$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5c7bfd1e-dda2-307e-84f6-9ee33c28576a.roa File: 5c7bfd1e-dda2-307e-84f6-9ee33c28576a.roa (raw, json) Hash identifier: vg3VhAhSzJmDsI/E6poTQNYhPg5+Po9fHOMMq+I3Zz8= Subject key identifier: FF:DA:48:A7:F9:9C:71:93:31:11:33:71:15:B2:11:82:89:84:92:02 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78526619572D5745780C400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5c7bfd1e-dda2-307e-84f6-9ee33c28576a.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.151.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:26:61:95:72:d5:74:57:80:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=0fc802ad-bad9-4bc1-94ab-bac3e2a44312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7c:1b:c8:3d:e5:97:dd:62:8b:90:4b:a3:87: f9:5b:cf:9f:98:38:74:b9:0e:92:52:34:4b:7f:c1: 5b:2e:a1:97:00:12:83:99:cc:da:d3:bb:29:a1:3c: 5f:66:ff:a1:9d:6f:f1:2e:71:87:67:db:4f:9e:e2: 9f:8b:92:2b:73:8d:dc:4d:c7:7f:cb:a2:32:8c:a1: 77:f9:85:6c:21:ba:b1:92:e3:d1:9c:13:39:a8:67: 08:c7:68:9d:8c:24:92:f6:e5:16:c0:8c:95:4a:35: ce:ba:97:bb:23:bc:48:dd:6d:79:33:f1:47:3a:cc: 88:3c:d0:b7:54:ad:60:4b:a5:77:f2:42:a5:36:19: 87:34:77:c6:30:38:8d:42:8a:b7:60:ba:1e:37:97: 6d:a2:34:2f:cd:e8:e0:7f:c0:1c:38:fa:0e:56:95: f5:07:aa:36:6a:55:47:9f:32:da:79:46:f2:97:c3: b3:11:2a:b1:a8:10:93:a4:ef:e9:0a:10:1c:0d:c8: 74:ed:48:f4:2c:e3:79:8e:66:20:89:c8:97:5b:9b: 8f:39:60:76:be:87:80:b4:b2:d6:45:25:44:0f:a8: 85:b2:a0:f1:bc:fd:ad:a3:6f:b5:bf:bd:93:49:20: 8c:2d:82:49:e3:c5:1d:f4:b9:82:66:23:5d:b3:eb: 0b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:DA:48:A7:F9:9C:71:93:31:11:33:71:15:B2:11:82:89:84:92:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5c7bfd1e-dda2-307e-84f6-9ee33c28576a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.151.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:b1:65:0b:76:ab:1e:e7:c7:aa:71:24:8b:8a:ed:3c:5d:82: 84:8a:45:2f:88:fa:b2:b5:06:dc:7b:9d:1a:c8:6d:e2:65:bc: d9:a2:fc:bd:1e:3f:a1:9a:12:8d:1c:01:0d:32:34:a1:9d:62: 80:3d:71:ad:1c:c1:5d:85:b9:af:d2:6b:df:a9:96:f6:da:33: 97:53:00:75:15:96:ae:63:31:f2:0f:4b:e8:e0:58:f0:65:18: 4e:ec:c6:a1:85:95:d1:34:e7:d7:28:ec:47:4f:53:5d:fc:35: 96:9b:94:26:25:85:fa:24:37:ed:45:ba:bb:f8:9d:45:63:e2: bf:b8:cf:5d:2b:0a:fe:82:44:ea:70:72:ff:df:7f:2d:ab:42: af:a1:b0:ec:20:d3:dd:76:66:95:53:e7:70:b7:96:f2:99:b3: 26:0f:0c:c3:92:8d:18:75:01:bd:db:82:93:41:bb:ba:89:f1: 59:47:50:46:72:93:8a:e9:c3:46:d7:a1:ad:34:05:4c:51:46: 69:70:73:6b:4f:f5:b4:e1:73:91:85:5d:7a:c5:f8:a5:4b:96: ca:f7:a8:cf:ec:ad:54:20:6e:d1:6f:df:61:23:9f:8b:0b:2e: 32:d6:5c:6f:1f:b0:1a:28:5e:37:19:8f:96:c3:9c:3c:b0:53: a1:b5:fb:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhSZhlXLVdFeAxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MGZjODAyYWQtYmFkOS00YmMxLTk0YWItYmFjM2UyYTQ0MzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHwbyD3ll91ii5BLo4f5W8+fmDh0uQ6SUjRL f8FbLqGXABKDmcza07spoTxfZv+hnW/xLnGHZ9tPnuKfi5Irc43cTcd/y6IyjKF3 +YVsIbqxkuPRnBM5qGcIx2idjCSS9uUWwIyVSjXOupe7I7xI3W15M/FHOsyIPNC3 VK1gS6V38kKlNhmHNHfGMDiNQoq3YLoeN5dtojQvzejgf8AcOPoOVpX1B6o2alVH nzLaeUbyl8OzESqxqBCTpO/pChAcDch07Uj0LON5jmYgiciXW5uPOWB2voeAtLLW RSVED6iFsqDxvP2to2+1v72TSSCMLYJJ48Ud9LmCZiNds+sLqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/aSKf5nHGTMREzcRWyEYKJhJICMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWM3YmZkMWUtZGRhMi0z MDdlLTg0ZjYtOWVlMzNjMjg1NzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuxZQt2qx7nx6pxJIuK7TxdgoSKRS+I+rK1Btx7nRrIbeJlvNmi/L0e P6GaEo0cAQ0yNKGdYoA9ca0cwV2Fua/Sa9+plvbaM5dTAHUVlq5jMfIPS+jgWPBl GE7sxqGFldE059co7EdPU138NZablCYlhfokN+1Furv4nUVj4r+4z10rCv6CROpw cv/ffy2rQq+hsOwg0912ZpVT53C3lvKZsyYPDMOSjRh1Ab3bgpNBu7qJ8VlHUEZy k4rpw0bXoa00BUxRRmlwc2tP9bThc5GFXXrF+KVLlsr3qM/srVQgbtFv32Ejn4sL LjLWXG8fsBooXjcZj5bDnDywU6G1+8M= -----END CERTIFICATE-----Generated at Sat Apr 26 18:39:13 2025 by rpki-client