$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/588776eb-f9c6-3f41-8ce8-4b65e0407ae4.roa File: 588776eb-f9c6-3f41-8ce8-4b65e0407ae4.roa (raw, json) Hash identifier: 95mMTP/UKivJU2vKvJ64gcINnIOsID0jyP/cO0fAxIA= Subject key identifier: D4:DA:55:C1:3A:F9:53:52:6B:66:3C:D7:CA:F4:4F:41:B2:D4:64:A9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784D584E5FB88A869A94280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/588776eb-f9c6-3f41-8ce8-4b65e0407ae4.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.131.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:d5:84:e5:fb:88:a8:69:a9:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=85f95804-e6d9-4bf1-8da5-0feea018e3a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5b:ee:78:ad:6c:6f:ad:cd:db:4a:7e:35:6b: f7:28:0d:01:6a:1b:49:e4:69:61:26:67:5d:7a:29: b7:b3:0b:58:35:49:af:b3:5e:4d:42:5a:28:09:5a: 1e:2b:35:63:48:d1:68:e3:76:51:a8:ba:1b:7b:67: d2:8c:d3:33:8f:0b:33:60:b3:1b:13:92:48:fb:97: f0:3c:11:ab:a7:55:c7:3f:95:9d:a3:ed:3b:bb:73: c7:98:fd:1a:ab:d8:44:52:13:56:b7:dd:b6:11:dc: cd:8b:63:d2:da:47:5a:09:82:02:a9:84:71:92:38: 4d:79:84:b8:5d:3f:3b:7c:8f:34:ff:0a:1a:4d:ca: 75:c5:58:f8:f3:0d:80:aa:ba:d8:18:fe:df:83:6a: f0:bb:35:67:5e:e4:a8:8a:37:f1:b2:05:6e:ea:0f: 61:07:5f:93:fe:43:62:d1:be:82:1b:08:a3:7d:40: ff:cf:35:4c:67:0f:e9:cb:a2:44:8b:33:6e:ac:a0: 15:eb:35:eb:b5:12:cf:22:36:1f:0b:0c:d1:a0:b8: 74:ca:1e:93:47:b4:33:76:fc:07:6f:c9:17:0e:25: f2:1e:13:f5:bf:cb:31:db:ec:e6:84:76:6a:30:10: b4:85:3b:f1:11:ed:22:78:b2:78:f7:11:9d:3c:5a: 11:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:DA:55:C1:3A:F9:53:52:6B:66:3C:D7:CA:F4:4F:41:B2:D4:64:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/588776eb-f9c6-3f41-8ce8-4b65e0407ae4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.131.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:85:c2:c3:07:d6:01:d0:db:d1:d7:2f:a8:65:59:4d:73:ec: f4:bc:d0:b2:9e:29:de:06:3e:c0:db:11:80:bb:04:a2:fa:ac: cf:91:4a:d2:49:5d:80:cd:54:94:82:59:6d:e5:25:27:9e:44: b7:8b:56:7e:ba:4c:bd:bc:81:be:3f:1e:ed:89:71:a7:11:75: 0d:35:7b:2b:e6:d5:52:53:72:ba:00:5d:e6:cb:a5:55:a5:55: 8a:09:41:5c:80:8b:d0:46:34:a1:02:77:90:81:45:ab:46:6e: 64:cf:c7:83:59:29:8b:a1:03:5c:89:28:3c:7b:ff:3e:40:9b: 98:b4:6e:4f:e6:d9:4d:a4:4f:8d:c8:e0:43:32:d4:ae:bc:03: d5:f4:fd:ad:9a:52:b2:e0:6c:b7:06:0d:8e:ab:06:64:49:6b: b9:57:f9:02:7c:c2:dd:89:c5:9d:eb:ad:c1:d0:07:d1:db:16: b0:04:01:e4:2a:08:cd:e5:77:80:08:78:e4:99:e0:f8:8c:f0: f7:20:6e:1c:bd:4d:02:bc:3b:7b:1d:17:7f:d4:db:a7:92:04: b0:f0:64:3e:9d:79:3d:0f:7a:26:5c:10:b9:52:e0:60:5c:f3: dd:1c:09:d2:ff:03:28:22:cb:ca:b1:6f:e3:46:a1:b5:91:b4: be:e7:01:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNWE5fuIqGmpQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ODVmOTU4MDQtZTZkOS00YmYxLThkYTUtMGZlZWEwMThlM2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplvueK1sb63N20p+NWv3KA0BahtJ5GlhJmdd eim3swtYNUmvs15NQlooCVoeKzVjSNFo43ZRqLobe2fSjNMzjwszYLMbE5JI+5fw PBGrp1XHP5Wdo+07u3PHmP0aq9hEUhNWt922EdzNi2PS2kdaCYICqYRxkjhNeYS4 XT87fI80/woaTcp1xVj48w2AqrrYGP7fg2rwuzVnXuSoijfxsgVu6g9hB1+T/kNi 0b6CGwijfUD/zzVMZw/py6JEizNurKAV6zXrtRLPIjYfCwzRoLh0yh6TR7QzdvwH b8kXDiXyHhP1v8sx2+zmhHZqMBC0hTvxEe0ieLJ49xGdPFoRXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTaVcE6+VNSa2Y818r0T0Gy1GSpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTg4Nzc2ZWItZjljNi0z ZjQxLThjZTgtNGI2NWUwNDA3YWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuFwsMH1gHQ29HXL6hlWU1z7PS80LKeKd4GPsDbEYC7BKL6rM+RStJJ XYDNVJSCWW3lJSeeRLeLVn66TL28gb4/Hu2JcacRdQ01eyvm1VJTcroAXebLpVWl VYoJQVyAi9BGNKECd5CBRatGbmTPx4NZKYuhA1yJKDx7/z5Am5i0bk/m2U2kT43I 4EMy1K68A9X0/a2aUrLgbLcGDY6rBmRJa7lX+QJ8wt2JxZ3rrcHQB9HbFrAEAeQq CM3ld4AIeOSZ4PiM8Pcgbhy9TQK8O3sdF3/U26eSBLDwZD6deT0PeiZcELlS4GBc 890cCdL/Aygiy8qxb+NGobWRtL7nAWo= -----END CERTIFICATE-----Generated at Sat Apr 26 19:19:57 2025 by rpki-client