$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3be2fd1b-ec09-346a-8459-60b5003eb551.roa File: 3be2fd1b-ec09-346a-8459-60b5003eb551.roa (raw, json) Hash identifier: p1U92tpLwl7iYLSM1zwWumazoGFbUSKgyUiKlyii/L4= Subject key identifier: 41:01:1B:80:CC:5A:D6:D3:77:82:EB:41:0D:9D:38:D3:D8:DD:27:CA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784CB55EC3BAA24E1091740 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3be2fd1b-ec09-346a-8459-60b5003eb551.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.76.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:cb:55:ec:3b:aa:24:e1:09:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=7f5c0f45-b0a7-41ef-bccd-a890ac752a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:44:0d:71:62:a1:17:7b:26:73:60:ce:4c:56: 1b:61:1c:83:d8:ea:0c:ea:0f:a0:85:55:2d:0b:e2: 27:e4:a5:da:39:41:a9:b6:95:09:38:0c:86:22:3a: ab:52:3e:10:03:3e:4f:4d:bc:69:4a:d8:e2:14:de: 82:1c:5f:b6:77:e5:52:a1:2c:0c:f7:dd:8a:24:9b: a8:62:20:4c:5d:bc:d1:74:7c:9f:6b:4e:a1:e2:2b: 3f:2d:10:30:c6:c8:91:cf:0a:65:4e:7c:89:75:f1: 00:ae:59:0a:88:15:33:8f:21:c6:45:eb:1c:34:82: 95:10:93:75:5c:71:35:05:be:3b:59:f3:56:c9:dc: 09:1f:3c:ed:30:c5:c3:5f:98:b5:8b:a4:6f:f8:96: 03:3a:5b:69:55:30:3e:68:c3:f3:8b:6a:26:99:40: c2:e6:cb:f9:ce:34:83:88:c8:01:f6:af:b4:3d:34: 64:fd:e2:c8:12:e9:69:05:4c:88:5a:5c:51:60:f4: b3:fb:ab:c6:b8:b3:3c:b6:d0:d6:22:60:2a:aa:ee: 70:9b:52:5d:1d:f0:f1:65:0f:e8:c0:e6:65:d5:91: 53:a9:74:83:8a:4e:2c:5b:3a:ac:0a:b3:ff:4b:5f: 14:ff:c6:6f:9b:46:96:b9:48:c4:2a:9b:e6:03:c9: 0f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:01:1B:80:CC:5A:D6:D3:77:82:EB:41:0D:9D:38:D3:D8:DD:27:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3be2fd1b-ec09-346a-8459-60b5003eb551.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.76.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:7c:17:d5:72:dd:77:3b:d6:01:e5:e5:72:94:6b:91:4d:b6: a9:20:94:05:19:8c:e3:b0:e7:10:73:17:41:68:35:04:40:9a: 1d:e8:69:4a:6f:b3:86:99:7a:f6:34:f8:78:eb:ea:29:78:13: 2a:f7:27:6e:ad:f4:43:d6:05:94:d4:7f:7d:f9:62:00:d5:b8: 5c:81:e9:b3:15:25:7d:81:df:1b:9c:1f:5e:9e:d1:2c:0b:7b: 00:60:b8:2b:cf:c5:9e:a1:73:d8:61:cd:c8:4b:75:f6:83:18: dc:2e:d0:a3:c6:80:cf:33:30:d5:23:0f:69:36:75:9d:84:18: 10:60:3d:b1:62:3a:f5:a1:f1:2d:c7:c9:36:cb:c6:40:b0:b7: 8f:87:be:6f:08:25:00:a6:16:39:97:c6:8c:89:e2:d7:2f:9c: 54:18:99:10:dc:76:17:bc:90:94:c8:ea:83:67:08:cb:76:ac: 62:03:9c:3e:0a:a6:c5:8a:fc:b9:57:b0:00:01:57:88:2a:18: 05:67:e5:66:e5:ba:b2:9d:40:d3:40:61:17:4b:9a:40:c6:11: 7f:83:e7:c2:98:05:07:d0:9d:15:55:c3:b8:d0:b8:a3:63:ff: 33:82:a4:ba:84:be:c8:bd:af:00:85:b5:e9:5e:88:51:64:41: 53:0e:8a:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMtV7DuqJOEJF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk N2Y1YzBmNDUtYjBhNy00MWVmLWJjY2QtYTg5MGFjNzUyYTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkQNcWKhF3smc2DOTFYbYRyD2OoM6g+ghVUt C+In5KXaOUGptpUJOAyGIjqrUj4QAz5PTbxpStjiFN6CHF+2d+VSoSwM992KJJuo YiBMXbzRdHyfa06h4is/LRAwxsiRzwplTnyJdfEArlkKiBUzjyHGRescNIKVEJN1 XHE1Bb47WfNWydwJHzztMMXDX5i1i6Rv+JYDOltpVTA+aMPzi2ommUDC5sv5zjSD iMgB9q+0PTRk/eLIEulpBUyIWlxRYPSz+6vGuLM8ttDWImAqqu5wm1JdHfDxZQ/o wOZl1ZFTqXSDik4sWzqsCrP/S18U/8Zvm0aWuUjEKpvmA8kPywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEBG4DMWtbTd4LrQQ2dONPY3SfKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2JlMmZkMWItZWMwOS0z NDZhLTg0NTktNjBiNTAwM2ViNTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkwwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFt8F9Vy3Xc71gHl5XKUa5FNtqkglAUZjOOw5xBzF0FoNQRAmh3oaUpv s4aZevY0+Hjr6il4Eyr3J26t9EPWBZTUf335YgDVuFyB6bMVJX2B3xucH16e0SwL ewBguCvPxZ6hc9hhzchLdfaDGNwu0KPGgM8zMNUjD2k2dZ2EGBBgPbFiOvWh8S3H yTbLxkCwt4+Hvm8IJQCmFjmXxoyJ4tcvnFQYmRDcdhe8kJTI6oNnCMt2rGIDnD4K psWK/LlXsAABV4gqGAVn5WblurKdQNNAYRdLmkDGEX+D58KYBQfQnRVVw7jQuKNj /zOCpLqEvsi9rwCFteleiFFkQVMOinA= -----END CERTIFICATE-----Generated at Sun Apr 27 03:39:08 2025 by rpki-client