$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5ec51d4e-3a21-39a1-94d8-e1899df0eba4.roa File: 5ec51d4e-3a21-39a1-94d8-e1899df0eba4.roa (raw, json) Hash identifier: 1S0JgODA1hFq/XnSxwRDkEXl4mtTbSNwruTcklyUw/A= Subject key identifier: F2:36:BE:1D:A0:68:0F:A3:8A:09:5D:FD:B2:BA:43:F6:DA:11:BD:63 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78540DB755B45B549F18380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5ec51d4e-3a21-39a1-94d8-e1899df0eba4.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.86.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:40:db:75:5b:45:b5:49:f1:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=db7c3965-3e3b-4780-9ee4-47ca79922991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b8:4f:6d:6a:f4:fb:bc:78:8e:3f:f9:05:3b: fa:9b:7f:2a:d2:36:1a:8d:78:00:e7:c5:2a:31:7c: 3e:08:02:9f:d9:5f:1c:1e:ed:f6:f3:2b:5e:16:d2: 88:68:98:24:48:6b:da:97:8c:ea:cf:90:51:bc:96: 46:f3:d3:1c:d3:0e:d9:e3:39:59:74:af:6a:f4:ae: 31:94:b9:8a:db:09:b2:d5:9c:2c:40:27:01:b1:e5: e1:90:dd:1e:0a:d1:83:77:e1:f3:9f:e2:be:58:4d: 6c:ce:8b:0d:85:aa:8c:9c:b0:1f:de:e7:12:1a:9f: b0:51:7f:ce:46:85:87:0a:1b:ae:4e:fa:5a:3f:6e: c7:fc:eb:32:d9:da:e4:7d:7c:dc:b1:80:b2:9e:60: f6:91:9e:b2:fa:24:53:c1:bd:41:9c:44:3a:28:25: 1c:00:57:ef:f2:3b:79:68:67:60:f0:e9:1a:04:b5: c7:a5:a7:4b:f1:56:af:81:c2:98:5f:9a:6d:6f:fe: 81:5b:cc:b9:0a:21:e1:ee:ef:9f:1c:80:21:d1:c4: 67:b0:31:15:88:c3:66:13:14:0c:ba:07:b1:4e:84: 9f:b3:c3:3e:11:da:c9:11:ab:09:1c:b2:b0:e2:d8: b6:22:0a:fc:40:fd:49:80:c9:9c:5a:1a:4f:d4:32: a2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:36:BE:1D:A0:68:0F:A3:8A:09:5D:FD:B2:BA:43:F6:DA:11:BD:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5ec51d4e-3a21-39a1-94d8-e1899df0eba4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.86.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:d9:07:aa:e8:54:60:d1:b8:e5:4b:36:50:b9:87:90:c5:4d: e4:42:28:4a:66:30:1d:12:58:59:ab:af:e0:0a:bc:db:78:a9: 13:9a:bc:a9:4d:b9:20:8c:94:7f:8c:a8:9d:1c:33:69:2e:3f: 54:44:60:ba:de:e5:d8:6d:76:57:8a:59:b3:9f:2e:41:6f:82: 06:fd:f9:5c:e9:55:6a:d0:f3:9e:16:39:34:d8:a6:73:47:de: e1:7e:df:74:ea:e4:b0:f4:0a:03:2e:48:ad:e2:52:43:07:40: c0:7b:d2:88:05:fe:66:1a:7b:c6:f8:66:2a:fb:fb:e0:ca:64: 74:5a:60:95:3a:44:ec:e5:8f:e9:bb:ac:ab:a9:a0:71:e1:59: 6f:0a:ce:3a:56:e4:ee:6e:9c:1a:5c:43:f6:c6:ff:e3:3a:df: 8f:80:05:c5:46:ec:49:bd:65:be:18:28:11:ac:0c:f0:43:3b: f3:eb:28:43:40:ef:4f:a3:3d:94:8e:80:b9:cc:1e:22:a1:0c: 1b:31:84:af:37:86:97:3d:4e:8e:48:dc:3d:8b:63:d3:8a:0b: 5b:71:80:ab:a0:f9:91:3c:8a:69:7f:04:97:d0:ad:ab:df:ba: 48:81:19:3b:ee:c0:d7:f7:ba:98:8b:28:b2:43:e6:0b:70:48: aa:b7:bf:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhUDbdVtFtUnxg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZGI3YzM5NjUtM2UzYi00NzgwLTllZTQtNDdjYTc5OTIyOTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7hPbWr0+7x4jj/5BTv6m38q0jYajXgA58Uq MXw+CAKf2V8cHu328yteFtKIaJgkSGval4zqz5BRvJZG89Mc0w7Z4zlZdK9q9K4x lLmK2wmy1ZwsQCcBseXhkN0eCtGDd+Hzn+K+WE1szosNhaqMnLAf3ucSGp+wUX/O RoWHChuuTvpaP27H/Osy2drkfXzcsYCynmD2kZ6y+iRTwb1BnEQ6KCUcAFfv8jt5 aGdg8OkaBLXHpadL8VavgcKYX5ptb/6BW8y5CiHh7u+fHIAh0cRnsDEViMNmExQM ugexToSfs8M+EdrJEasJHLKw4ti2Igr8QP1JgMmcWhpP1DKiRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPI2vh2gaA+jigld/bK6Q/baEb1jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWVjNTFkNGUtM2EyMS0z OWExLTk0ZDgtZTE4OTlkZjBlYmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/ZB6roVGDRuOVLNlC5h5DFTeRCKEpmMB0SWFmrr+AKvNt4qROavKlN uSCMlH+MqJ0cM2kuP1REYLre5dhtdleKWbOfLkFvggb9+VzpVWrQ854WOTTYpnNH 3uF+33Tq5LD0CgMuSK3iUkMHQMB70ogF/mYae8b4Zir7++DKZHRaYJU6ROzlj+m7 rKupoHHhWW8KzjpW5O5unBpcQ/bG/+M634+ABcVG7Em9Zb4YKBGsDPBDO/PrKENA 70+jPZSOgLnMHiKhDBsxhK83hpc9To5I3D2LY9OKC1txgKug+ZE8iml/BJfQravf ukiBGTvuwNf3upiLKLJD5gtwSKq3v7w= -----END CERTIFICATE-----Generated at Sat Apr 26 18:03:56 2025 by rpki-client