$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4be3c258-3d86-3bb3-858c-eba8efb9de72.roa File: 4be3c258-3d86-3bb3-858c-eba8efb9de72.roa (raw, json) Hash identifier: z5UzE/4DERtYYFjA7hMOHKAzY/0cHjmt6mJ+GPhr9PE= Subject key identifier: A0:2C:42:36:0E:DF:5A:18:6B:19:C2:6B:E1:7F:FB:60:96:21:79:B4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785297BC376735249AC5D80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4be3c258-3d86-3bb3-858c-eba8efb9de72.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.70.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:29:7b:c3:76:73:52:49:ac:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=0821d7b5-ca31-4f85-a0d2-d29d8abc2dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5a:7e:e6:e8:cc:45:c4:2d:b9:07:1b:85:b9: 0d:34:c6:d1:38:44:9e:fb:3d:5c:30:7d:f1:2d:3a: e0:8f:28:1c:0a:99:4b:2b:6a:f7:df:7c:b3:62:58: 0e:3f:2b:17:d8:2f:f4:f2:47:fe:7d:c4:e2:1a:83: aa:9a:3e:b9:d8:f8:e9:a0:4e:be:19:9f:13:d9:8a: 9c:26:4d:66:94:b0:59:6f:fa:de:41:db:f5:ac:18: 59:76:de:6b:1c:c8:62:d7:f9:82:f1:5d:e7:2c:46: b0:b4:4b:48:9c:25:d1:8f:c9:a8:39:c3:94:78:fb: 87:22:df:22:60:c1:cf:52:fb:af:aa:1e:1b:9f:f4: c0:c8:70:ce:05:42:c3:6d:16:10:62:68:9f:41:ab: 25:42:5b:d0:28:87:75:ed:e8:2f:03:7d:9d:96:8f: d8:4c:c7:39:1e:3b:6b:ad:3f:25:27:fb:1a:b6:93: c1:a8:45:b5:05:83:77:1c:d2:c9:c9:a4:b0:ff:79: 83:36:9b:bb:1a:b0:15:63:ae:75:13:48:16:a9:4f: 35:11:a4:ea:77:a4:37:1f:cd:97:38:dc:e7:ba:68: 7d:b4:77:42:63:78:ec:48:e6:5e:84:b1:6d:c4:c6: 57:7b:e9:74:fe:48:46:d4:99:21:8e:2a:c0:a8:81: 1c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2C:42:36:0E:DF:5A:18:6B:19:C2:6B:E1:7F:FB:60:96:21:79:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4be3c258-3d86-3bb3-858c-eba8efb9de72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.70.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:a2:6f:42:21:55:bc:17:ab:74:51:fe:bd:b3:df:78:42:ea: 4a:f8:b5:b3:7c:ef:9a:8c:8a:cf:8d:5a:45:cc:97:10:21:b1: db:02:e5:4f:1b:48:3a:26:ce:a7:c3:ee:5f:68:cc:eb:8d:6d: 81:d2:31:5f:be:30:ca:75:8b:75:90:a0:31:3c:b6:97:81:1d: 91:61:73:8a:4f:a9:08:3b:d0:d1:3c:ab:69:18:b8:bd:19:77: 8a:f0:3f:8e:2d:42:1b:4a:8a:5d:fe:8b:51:fb:00:a8:af:e1: 93:cb:56:92:da:3f:98:49:18:e9:2f:31:63:d7:de:bc:88:7c: 25:40:8a:21:ae:97:8e:5d:ce:97:68:3f:46:4e:3a:18:3c:54: 86:1a:16:65:ff:20:20:6b:1b:10:a2:83:55:e5:32:9e:f9:b9: 6f:a7:01:c1:b3:ed:26:05:3a:c5:b1:aa:d8:16:10:6a:f2:15: e4:80:b7:fb:f3:0c:82:31:73:28:1a:4d:80:6b:74:a5:a9:9e: 47:00:c4:cf:a5:19:06:d8:38:85:e0:53:ae:be:e8:d5:d1:f1: 16:52:96:be:84:c3:3b:71:d4:a4:bd:29:87:a1:30:c9:cb:69: 10:29:80:af:eb:74:5c:27:39:93:be:97:85:51:d4:ac:58:2a: dd:24:2d:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhSl7w3ZzUkmsXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MDgyMWQ3YjUtY2EzMS00Zjg1LWEwZDItZDI5ZDhhYmMyZGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVp+5ujMRcQtuQcbhbkNNMbROESe+z1cMH3x LTrgjygcCplLK2r333yzYlgOPysX2C/08kf+fcTiGoOqmj652PjpoE6+GZ8T2Yqc Jk1mlLBZb/reQdv1rBhZdt5rHMhi1/mC8V3nLEawtEtInCXRj8moOcOUePuHIt8i YMHPUvuvqh4bn/TAyHDOBULDbRYQYmifQaslQlvQKId17egvA32dlo/YTMc5Hjtr rT8lJ/satpPBqEW1BYN3HNLJyaSw/3mDNpu7GrAVY651E0gWqU81EaTqd6Q3H82X ONznumh9tHdCY3jsSOZehLFtxMZXe+l0/khG1JkhjirAqIEcLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAsQjYO31oYaxnCa+F/+2CWIXm0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGJlM2MyNTgtM2Q4Ni0z YmIzLTg1OGMtZWJhOGVmYjlkZTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSib0IhVbwXq3RR/r2z33hC6kr4tbN875qMis+NWkXMlxAhsdsC5U8b SDomzqfD7l9ozOuNbYHSMV++MMp1i3WQoDE8tpeBHZFhc4pPqQg70NE8q2kYuL0Z d4rwP44tQhtKil3+i1H7AKiv4ZPLVpLaP5hJGOkvMWPX3ryIfCVAiiGul45dzpdo P0ZOOhg8VIYaFmX/ICBrGxCig1XlMp75uW+nAcGz7SYFOsWxqtgWEGryFeSAt/vz DIIxcygaTYBrdKWpnkcAxM+lGQbYOIXgU66+6NXR8RZSlr6Ewztx1KS9KYehMMnL aRApgK/rdFwnOZO+l4VR1KxYKt0kLSw= -----END CERTIFICATE-----Generated at Sat Apr 26 17:46:04 2025 by rpki-client