$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22768f3e-385b-3e74-bbe4-82a1322e7fd7.roa File: 22768f3e-385b-3e74-bbe4-82a1322e7fd7.roa (raw, json) Hash identifier: vy5jAOIliCbQZuC5tkHcSx7CYUpV+peEhhGkIXwOlRQ= Subject key identifier: F0:78:D0:FE:60:F1:68:FF:08:1E:B2:DD:E9:FD:EB:FA:BE:F0:8D:9F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78511C91275AB6CEEE21E60 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22768f3e-385b-3e74-bbe4-82a1322e7fd7.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.66.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:11:c9:12:75:ab:6c:ee:e2:1e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=6013cfdc-a6fb-4f0d-b5cd-593c14695a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ce:7f:93:95:be:00:05:a2:86:46:19:fe:40: 6b:c5:cb:8a:1b:de:63:45:25:a2:ac:72:f2:88:25: 35:d7:93:96:fc:92:1a:60:43:89:0d:4f:13:3c:11: b8:aa:53:ab:fb:fc:29:87:43:23:77:64:e1:20:27: 42:48:85:60:2e:5b:d3:30:f6:25:21:e9:30:43:f0: 3c:9e:bd:56:15:12:8f:82:4e:97:1c:29:43:6d:de: 4d:c5:cc:06:5f:3c:b1:7d:93:2e:04:a3:57:b8:59: e9:ce:7d:14:4c:db:bd:29:b7:99:32:f7:51:9a:d3: 2c:5a:58:e4:37:21:39:8e:a4:69:83:40:a2:97:71: 47:ae:c3:e9:8b:6e:7f:8a:c9:aa:55:30:bf:fb:a5: 9f:cf:5a:30:50:06:86:02:a9:a1:0b:88:32:e4:fb: cf:e9:a7:97:0d:41:d5:cf:b3:3e:fc:2f:e6:c3:be: e5:83:a0:1d:f0:b7:92:6b:ce:19:56:e5:56:2b:8c: 7a:f4:e5:91:3b:ef:f0:bb:f7:71:50:ad:5b:90:23: 1c:19:e1:a9:e0:07:2b:b7:10:ca:39:19:2a:26:d6: 78:fa:e1:c8:db:ef:9e:f1:dd:aa:be:3d:69:42:f5: ff:2d:c2:23:0e:6c:a3:70:c8:08:d1:2f:cd:08:d9: 87:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:78:D0:FE:60:F1:68:FF:08:1E:B2:DD:E9:FD:EB:FA:BE:F0:8D:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22768f3e-385b-3e74-bbe4-82a1322e7fd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.66.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:46:29:e7:58:98:0d:4d:e4:39:2b:d7:8d:ec:9c:c1:a2:5e: 54:6f:4a:0c:79:92:c8:15:db:a5:58:42:a4:e9:32:be:a8:81: de:47:3e:80:53:39:b6:db:ba:db:93:83:2c:b9:24:40:8a:b3: b9:f6:ee:51:60:07:7a:5b:bc:3b:86:20:2a:a8:83:38:e0:a5: f4:f6:b5:6c:b9:e3:7f:66:14:58:e4:bb:b3:d3:dd:65:ab:35: cc:23:b9:01:23:c5:9d:8d:a3:f4:3d:42:99:5a:74:8e:e3:1c: a9:27:b8:2c:c1:93:23:19:2e:ab:de:ee:00:fd:2a:83:7e:cb: 54:77:b6:d6:26:ea:5c:d4:10:b9:9f:da:3b:db:42:20:1b:18: fa:37:76:02:30:4d:fe:54:ec:6c:0a:21:bd:ab:ba:31:93:5d: af:95:6a:78:36:e0:f4:eb:2e:6e:22:61:fa:98:be:8c:ef:43: 50:cd:89:76:0c:3f:07:7e:c5:39:00:db:d0:de:98:df:f2:56: 3e:2f:0e:dc:ba:75:ef:26:0b:8a:a5:05:37:7f:f2:eb:24:0f: a0:8e:6e:56:0d:48:8e:f5:3d:5f:fb:55:6c:04:45:7a:c2:c9: 47:e7:2a:50:e4:44:6e:d7:f0:e4:2d:25:c4:d0:b8:16:81:bc: c6:42:55:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRHJEnWrbO7iHmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NjAxM2NmZGMtYTZmYi00ZjBkLWI1Y2QtNTkzYzE0Njk1YTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyM5/k5W+AAWihkYZ/kBrxcuKG95jRSWirHLy iCU115OW/JIaYEOJDU8TPBG4qlOr+/wph0Mjd2ThICdCSIVgLlvTMPYlIekwQ/A8 nr1WFRKPgk6XHClDbd5NxcwGXzyxfZMuBKNXuFnpzn0UTNu9KbeZMvdRmtMsWljk NyE5jqRpg0Cil3FHrsPpi25/ismqVTC/+6Wfz1owUAaGAqmhC4gy5PvP6aeXDUHV z7M+/C/mw77lg6Ad8LeSa84ZVuVWK4x69OWRO+/wu/dxUK1bkCMcGeGp4AcrtxDK ORkqJtZ4+uHI2++e8d2qvj1pQvX/LcIjDmyjcMgI0S/NCNmHEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPB40P5g8Wj/CB6y3en96/q+8I2fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjI3NjhmM2UtMzg1Yi0z ZTc0LWJiZTQtODJhMTMyMmU3ZmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRGKedYmA1N5Dkr143snMGiXlRvSgx5ksgV26VYQqTpMr6ogd5HPoBT ObbbutuTgyy5JECKs7n27lFgB3pbvDuGICqogzjgpfT2tWy5439mFFjku7PT3WWr NcwjuQEjxZ2No/Q9QpladI7jHKknuCzBkyMZLqve7gD9KoN+y1R3ttYm6lzUELmf 2jvbQiAbGPo3dgIwTf5U7GwKIb2rujGTXa+Vang24PTrLm4iYfqYvozvQ1DNiXYM Pwd+xTkA29DemN/yVj4vDty6de8mC4qlBTd/8uskD6COblYNSI71PV/7VWwERXrC yUfnKlDkRG7X8OQtJcTQuBaBvMZCVew= -----END CERTIFICATE-----Generated at Sat Apr 26 19:12:58 2025 by rpki-client