$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5dfa970b-a50e-3b98-af36-7a48454cd8f0.roa File: 5dfa970b-a50e-3b98-af36-7a48454cd8f0.roa (raw, json) Hash identifier: j0DffXt4HqU1DQ9R/lyVKRSq8tsUszeVmoacIcWVQaw= Subject key identifier: FA:AA:1F:EA:24:08:AD:61:B0:7D:33:E1:EA:59:1B:21:D9:90:5A:1D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784FD79C6DC6E9AE286D1A0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5dfa970b-a50e-3b98-af36-7a48454cd8f0.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.68.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:fd:79:c6:dc:6e:9a:e2:86:d1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=8a25ed25-c1fc-4173-91a1-e01fde81abf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2b:9e:b3:e1:79:24:20:fb:04:e5:fa:29:9e: 7c:c0:13:a7:0a:1d:a1:b9:b2:bc:f1:04:45:86:40: 7a:e1:df:59:2f:0c:8d:06:27:3b:1c:7a:e1:d8:09: 71:c4:a6:4c:49:51:ea:dc:57:45:de:95:4e:49:1f: b1:08:55:04:5a:a8:d3:ad:a5:03:b4:a9:da:d2:f5: c3:70:0f:6c:b1:99:9c:69:74:82:c7:e7:54:92:0a: 85:18:83:6e:70:39:1a:3a:bd:6c:a1:cc:d0:b8:b2: 43:b9:44:3f:9c:ae:6c:ea:5e:27:35:1d:81:54:c4: 45:77:ff:d1:4b:4f:dc:ba:0b:ab:94:89:5b:26:d0: c1:a9:cf:7b:d4:0a:13:0f:3d:c4:da:b2:c5:36:03: 1b:59:0d:72:43:e7:59:bf:0e:75:77:52:d1:90:2b: fd:0c:1f:76:74:69:ea:4b:77:bb:e8:fa:37:26:31: a5:60:74:15:3f:f6:fe:1e:ae:e7:29:4a:59:e4:17: 80:6b:ea:5f:5a:74:3a:8f:98:23:4d:55:39:13:00: 14:77:57:c3:5d:06:01:90:cf:ab:c0:b9:55:83:c1: 63:26:fd:8b:3f:6f:27:69:cc:6e:4c:b4:9d:6f:8b: 2f:2d:27:c3:53:69:62:53:da:7a:80:b2:a1:b2:4b: 18:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AA:1F:EA:24:08:AD:61:B0:7D:33:E1:EA:59:1B:21:D9:90:5A:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5dfa970b-a50e-3b98-af36-7a48454cd8f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.68.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:3c:60:51:45:1b:8f:89:e9:4f:02:55:2b:ff:a5:ab:c9:72: 6e:a4:40:54:4d:0f:b6:c0:f8:fe:aa:c0:3d:36:40:a0:72:71: 0f:6b:01:b8:82:ec:8e:af:8e:27:36:66:02:bf:7e:4a:af:35: 90:fc:47:a6:41:c7:34:53:2e:8a:fd:0a:24:79:47:d4:e1:06: b5:8c:a0:8d:29:a8:67:26:05:87:64:6d:0b:d3:77:60:10:7f: c9:11:df:ad:ef:97:16:49:f0:a6:9c:93:50:b1:ef:45:c6:73: 08:e4:e6:c9:9b:10:86:f4:5a:dd:37:27:f2:67:12:2d:cf:ca: 27:2b:ee:be:4c:f2:2d:db:d7:9f:60:ff:e4:64:77:24:e4:fb: 86:70:1d:c4:66:66:c6:a7:20:8b:70:e3:72:d0:99:d4:1f:70: 7b:cd:17:83:5b:1c:26:60:00:6e:a5:69:37:61:8c:d0:78:3a: 14:70:95:54:0f:91:73:da:95:fe:10:ff:e6:22:ed:29:fb:4e: d0:89:91:e6:ea:d3:cc:1a:b4:1a:14:ac:ab:7b:98:3f:22:50: 0f:8f:5c:94:b0:23:54:5d:10:9b:87:d8:f0:39:4e:a7:23:fb: cc:81:23:d5:53:93:7d:6e:28:a1:a1:11:0d:67:e5:1b:75:2d: e6:b9:9d:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhP15xtxumuKG0aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OGEyNWVkMjUtYzFmYy00MTczLTkxYTEtZTAxZmRlODFhYmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCues+F5JCD7BOX6KZ58wBOnCh2hubK88QRF hkB64d9ZLwyNBic7HHrh2AlxxKZMSVHq3FdF3pVOSR+xCFUEWqjTraUDtKna0vXD cA9ssZmcaXSCx+dUkgqFGINucDkaOr1soczQuLJDuUQ/nK5s6l4nNR2BVMRFd//R S0/cugurlIlbJtDBqc971AoTDz3E2rLFNgMbWQ1yQ+dZvw51d1LRkCv9DB92dGnq S3e76Po3JjGlYHQVP/b+Hq7nKUpZ5BeAa+pfWnQ6j5gjTVU5EwAUd1fDXQYBkM+r wLlVg8FjJv2LP28nacxuTLSdb4svLSfDU2liU9p6gLKhsksYSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqqH+okCK1hsH0z4epZGyHZkFodMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWRmYTk3MGItYTUwZS0z Yjk4LWFmMzYtN2E0ODQ1NGNkOGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkSwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKk8YFFFG4+J6U8CVSv/pavJcm6kQFRND7bA+P6qwD02QKBycQ9rAbiC 7I6vjic2ZgK/fkqvNZD8R6ZBxzRTLor9CiR5R9ThBrWMoI0pqGcmBYdkbQvTd2AQ f8kR363vlxZJ8Kack1Cx70XGcwjk5smbEIb0Wt03J/JnEi3Pyicr7r5M8i3b159g /+RkdyTk+4ZwHcRmZsanIItw43LQmdQfcHvNF4NbHCZgAG6laTdhjNB4OhRwlVQP kXPalf4Q/+Yi7Sn7TtCJkebq08watBoUrKt7mD8iUA+PXJSwI1RdEJuH2PA5Tqcj +8yBI9VTk31uKKGhEQ1n5Rt1Lea5nbo= -----END CERTIFICATE-----Generated at Sat Apr 26 19:13:16 2025 by rpki-client