$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d0d9783-6f85-3a53-a5fd-efb9543c1c21.roa File: 3d0d9783-6f85-3a53-a5fd-efb9543c1c21.roa (raw, json) Hash identifier: Z8UKUTfD6bQ4ZhyknC7CZPfw7CeIX6jPQDXp/iVrOQs= Subject key identifier: 05:5E:D9:AF:7F:29:F2:1E:DC:38:68:53:E6:A0:B6:32:21:75:CB:B6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785146697B12ED9EB39C680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d0d9783-6f85-3a53-a5fd-efb9543c1c21.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.82.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:14:66:97:b1:2e:d9:eb:39:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=83f0df99-dd02-4c22-bc40-a86b082f5c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1b:ba:13:e6:d0:b3:c2:c1:85:af:61:d5:44: fa:5a:9b:98:9c:16:88:ee:60:9d:74:1e:d0:ac:59: 7b:90:d3:b4:bb:40:9f:5d:b0:82:24:61:e8:59:7f: 5a:7c:7b:09:25:25:aa:28:85:61:d5:51:93:f6:df: 6a:ef:1f:10:7e:0e:3f:d4:c0:fa:fb:81:0f:6e:8b: ff:d4:94:47:4a:3f:1d:60:8b:62:18:c4:c9:02:4b: 61:40:e5:ec:bd:e8:c2:f7:a0:93:eb:5d:5b:aa:aa: de:8e:93:79:ba:65:73:c3:9c:1a:5b:d1:ab:e9:6f: c7:f3:0d:89:07:2c:7c:b1:81:c7:75:2e:5b:c7:88: 8c:71:65:6f:f8:00:d6:37:be:a3:f8:34:6e:b2:8e: e4:3f:71:9e:e2:ed:9a:2d:c6:f0:c0:fc:96:b8:15: b2:66:45:90:cd:ba:8b:59:fa:58:35:27:cf:b9:0d: 28:42:be:06:a2:7b:f9:a3:46:7f:29:d8:2f:c9:fd: ce:6f:9a:71:e2:b0:7c:a7:57:e2:b7:fc:d4:9a:0c: 2b:a7:20:4b:1d:a8:30:a3:8f:66:d7:0f:e3:10:ac: 52:d6:47:a2:b3:2e:9a:6e:65:ab:69:bc:e9:de:53: a8:1f:ca:d1:4c:41:20:19:9b:1b:d1:f4:ea:55:ec: 2d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:5E:D9:AF:7F:29:F2:1E:DC:38:68:53:E6:A0:B6:32:21:75:CB:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d0d9783-6f85-3a53-a5fd-efb9543c1c21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.82.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:54:fe:cc:54:c7:52:40:fa:da:b8:84:52:e1:47:b9:0a:51: f0:ca:01:be:66:a0:4e:b5:b4:86:33:23:ff:e1:08:73:6c:d0: fe:96:fd:1c:ca:da:93:db:c4:63:91:b2:9e:6d:e4:03:33:85: cf:8f:45:3f:37:43:fd:cf:03:95:af:dd:de:da:f0:f8:47:9d: 2a:18:53:8f:21:70:49:08:25:20:16:7f:f2:c9:14:c6:0c:6f: d5:2c:26:ab:3b:48:7c:71:72:76:0f:a9:2e:4c:85:bc:3e:f7: 4c:dd:82:51:53:ec:9a:51:84:c0:f5:6a:22:e8:70:29:6c:7f: bd:84:4b:d6:85:11:2d:bb:6c:78:a0:4b:ac:66:c6:d5:f5:38: 07:88:ff:dd:58:b2:e2:f3:bb:bb:0d:d0:6c:08:56:c3:75:12: 58:1e:d8:6e:13:ec:64:e4:c5:e0:23:ba:cb:c2:09:ac:f9:47: df:d4:11:1b:7e:0b:14:15:67:f8:18:bb:d5:ec:00:a7:65:10: 46:a4:8f:c5:84:15:86:44:b1:23:91:62:53:5b:30:2d:a8:e2: 36:de:78:4e:ec:9e:0c:d5:c3:52:07:4a:84:ef:13:42:f1:69: d1:01:1d:db:97:c0:3b:f3:dd:94:a1:72:57:e8:18:ea:73:97: 7b:97:71:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRRml7Eu2es5xoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ODNmMGRmOTktZGQwMi00YzIyLWJjNDAtYTg2YjA4MmY1YzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihu6E+bQs8LBha9h1UT6WpuYnBaI7mCddB7Q rFl7kNO0u0CfXbCCJGHoWX9afHsJJSWqKIVh1VGT9t9q7x8Qfg4/1MD6+4EPbov/ 1JRHSj8dYItiGMTJAkthQOXsvejC96CT611bqqrejpN5umVzw5waW9Gr6W/H8w2J Byx8sYHHdS5bx4iMcWVv+ADWN76j+DRuso7kP3Ge4u2aLcbwwPyWuBWyZkWQzbqL WfpYNSfPuQ0oQr4Gonv5o0Z/Kdgvyf3Ob5px4rB8p1fit/zUmgwrpyBLHagwo49m 1w/jEKxS1keisy6abmWrabzp3lOoH8rRTEEgGZsb0fTqVewtrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVe2a9/KfIe3DhoU+agtjIhdcu2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2QwZDk3ODMtNmY4NS0z YTUzLWE1ZmQtZWZiOTU0M2MxYzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlKQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhU/sxUx1JA+tq4hFLhR7kKUfDKAb5moE61tIYzI//hCHNs0P6W/RzK 2pPbxGORsp5t5AMzhc+PRT83Q/3PA5Wv3d7a8PhHnSoYU48hcEkIJSAWf/LJFMYM b9UsJqs7SHxxcnYPqS5Mhbw+90zdglFT7JpRhMD1aiLocClsf72ES9aFES27bHig S6xmxtX1OAeI/91YsuLzu7sN0GwIVsN1Elge2G4T7GTkxeAjusvCCaz5R9/UERt+ CxQVZ/gYu9XsAKdlEEakj8WEFYZEsSORYlNbMC2o4jbeeE7sngzVw1IHSoTvE0Lx adEBHduXwDvz3ZShclfoGOpzl3uXcaU= -----END CERTIFICATE-----Generated at Sat Apr 26 18:07:44 2025 by rpki-client