$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ca8bc7d-e124-30c9-b965-8e12cd94e52e.roa File: 3ca8bc7d-e124-30c9-b965-8e12cd94e52e.roa (raw, json) Hash identifier: HQDfRFgJ7x6mI35K3B/9jYkh8QTK78mDOalbGI7H58g= Subject key identifier: E5:7F:F7:6E:64:97:5D:29:91:D2:E0:25:FE:7F:9B:8C:BD:B0:78:4D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784E2B37C07BE0D0F224E80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ca8bc7d-e124-30c9-b965-8e12cd94e52e.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.70.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e2:b3:7c:07:be:0d:0f:22:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=072ec318-bba9-4bfe-aed4-c0b1f2fec83e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:78:30:ae:e0:47:c2:ac:34:bd:fe:1a:11:ba: 06:ec:b7:7e:66:47:82:83:54:3c:7c:b6:ba:77:59: 5f:d1:5f:78:bb:d1:f1:b6:c2:ed:61:dc:df:ca:ba: 37:fa:56:b9:c9:13:fb:63:70:09:29:45:a0:49:40: ba:a9:df:2e:3d:59:b1:05:fe:a5:18:d7:6c:88:e5: ca:b0:a0:9e:3b:3d:13:b7:81:5a:d7:ba:04:73:fe: 63:bc:89:59:a5:e2:57:97:42:99:24:73:2a:94:39: 79:a6:76:4e:b5:93:65:31:0f:e6:4c:8e:6a:79:b5: 25:6a:2c:d8:43:12:ca:ce:3a:20:4d:85:35:6f:28: 64:ed:83:72:ad:42:d5:d0:2c:b0:50:f4:44:d0:f0: 40:34:be:60:7a:17:e5:68:ee:28:28:60:2b:81:7b: 67:b9:a4:79:3a:7f:9c:8b:48:73:31:11:b8:5d:21: 87:6d:4b:9b:44:4a:96:ec:e5:b4:63:bc:ae:32:4f: 8b:13:44:0e:a3:ad:9d:9d:96:e1:c0:dd:5b:86:c9: ab:1e:bb:49:36:5f:41:4d:8b:3b:9c:69:64:c0:bf: bb:1d:87:5d:b2:d9:cf:e4:d7:6c:c0:f5:9f:26:29: ee:fe:6b:0e:9f:a1:3d:a0:17:47:f8:99:45:c6:77: c5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:7F:F7:6E:64:97:5D:29:91:D2:E0:25:FE:7F:9B:8C:BD:B0:78:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3ca8bc7d-e124-30c9-b965-8e12cd94e52e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.70.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:e1:0f:cb:4e:34:74:1e:b0:8b:ea:db:29:bc:40:e2:10:61: 2b:32:10:ed:94:c6:ba:b7:db:6f:e7:b3:c2:af:76:16:55:fa: a1:af:67:43:6e:77:c4:99:89:f4:e8:20:8e:00:79:d8:54:d8: b9:af:02:c8:42:9b:d5:c3:60:83:51:bb:d5:bb:e8:a7:8e:7a: 02:5d:aa:20:dd:dc:e1:ec:45:e7:8f:f1:13:96:67:2e:de:5d: 2c:81:de:74:17:bc:eb:39:05:40:58:bf:15:87:ab:42:c6:d2: ee:1f:82:78:ce:2f:3f:65:76:4b:83:e8:1f:bb:30:3f:45:21: 10:2f:18:a6:ba:66:4c:16:e6:82:93:08:21:3a:94:58:73:2b: 0e:3d:50:65:f6:09:a5:21:4b:e9:24:c1:70:d4:6b:40:60:c2: 19:14:d3:82:cd:19:ef:57:8a:65:03:29:ab:f0:7c:86:a9:e2: ec:33:02:42:a6:d5:a9:e5:ef:fd:0a:36:c1:3d:5f:cb:ca:9f: a3:14:f7:f3:b8:23:bc:f8:3e:ae:9a:db:03:bf:5a:84:fe:2b: 61:f4:53:2b:4f:94:9b:73:15:e8:8b:89:ad:7c:30:a0:1e:bb: b5:78:e1:cb:46:ac:be:b7:35:3e:6e:b4:05:6f:e5:81:39:79: 7d:1b:28:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOKzfAe+DQ8iToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MDcyZWMzMTgtYmJhOS00YmZlLWFlZDQtYzBiMWYyZmVjODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHgwruBHwqw0vf4aEboG7Ld+ZkeCg1Q8fLa6 d1lf0V94u9HxtsLtYdzfyro3+la5yRP7Y3AJKUWgSUC6qd8uPVmxBf6lGNdsiOXK sKCeOz0Tt4Fa17oEc/5jvIlZpeJXl0KZJHMqlDl5pnZOtZNlMQ/mTI5qebUlaizY QxLKzjogTYU1byhk7YNyrULV0CywUPRE0PBANL5gehflaO4oKGArgXtnuaR5On+c i0hzMRG4XSGHbUubREqW7OW0Y7yuMk+LE0QOo62dnZbhwN1bhsmrHrtJNl9BTYs7 nGlkwL+7HYddstnP5NdswPWfJinu/msOn6E9oBdH+JlFxnfFWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOV/925kl10pkdLgJf5/m4y9sHhNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2NhOGJjN2QtZTEyNC0z MGM5LWI5NjUtOGUxMmNkOTRlNTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDhD8tONHQesIvq2ym8QOIQYSsyEO2Uxrq322/ns8KvdhZV+qGvZ0Nu d8SZifToII4AedhU2LmvAshCm9XDYINRu9W76KeOegJdqiDd3OHsReeP8ROWZy7e XSyB3nQXvOs5BUBYvxWHq0LG0u4fgnjOLz9ldkuD6B+7MD9FIRAvGKa6ZkwW5oKT CCE6lFhzKw49UGX2CaUhS+kkwXDUa0BgwhkU04LNGe9XimUDKavwfIap4uwzAkKm 1anl7/0KNsE9X8vKn6MU9/O4I7z4Pq6a2wO/WoT+K2H0UytPlJtzFeiLia18MKAe u7V44ctGrL63NT5utAVv5YE5eX0bKJc= -----END CERTIFICATE-----Generated at Sat Apr 26 17:45:45 2025 by rpki-client