$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/30fd1a89-99c3-3e4a-ad01-fe76dce02a69.roa File: 30fd1a89-99c3-3e4a-ad01-fe76dce02a69.roa (raw, json) Hash identifier: 4421vYF6GlpQCU5q3w1FgmNVjkgb00gxfhkglKbcvZ0= Subject key identifier: 87:7D:DC:48:3B:29:24:36:32:FE:18:5B:D4:78:D7:8C:32:B0:7C:45 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784FFC457C9EF130662ECC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/30fd1a89-99c3-3e4a-ad01-fe76dce02a69.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.86.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ff:c4:57:c9:ef:13:06:62:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=491493d7-3a54-4e1c-abf1-97f3d94d1b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d2:03:62:6f:ec:d1:07:95:74:ab:0a:47:b7: c0:bf:f4:c1:dc:7e:b3:84:a3:5e:98:e0:f9:a2:b2: 66:16:85:dc:3d:d3:db:0c:24:95:12:3a:5d:dc:ec: 0d:46:fc:1c:86:e6:ef:fd:51:5f:34:9d:bc:ec:5a: a1:6e:99:28:35:e2:9d:4f:c8:6c:06:ea:92:ea:f6: 2d:21:b1:f6:2c:d9:c1:00:7c:8f:c2:73:db:08:dc: 43:b2:97:58:fb:b0:a8:31:eb:f5:62:74:15:f6:ee: 28:93:39:0e:cc:dd:4f:90:bd:39:30:8f:43:17:5a: 57:70:5f:7b:50:00:fd:b9:04:90:c2:11:39:f3:1b: 0f:71:4a:01:82:45:9d:7c:0f:f6:04:7c:14:61:37: 7f:30:40:cd:b5:de:c0:13:c5:3d:11:24:9e:83:59: cb:60:22:7f:6e:35:de:fb:0d:b4:a2:f8:37:b5:ae: ff:8f:38:51:dd:77:5f:e7:a9:70:0a:c2:57:9e:e3: b7:e7:53:ff:9d:52:73:3b:aa:a1:1a:8f:8f:07:6e: 88:eb:ae:ba:39:aa:21:7e:13:e8:cf:93:c2:10:a5: e6:dc:22:ad:66:d4:95:56:b1:c1:1e:b2:a4:fe:f2: b0:0e:b4:59:41:54:2a:51:68:d6:f3:09:e5:67:55: 1e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7D:DC:48:3B:29:24:36:32:FE:18:5B:D4:78:D7:8C:32:B0:7C:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/30fd1a89-99c3-3e4a-ad01-fe76dce02a69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.86.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:85:8d:97:ea:57:b2:3d:3d:fc:60:e0:c4:e4:b7:0c:ad:8c: 28:32:15:4d:da:83:fb:f9:b3:65:e9:92:a0:20:34:1b:bc:b1: 69:e7:fa:1f:51:64:d0:7d:27:a2:1a:a3:4e:a6:d3:1a:da:9c: e5:25:b0:de:cd:50:76:3e:4a:ef:77:d3:9c:1f:b6:33:b8:f0: d2:93:5a:44:ff:5a:26:0c:ac:1c:8e:01:3b:fc:30:21:a2:64: 98:20:57:a9:2b:48:20:f8:7b:b7:10:60:82:61:90:7e:32:47: d1:a6:7a:e1:e4:1a:a7:f5:9e:b0:19:ae:1d:ea:e7:b7:92:91: fb:e3:29:74:2d:4d:c7:f8:bc:94:26:4a:3e:ce:ce:5e:b7:38: c8:a6:36:12:ba:d3:18:04:34:98:f2:29:4d:cd:09:2b:0e:a8: 62:1e:75:07:56:74:5a:e5:a9:19:b8:eb:dd:0f:10:7f:27:d1: 6a:c9:ff:86:89:b1:33:42:41:63:2b:76:32:58:5b:5f:4c:73: 80:c8:8c:a9:54:03:f8:58:6e:91:cd:5e:f2:bd:ef:7b:cc:85: 73:20:d0:20:eb:e4:74:6b:a8:42:5d:52:80:f9:7c:7d:5c:95: 70:38:20:a9:a9:f4:b6:7b:f2:47:fe:19:2f:64:90:63:69:9b: 1e:bd:27:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhP/EV8nvEwZi7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NDkxNDkzZDctM2E1NC00ZTFjLWFiZjEtOTdmM2Q5NGQxYjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNIDYm/s0QeVdKsKR7fAv/TB3H6zhKNemOD5 orJmFoXcPdPbDCSVEjpd3OwNRvwchubv/VFfNJ287FqhbpkoNeKdT8hsBuqS6vYt IbH2LNnBAHyPwnPbCNxDspdY+7CoMev1YnQV9u4okzkOzN1PkL05MI9DF1pXcF97 UAD9uQSQwhE58xsPcUoBgkWdfA/2BHwUYTd/MEDNtd7AE8U9ESSeg1nLYCJ/bjXe +w20ovg3ta7/jzhR3Xdf56lwCsJXnuO351P/nVJzO6qhGo+PB26I6666OaohfhPo z5PCEKXm3CKtZtSVVrHBHrKk/vKwDrRZQVQqUWjW8wnlZ1UefQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFId93Eg7KSQ2Mv4YW9R414wysHxFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzBmZDFhODktOTljMy0z ZTRhLWFkMDEtZmU3NmRjZTAyYTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGFjZfqV7I9Pfxg4MTktwytjCgyFU3ag/v5s2XpkqAgNBu8sWnn+h9R ZNB9J6Iao06m0xranOUlsN7NUHY+Su9305wftjO48NKTWkT/WiYMrByOATv8MCGi ZJggV6krSCD4e7cQYIJhkH4yR9GmeuHkGqf1nrAZrh3q57eSkfvjKXQtTcf4vJQm Sj7Ozl63OMimNhK60xgENJjyKU3NCSsOqGIedQdWdFrlqRm4690PEH8n0WrJ/4aJ sTNCQWMrdjJYW19Mc4DIjKlUA/hYbpHNXvK973vMhXMg0CDr5HRrqEJdUoD5fH1c lXA4IKmp9LZ78kf+GS9kkGNpmx69J3E= -----END CERTIFICATE-----Generated at Sat Apr 26 18:01:09 2025 by rpki-client