$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/686c5db4-0183-3cb3-a676-970651d1bf14.roa File: 686c5db4-0183-3cb3-a676-970651d1bf14.roa (raw, json) Hash identifier: 3XjeByZ+Cqbj0MMy/MDLpFeGgSz4MabsrA7iO3+Gxvk= Subject key identifier: 50:6B:FF:A5:25:AD:9C:78:EA:CE:69:EA:4F:00:B1:B5:32:C9:F6:32 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7851D6EA22BA7423406AD00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/686c5db4-0183-3cb3-a676-970651d1bf14.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.133.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:1d:6e:a2:2b:a7:42:34:06:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=fcfb5269-43ab-435e-a5b2-ebaa7c74b227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6b:f7:07:b1:1c:5f:f7:1a:32:ba:fa:66:bc: aa:8a:b9:b2:6e:3c:e3:07:fd:dc:a3:22:94:0a:45: 03:46:bb:34:fe:51:36:f6:4e:c0:b1:07:f3:b9:e8: 38:c9:58:fa:ad:60:3c:d0:a9:39:b9:c6:7c:48:e1: 6b:37:72:2e:3a:85:49:b1:23:6b:80:e4:61:27:1c: ee:fa:56:66:92:d4:ff:19:c4:0f:fd:2f:a2:50:f7: c1:58:62:14:d2:dd:15:8c:77:ef:44:ab:35:7b:88: b0:2d:e1:af:23:2c:b9:cb:66:08:74:5b:fa:80:76: d1:23:10:25:67:08:01:d1:20:0f:70:c3:f7:4f:96: 51:e5:b8:25:a6:82:de:09:0f:ce:0d:88:ec:99:a4: 45:63:67:a5:91:aa:f4:ef:f4:cc:71:f2:b1:56:55: c2:61:a0:de:62:52:13:9c:c8:18:83:24:3c:c0:6f: 88:21:7d:b9:33:2d:14:b0:eb:de:e3:66:e3:35:77: 4d:f8:ec:06:30:5c:ec:e5:8c:84:e3:08:11:9f:8f: 6a:2a:19:20:e1:4a:0a:57:05:ba:a7:3d:89:54:f1: 1a:ce:93:f4:8e:1f:08:26:7d:dd:f2:a9:f7:92:7c: 57:49:93:d0:c2:9f:25:9a:ee:fa:c2:fe:a3:98:a1: 44:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:6B:FF:A5:25:AD:9C:78:EA:CE:69:EA:4F:00:B1:B5:32:C9:F6:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/686c5db4-0183-3cb3-a676-970651d1bf14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.133.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:51:40:82:fb:45:61:7c:fc:d8:ab:70:07:d8:dd:12:e0:0c: 51:38:e5:b2:8c:6f:8a:36:6b:27:b0:9b:04:35:0e:73:f3:43: a5:6e:8b:b7:10:08:b0:d6:b2:ad:06:20:8a:06:d9:f6:af:b8: b4:59:96:cd:73:77:e0:7c:97:92:b3:39:77:ad:44:83:eb:dc: 57:b6:1e:25:2b:ac:4f:fa:51:47:51:09:4f:dd:0a:f0:8b:2e: 5a:3d:00:bb:5b:bd:90:0b:6e:17:9b:93:80:5f:a1:e1:5e:fc: e5:e1:d9:67:ac:f1:5c:af:3e:f6:3e:93:3b:b6:b0:76:01:0c: 64:ff:e8:c3:05:5a:75:45:6f:f5:9b:50:e5:6c:43:ef:4f:aa: 82:23:3c:dc:4d:eb:1f:94:94:90:f6:57:c3:b9:f7:7c:ac:04: 33:99:3a:c8:17:85:a9:8d:ea:fe:6d:3c:7b:6d:ca:2d:87:25: fa:16:df:6a:02:ec:4a:32:e6:50:c4:08:29:d8:f0:55:69:ca: 6c:ed:7c:f2:80:97:e5:89:36:58:26:30:00:3e:d7:8e:28:e5: 3a:7b:1c:d9:cd:1b:65:3f:6d:c7:a6:97:56:52:e5:9e:69:40: 67:19:36:3b:bd:1b:6f:2f:c8:80:1b:53:a3:3e:38:2b:2f:9f: db:5d:4d:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhR1uoiunQjQGrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZmNmYjUyNjktNDNhYi00MzVlLWE1YjItZWJhYTdjNzRiMjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2v3B7EcX/caMrr6ZryqirmybjzjB/3coyKU CkUDRrs0/lE29k7AsQfzueg4yVj6rWA80Kk5ucZ8SOFrN3IuOoVJsSNrgORhJxzu +lZmktT/GcQP/S+iUPfBWGIU0t0VjHfvRKs1e4iwLeGvIyy5y2YIdFv6gHbRIxAl ZwgB0SAPcMP3T5ZR5bglpoLeCQ/ODYjsmaRFY2elkar07/TMcfKxVlXCYaDeYlIT nMgYgyQ8wG+IIX25My0UsOve42bjNXdN+OwGMFzs5YyE4wgRn49qKhkg4UoKVwW6 pz2JVPEazpP0jh8IJn3d8qn3knxXSZPQwp8lmu76wv6jmKFE+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBr/6UlrZx46s5p6k8AsbUyyfYyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjg2YzVkYjQtMDE4My0z Y2IzLWE2NzYtOTcwNjUxZDFiZjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARRQIL7RWF8/NircAfY3RLgDFE45bKMb4o2ayewmwQ1DnPzQ6Vui7cQ CLDWsq0GIIoG2favuLRZls1zd+B8l5KzOXetRIPr3Fe2HiUrrE/6UUdRCU/dCvCL Llo9ALtbvZALbhebk4BfoeFe/OXh2Wes8VyvPvY+kzu2sHYBDGT/6MMFWnVFb/Wb UOVsQ+9PqoIjPNxN6x+UlJD2V8O593ysBDOZOsgXhamN6v5tPHttyi2HJfoW32oC 7Eoy5lDECCnY8FVpymztfPKAl+WJNlgmMAA+144o5Tp7HNnNG2U/bceml1ZS5Z5p QGcZNju9G28vyIAbU6M+OCsvn9tdTdk= -----END CERTIFICATE-----Generated at Sat Apr 26 18:03:55 2025 by rpki-client