$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/39dabb02-44d9-345e-b19c-dffd9b308e03.roa File: 39dabb02-44d9-345e-b19c-dffd9b308e03.roa (raw, json) Hash identifier: gfvX5246l4a2t8UAy6lLOopqzMGq9uPRaymZ5ZXtfPs= Subject key identifier: 05:28:35:AF:F5:6F:D9:D2:9D:7E:3E:63:10:D0:F2:26:22:B0:D5:BF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784E3FFC10FB0A51130C5A8 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/39dabb02-44d9-345e-b19c-dffd9b308e03.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.86.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e3:ff:c1:0f:b0:a5:11:30:c5:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=a6402ec3-fb96-4ffd-8e8a-dca195b4a315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1c:b8:68:f4:f9:6e:6a:e9:d7:6d:0a:ad:fe: 17:e6:41:58:d6:d0:d0:93:11:dd:c5:91:7e:6a:8a: eb:b2:ba:c4:5d:57:8f:e8:e2:d1:21:39:72:61:0d: 64:d7:d4:2d:4d:42:dc:55:37:1c:1a:85:96:49:8a: 74:78:ea:09:24:f1:a1:7a:67:2f:7c:7a:ee:89:bb: 43:9d:14:be:74:69:1c:69:49:8c:11:62:48:f2:b6: 52:8d:c8:05:ab:94:5c:7b:bb:0e:9d:6d:f8:60:9e: 19:b8:89:8f:bd:76:6c:07:6e:c0:ca:f5:8a:e1:f2: 35:7a:d7:15:b8:e1:b6:62:fd:c6:b3:33:ea:df:4c: 79:f8:43:a0:0b:07:41:d0:06:80:39:b6:88:86:75: 6a:c6:16:2f:38:87:7f:6e:5e:86:0b:a0:ec:ee:38: c1:74:81:33:61:f1:d2:61:ca:41:2b:64:35:6d:da: 27:96:cf:5a:25:f7:92:7f:62:c5:5a:14:07:27:7a: 4d:03:c4:0e:eb:a9:30:19:30:41:00:e2:ff:1c:a4: 74:b8:79:92:b6:01:21:9e:55:85:5c:22:a4:10:fa: 2d:ec:30:17:01:6e:f5:be:7a:70:19:c4:5e:21:ac: d8:6c:22:74:cb:01:b6:1d:5b:b0:f4:cb:d0:c0:2b: 23:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:28:35:AF:F5:6F:D9:D2:9D:7E:3E:63:10:D0:F2:26:22:B0:D5:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/39dabb02-44d9-345e-b19c-dffd9b308e03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.86.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:a9:b3:61:26:73:87:f2:53:ba:35:97:03:f2:c8:24:d5:3a: 6b:a1:70:68:48:af:43:1e:f1:96:49:76:6a:c4:b3:b6:ca:c0: 21:4e:12:ce:28:d7:69:14:ad:d6:6b:ef:c7:0c:ec:3f:b8:ee: 6b:29:46:7b:3a:88:7b:2b:17:ad:6f:57:b4:0e:ef:97:15:bf: b2:c4:7a:ad:d4:27:dc:20:fd:0c:ac:2f:e6:27:d8:ce:3a:e7: 86:a0:5b:f0:6c:70:1c:d5:b7:b2:c5:f6:4b:5e:15:c3:5a:73: 91:2b:46:9b:e8:1f:0c:7b:2a:60:70:9e:80:d8:2f:c6:9a:72: 12:d7:c9:8c:43:b3:4d:99:d3:ab:27:58:40:d0:3b:e8:cf:3b: 66:f1:f7:d2:a9:65:9f:c4:9f:ba:a6:35:b0:3c:09:e8:83:f4: 40:05:ce:a9:aa:6e:d3:ae:c0:a0:39:94:77:36:55:b3:46:a3: 1f:80:ab:0c:01:d0:1e:59:55:bd:f6:25:3c:54:cb:e0:d0:cc: 32:c6:7f:88:7f:e9:02:ef:79:f0:94:50:7b:e9:d1:56:e4:c8: 2b:03:6b:c8:fb:6d:f8:c0:18:d2:e0:32:01:df:36:13:a6:ae: 21:e2:a6:f9:c8:50:36:8a:26:da:dd:96:5c:24:1d:05:a3:97: 5c:58:4c:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOP/wQ+wpREwxagwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YTY0MDJlYzMtZmI5Ni00ZmZkLThlOGEtZGNhMTk1YjRhMzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhy4aPT5bmrp120Krf4X5kFY1tDQkxHdxZF+ aorrsrrEXVeP6OLRITlyYQ1k19QtTULcVTccGoWWSYp0eOoJJPGhemcvfHruibtD nRS+dGkcaUmMEWJI8rZSjcgFq5Rce7sOnW34YJ4ZuImPvXZsB27AyvWK4fI1etcV uOG2Yv3GszPq30x5+EOgCwdB0AaAObaIhnVqxhYvOId/bl6GC6Ds7jjBdIEzYfHS YcpBK2Q1bdonls9aJfeSf2LFWhQHJ3pNA8QO66kwGTBBAOL/HKR0uHmStgEhnlWF XCKkEPot7DAXAW71vnpwGcReIazYbCJ0ywG2HVuw9MvQwCsj8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUoNa/1b9nSnX4+YxDQ8iYisNW/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzlkYWJiMDItNDRkOS0z NDVlLWIxOWMtZGZmZDliMzA4ZTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlagMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmps2Emc4fyU7o1lwPyyCTVOmuhcGhIr0Me8ZZJdmrEs7bKwCFOEs4o 12kUrdZr78cM7D+47mspRns6iHsrF61vV7QO75cVv7LEeq3UJ9wg/QysL+Yn2M46 54agW/BscBzVt7LF9kteFcNac5ErRpvoHwx7KmBwnoDYL8aachLXyYxDs02Z06sn WEDQO+jPO2bx99KpZZ/En7qmNbA8CeiD9EAFzqmqbtOuwKA5lHc2VbNGox+AqwwB 0B5ZVb32JTxUy+DQzDLGf4h/6QLvefCUUHvp0VbkyCsDa8j7bfjAGNLgMgHfNhOm riHipvnIUDaKJtrdllwkHQWjl1xYTBg= -----END CERTIFICATE-----Generated at Sat Apr 26 17:44:23 2025 by rpki-client