$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4515f1a0-b6ff-33be-b63b-5e7493cd673b.roa File: 4515f1a0-b6ff-33be-b63b-5e7493cd673b.roa (raw, json) Hash identifier: OIiokx/VhkJf7tlmBYWrVRxDyA4Y6RVZ4AEyT+2CAYg= Subject key identifier: 7D:9C:18:03:86:38:B7:AF:5F:1A:4A:CD:42:42:C2:67:B2:4A:0B:6B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784D0EE2332AD9CF68B8380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4515f1a0-b6ff-33be-b63b-5e7493cd673b.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.132.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:d0:ee:23:32:ad:9c:f6:8b:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=e64b17f5-2781-4844-9025-3ee5d2739ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:33:bc:30:b8:31:c5:4f:67:aa:98:7a:a0:42: 9c:d6:cd:75:cb:f8:ff:df:b3:75:72:62:09:0c:35: 12:ff:73:0c:91:87:a8:3e:24:a2:5a:b5:e7:6d:77: 06:21:c1:b8:c0:07:42:09:1c:0a:c8:07:0b:2e:a8: 7f:2b:bf:b4:79:fe:f3:47:ed:7c:a8:4b:92:33:c8: c4:0a:ab:52:e4:96:67:78:8e:79:79:ba:bc:46:7c: 1a:24:2c:1e:b2:ae:7e:16:38:57:91:fd:8a:68:71: 22:0d:ed:8c:93:23:d2:09:e4:aa:62:5b:54:9e:46: 45:0e:d6:bf:99:d4:ec:7d:e8:18:1f:cd:07:ad:6e: 7a:fa:fd:9f:2a:1d:97:e0:6f:61:04:03:fb:8b:4c: 53:84:f7:46:6b:51:23:f3:8e:a3:9a:d8:b1:3a:75: 22:51:7c:16:40:c5:80:e7:99:4f:b2:ca:3d:c2:81: d5:89:55:39:5c:39:e4:27:66:29:f7:89:63:69:2a: b9:e8:b2:81:5e:f1:57:d9:4e:59:77:d6:66:81:66: 81:d8:e7:cc:99:a3:25:6e:22:5b:75:d1:eb:df:f7: 79:7b:d9:53:81:35:2f:93:85:c7:68:e6:38:02:dc: 62:c8:54:05:29:6c:0c:ea:80:45:53:2b:e4:64:30: 7f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9C:18:03:86:38:B7:AF:5F:1A:4A:CD:42:42:C2:67:B2:4A:0B:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4515f1a0-b6ff-33be-b63b-5e7493cd673b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.132.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:3e:0c:c6:31:f3:11:ff:75:ac:31:0d:52:60:26:bf:b6:5d: 80:4d:99:bb:5c:86:5a:3f:e0:87:8b:ea:9a:b0:68:68:9c:83: e3:cb:d3:a4:e1:c5:8d:56:82:11:ea:65:4d:3e:98:c6:e6:d2: 68:61:a5:60:57:4e:95:9d:c8:55:2d:30:e7:e5:e6:28:81:d5: 99:e2:6a:dd:3c:fc:ef:2c:ae:f2:3a:8e:24:07:12:39:21:84: f7:57:90:cc:1b:f9:d4:30:25:bc:c3:e9:65:04:95:bf:ac:13: b5:bd:1c:2a:af:0f:f9:f2:dd:f6:ea:e3:72:f7:94:fa:89:5a: 28:b1:d8:b9:0d:12:10:95:37:a7:4f:79:5c:ae:7c:71:50:ce: 14:b2:1a:06:28:60:35:4f:c1:e0:07:fd:34:94:90:a6:8a:cc: ad:7e:73:8b:53:80:e6:8b:72:eb:d4:44:4b:79:39:97:54:02: 3c:ae:d5:a5:f1:5c:0e:9c:8e:d1:9a:81:36:d0:62:7a:26:33: 4f:12:d7:e2:93:32:65:f2:1b:c4:d0:30:ad:05:55:e8:77:b6: 2a:ed:4b:ab:fe:ab:a3:63:2c:f5:d0:a8:c0:80:ad:15:f6:5a: 4e:86:92:3c:7c:4f:92:4b:b3:03:55:22:71:35:b7:03:9d:63: b8:63:83:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNDuIzKtnPaLg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZTY0YjE3ZjUtMjc4MS00ODQ0LTkwMjUtM2VlNWQyNzM5ZWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTO8MLgxxU9nqph6oEKc1s11y/j/37N1cmIJ DDUS/3MMkYeoPiSiWrXnbXcGIcG4wAdCCRwKyAcLLqh/K7+0ef7zR+18qEuSM8jE CqtS5JZneI55ebq8RnwaJCwesq5+FjhXkf2KaHEiDe2MkyPSCeSqYltUnkZFDta/ mdTsfegYH80HrW56+v2fKh2X4G9hBAP7i0xThPdGa1Ej846jmtixOnUiUXwWQMWA 55lPsso9woHViVU5XDnkJ2Yp94ljaSq56LKBXvFX2U5Zd9ZmgWaB2OfMmaMlbiJb ddHr3/d5e9lTgTUvk4XHaOY4AtxiyFQFKWwM6oBFUyvkZDB/ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2cGAOGOLevXxpKzUJCwmeySgtrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDUxNWYxYTAtYjZmZi0z M2JlLWI2M2ItNWU3NDkzY2Q2NzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADA+DMYx8xH/dawxDVJgJr+2XYBNmbtchlo/4IeL6pqwaGicg+PL06Th xY1WghHqZU0+mMbm0mhhpWBXTpWdyFUtMOfl5iiB1Zniat08/O8srvI6jiQHEjkh hPdXkMwb+dQwJbzD6WUElb+sE7W9HCqvD/ny3fbq43L3lPqJWiix2LkNEhCVN6dP eVyufHFQzhSyGgYoYDVPweAH/TSUkKaKzK1+c4tTgOaLcuvUREt5OZdUAjyu1aXx XA6cjtGagTbQYnomM08S1+KTMmXyG8TQMK0FVeh3tirtS6v+q6NjLPXQqMCArRX2 Wk6Gkjx8T5JLswNVInE1twOdY7hjgyk= -----END CERTIFICATE-----Generated at Sat Apr 26 14:59:04 2025 by rpki-client