22:7d:1e:2f: 4e:f5:01:ad:e3:9d:49:32:de:69:35:47:86:e4:c7:e5:f6:cd: 63:fe:9f:01:ca:9d:72:8f:3c:8f:ad:7d:01:54:21:de:b0:4c: 34:c5:d9:b1:81:53:22:79:ba:48:09:1b:3d:b2:38:29:64:d2: ab:f8:b0:86:87:c6:c3:89:5b:14:fb:97:8c:e3:8a:09:9d:ee: de:3f:2d:6d:7a:7b:d3:5f:b7:04:73:f9:8f:d7:a4:5d:53:ae: 7b:83:ab:f6:8f:18:0e:8b:c7:16:ba:c6:fd:29:eb:3f:94:04: ea:14:1c:02:6d:82:63:30:13:9c:0c:b7:48:22:b4:4a:bf:df: fe:18:b9:d1:42:3f:c0:64:29:97:99:e0:f4:3d:c2:fc:ab:7b: 8d:87:07:09:02:4b:9d:e4:c5:09:ed:e7:1c:d7:0d:48:39:4d: 6a:3d:a1:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPuNB0BaURDzpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZGM5MWYwOTAtNTUwOS00NzE4LTlhOTYtNjRhNjJlODQ2MTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBn2Ta29x8eLufva7YDoubhE89BeNRQEyrjw 4YGH3G3ZiKok57185BjwgvU62+b3IoOkD8zYiOGWY0IyIsEMzQqzXNt48Zsz++da haARj/CnPwfMC35lBlQdqxE4/mrY0XMeKq/5qMarBp/kcjKLfAQmJnR4p0Nexkey oXBq56X9ALLrQ3jOfHO/VT+rlG0spkyCg88lcH+MWQ9Pu9clR3OZSNfE7lQld38t 1p6OrqBE9vkOJj+GDX09a+ICh3uli28vByCAl22VVh0iHvalCUJ+J5/M3SunThex d7UShOa4ZydQgLJZ994eYUx7R3a6ieKoqG3d5iNYWejO5GoGhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9KmcIUSd/3LB8cxefPTaIdVKoEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjI3MDkzNTYtZDNkOS0z OTQ4LThjMjEtM2I1OTVmMDJjYTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIl+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHY0RgpWav/1YnpgiWduobDG12lBk68hVFD78K6l2v3Zki5l0Y3ahy64 ObPiJYWLdbpgrJf+12UdAcrJon3bQPzZHvVkCJwbT7cGsd+RXNTCr/IezTXjIn0e L071Aa3jnUky3mk1R4bkx+X2zWP+nwHKnXKPPI+tfQFUId6wTDTF2bGBUyJ5ukgJ Gz2yOClk0qv4sIaHxsOJWxT7l4zjigmd7t4/LW16e9NftwRz+Y/XpF1TrnuDq/aP GA6Lxxa6xv0p6z+UBOoUHAJtgmMwE5wMt0gitEq/3/4YudFCP8BkKZeZ4PQ9wvyr e42HBwkCS53kxQnt5xzXDUg5TWo9odA= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:26 2025 by rpki-client