$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35c73c0f-5a56-35db-aec9-f816488f7467.roa File: 35c73c0f-5a56-35db-aec9-f816488f7467.roa (raw, json) Hash identifier: HYxK5BDMK6e9Y+u9h4ODTpG/TTxWnq6arQoBNEzpwI8= Subject key identifier: E7:0A:2C:06:F5:AA:6D:2E:80:A9:7D:88:12:22:AE:DF:D8:B3:01:14 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784FC7AFC2BB1290670ADF8 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35c73c0f-5a56-35db-aec9-f816488f7467.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.97.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:fc:7a:fc:2b:b1:29:06:70:ad:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=09100103-2bd1-484b-b200-192bd92aa7dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e0:a1:ad:af:38:d8:f7:02:43:41:f5:e6:3c: 63:b2:9c:15:38:50:1f:22:ed:43:f5:cc:f6:d2:18: 45:65:b8:d8:2e:88:1e:45:60:f5:e1:b7:fa:ee:5c: 89:34:76:f6:4c:0d:e9:af:08:e9:d5:f0:19:4e:61: 0e:34:c7:9b:e8:33:b2:5a:83:79:ea:2f:56:f6:64: 5c:4e:56:be:18:ba:23:01:65:2e:b2:d4:fc:1c:de: 5f:a9:78:91:30:1b:ce:b8:d3:6c:e8:ee:91:6a:0d: 6e:0c:65:d4:2c:f9:d4:03:eb:07:24:51:86:c4:bb: bc:15:9b:76:0c:77:3a:91:79:62:1a:ef:22:f0:78: 09:77:cd:dd:af:06:b5:c8:c0:7d:b6:aa:8b:f1:c6: ec:eb:2c:f9:15:d7:f8:05:d4:81:02:dc:4b:f0:13: 22:70:4b:48:5d:40:f0:c2:8c:76:7c:8c:57:3e:47: e7:9f:d5:40:6b:0d:75:41:e8:aa:17:c7:07:ef:69: a5:d7:f9:ef:5e:7b:ff:0b:9c:b7:01:53:74:ca:b7: 1e:88:d0:76:06:55:93:8a:ea:7f:9d:86:6f:52:06: 74:ce:35:5f:c8:fb:d9:fa:1c:1e:37:7c:08:40:bb: 12:ec:97:69:49:95:9c:84:a5:b1:94:f9:ef:0a:da: 0d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:0A:2C:06:F5:AA:6D:2E:80:A9:7D:88:12:22:AE:DF:D8:B3:01:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35c73c0f-5a56-35db-aec9-f816488f7467.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.97.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:15:49:44:33:d8:00:68:0d:ea:f9:a9:be:3d:c4:39:19:eb: 7f:31:b4:26:ca:40:d1:91:f5:15:25:76:41:81:0c:dd:31:9e: 9f:f1:d0:fc:2b:38:3c:f1:6c:46:cc:82:09:0d:07:d3:1a:90: 4a:da:82:1d:5e:ec:c7:aa:c7:53:a4:fe:86:a0:1a:53:54:d3: ae:69:bf:1d:6a:51:36:ce:7c:88:67:e4:3c:0d:80:08:fa:9f: ae:32:a9:08:49:21:d1:23:ab:ea:3f:40:31:8a:29:b9:a8:f4: be:13:60:e8:87:3f:2f:39:1d:2f:81:94:84:49:eb:19:72:36: a4:19:13:f1:04:57:18:1b:07:67:76:90:68:1e:f2:f7:5b:59: 1d:a9:4d:7e:bd:f9:03:96:06:4c:aa:66:c8:3a:a3:93:fb:96: 42:86:41:5c:7c:2c:14:39:75:08:78:69:a7:28:e2:9d:22:6e: 06:8c:f7:44:1b:a6:e3:92:73:76:ac:b5:9a:cd:86:9a:59:7a: 51:61:24:99:be:dd:11:5a:68:01:48:c5:40:80:81:58:d9:24: 55:eb:69:23:af:f1:92:d3:cb:d2:e0:50:a8:55:91:ea:85:54: b4:f6:ca:31:da:e5:12:a4:b5:2c:8f:e5:a6:34:00:bd:46:12: 0f:17:b9:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPx6/CuxKQZwrfgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MDkxMDAxMDMtMmJkMS00ODRiLWIyMDAtMTkyYmQ5MmFhN2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+Chra842PcCQ0H15jxjspwVOFAfIu1D9cz2 0hhFZbjYLogeRWD14bf67lyJNHb2TA3prwjp1fAZTmEONMeb6DOyWoN56i9W9mRc Tla+GLojAWUustT8HN5fqXiRMBvOuNNs6O6Rag1uDGXULPnUA+sHJFGGxLu8FZt2 DHc6kXliGu8i8HgJd83drwa1yMB9tqqL8cbs6yz5Fdf4BdSBAtxL8BMicEtIXUDw wox2fIxXPkfnn9VAaw11QeiqF8cH72ml1/nvXnv/C5y3AVN0yrceiNB2BlWTiup/ nYZvUgZ0zjVfyPvZ+hweN3wIQLsS7JdpSZWchKWxlPnvCtoNTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcKLAb1qm0ugKl9iBIirt/YswEUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzVjNzNjMGYtNWE1Ni0z NWRiLWFlYzktZjgxNjQ4OGY3NDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkVSUQz2ABoDer5qb49xDkZ638xtCbKQNGR9RUldkGBDN0xnp/x0Pwr ODzxbEbMggkNB9MakEragh1e7Meqx1Ok/oagGlNU065pvx1qUTbOfIhn5DwNgAj6 n64yqQhJIdEjq+o/QDGKKbmo9L4TYOiHPy85HS+BlIRJ6xlyNqQZE/EEVxgbB2d2 kGge8vdbWR2pTX69+QOWBkyqZsg6o5P7lkKGQVx8LBQ5dQh4aaco4p0ibgaM90Qb puOSc3astZrNhppZelFhJJm+3RFaaAFIxUCAgVjZJFXraSOv8ZLTy9LgUKhVkeqF VLT2yjHa5RKktSyP5aY0AL1GEg8Xua4= -----END CERTIFICATE-----Generated at Sat Apr 26 16:06:18 2025 by rpki-client