$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23b34022-7309-3fb3-98b5-d6af05f76e80.roa File: 23b34022-7309-3fb3-98b5-d6af05f76e80.roa (raw, json) Hash identifier: oNQNjMQyCBGIt2CHrFNmzBOzFvBHbJ0o2gybQ3tAgAU= Subject key identifier: D3:C3:95:2E:63:C1:12:58:E5:58:AD:19:CE:3F:1D:C3:1C:61:D3:50 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BB6C5D3272AF829B5BB440 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23b34022-7309-3fb3-98b5-d6af05f76e80.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 34.118.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:6c:5d:32:72:af:82:9b:5b:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=78bd064a-6f9b-4f34-97f7-6ee388b22d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ce:fe:17:0b:7e:e2:65:c6:61:0a:b0:77:97: c0:c5:a9:ac:76:74:53:24:b2:cb:d0:e6:6b:71:fe: d2:f7:7c:0d:71:70:06:dd:59:6a:e1:d8:81:5d:9d: 6b:aa:bb:5e:79:16:38:d7:8b:d7:8e:bd:f6:33:0e: c9:b5:05:0c:4e:21:55:b6:80:ef:4a:f9:93:6d:1d: c1:94:82:fa:51:ce:1d:f1:cc:8a:c5:1c:0a:79:8d: d2:6c:66:d3:b7:10:45:00:84:57:13:2b:07:f2:4b: d5:dc:aa:52:8a:87:f5:28:aa:53:f4:35:ad:29:69: 0f:44:17:3c:1e:f3:59:61:31:1d:53:50:d7:df:27: 8d:de:b8:1f:73:da:1c:39:c4:15:61:0c:98:50:50: 14:2f:d2:21:91:48:78:2f:84:63:33:97:1f:96:81: 24:7f:1d:af:5c:f3:8c:00:80:65:55:0b:88:2e:05: 9f:96:61:d4:4c:28:e0:d5:34:60:d5:64:df:18:a9: 8b:de:bc:fd:18:9a:40:0d:10:5a:9e:57:d5:31:9c: 22:4f:9c:b0:45:97:70:a2:1c:95:e6:a5:87:dc:5a: b6:f0:b4:69:e2:a6:1e:f1:34:ff:2d:eb:da:e4:6d: fc:89:bd:bf:06:cc:a3:8d:62:2e:69:1c:f4:e5:21: b1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C3:95:2E:63:C1:12:58:E5:58:AD:19:CE:3F:1D:C3:1C:61:D3:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23b34022-7309-3fb3-98b5-d6af05f76e80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.118.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:e1:ad:8d:08:d0:e5:eb:ab:43:ce:e7:90:ad:49:28:28:d1: ad:6f:23:b0:45:e1:2c:15:02:9b:be:46:b6:f4:99:6b:2b:05: 19:7f:09:36:d2:dd:20:e7:4e:2e:a2:e0:14:75:0c:d5:2e:3e: 2f:c1:f4:de:c3:96:bb:fd:e5:e0:74:9a:95:17:cf:e3:b7:78: af:b2:9b:f7:01:db:88:50:e2:c0:af:9b:3e:77:f9:2d:31:fb: 20:48:ee:37:ac:82:38:04:84:2f:f3:2a:57:db:0e:d6:24:00: dd:68:da:77:9f:90:08:3b:bd:51:d9:a6:1b:e5:fa:00:28:c8: 00:cd:07:34:aa:a5:b1:ed:52:e2:80:e5:25:67:53:82:d2:36: f7:f4:dd:dc:bb:0d:c8:10:4e:60:cf:23:52:92:eb:95:c3:d6: 87:9d:40:5d:c2:f3:75:b6:c0:8e:e2:75:e9:d8:00:63:c3:36: 86:28:f9:99:83:64:5d:e6:91:c9:b3:1f:b5:0f:1c:db:ae:c4: dd:d7:eb:7d:5e:07:c8:d9:30:19:1e:52:43:5a:67:d0:15:a5: a3:df:32:3b:ec:0d:a4:68:25:d6:0b:00:d5:72:a6:fb:38:af: f1:32:76:1d:be:b5:18:e5:75:d1:1d:84:42:67:6b:79:42:65: 1b:bb:70:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2xdMnKvgptbtEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NzhiZDA2NGEtNmY5Yi00ZjM0LTk3ZjctNmVlMzg4YjIyZDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxc7+Fwt+4mXGYQqwd5fAxamsdnRTJLLL0OZr cf7S93wNcXAG3Vlq4diBXZ1rqrteeRY414vXjr32Mw7JtQUMTiFVtoDvSvmTbR3B lIL6Uc4d8cyKxRwKeY3SbGbTtxBFAIRXEysH8kvV3KpSiof1KKpT9DWtKWkPRBc8 HvNZYTEdU1DX3yeN3rgfc9ocOcQVYQyYUFAUL9IhkUh4L4RjM5cfloEkfx2vXPOM AIBlVQuILgWflmHUTCjg1TRg1WTfGKmL3rz9GJpADRBanlfVMZwiT5ywRZdwohyV 5qWH3Fq28LRp4qYe8TT/Leva5G38ib2/BsyjjWIuaRz05SGx4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPDlS5jwRJY5VitGc4/HcMcYdNQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjNiMzQwMjItNzMwOS0z ZmIzLTk4YjUtZDZhZjA1Zjc2ZTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDInbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzhrY0I0OXrq0PO55CtSSgo0a1vI7BF4SwVApu+Rrb0mWsrBRl/CTbS 3SDnTi6i4BR1DNUuPi/B9N7Dlrv95eB0mpUXz+O3eK+ym/cB24hQ4sCvmz53+S0x +yBI7jesgjgEhC/zKlfbDtYkAN1o2nefkAg7vVHZphvl+gAoyADNBzSqpbHtUuKA 5SVnU4LSNvf03dy7DcgQTmDPI1KS65XD1oedQF3C83W2wI7idenYAGPDNoYo+ZmD ZF3mkcmzH7UPHNuuxN3X631eB8jZMBkeUkNaZ9AVpaPfMjvsDaRoJdYLANVypvs4 r/Eydh2+tRjlddEdhEJna3lCZRu7cDI= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:34 2025 by rpki-client