$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6c8a9eee-9b60-3aac-8b8b-0ad479dc127b.roa File: 6c8a9eee-9b60-3aac-8b8b-0ad479dc127b.roa (raw, json) Hash identifier: VvsYfyiJiNF7ysa/hSACLdVY9Aq7E3WdX0ZNizc3aSE= Subject key identifier: C2:94:1D:9E:D9:CF:EF:83:18:C8:C8:74:DA:B1:58:90:F8:E8:11:1E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784D406B68C5C5CFEB16900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6c8a9eee-9b60-3aac-8b8b-0ad479dc127b.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.151.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:d4:06:b6:8c:5c:5c:fe:b1:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=64dd0d40-3dd4-4f5e-a1b1-7d03cf9b90a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2d:3e:47:d9:65:32:2c:d9:28:dc:96:eb:3f: d3:12:c8:c1:59:de:58:4b:92:c4:db:7f:4e:77:70: 24:42:f1:f9:0e:e0:49:47:74:4f:c4:3d:4a:23:d2: 5f:29:8c:62:3d:c8:2f:c5:4e:49:3c:2f:18:c7:6f: b3:26:fb:dd:09:a0:36:64:4e:94:8b:23:41:90:74: 9e:37:d2:17:19:80:9f:ea:c6:40:43:70:c7:bb:0a: f8:e0:00:4d:ab:a2:33:92:15:9e:ac:c8:07:42:de: d6:67:e8:f2:7b:d3:63:73:41:5d:96:72:a4:42:34: 3c:65:4f:fe:7a:2b:34:a9:42:06:46:96:34:41:cd: 7d:1c:73:2b:96:75:d1:33:13:9b:90:8d:9a:47:1e: 5b:27:79:ff:f6:3c:1a:ca:09:d1:06:75:c7:51:21: fa:fc:f9:d2:59:a6:fa:77:4c:7d:f8:01:8f:22:cc: d6:14:7a:c5:ce:6e:03:5e:b9:ad:46:96:60:c0:b2: dc:01:65:a8:5f:f7:37:32:0d:38:35:76:4f:fa:69: d0:e2:78:39:6a:f6:b7:17:41:c5:6a:ff:59:22:e3: b9:2b:86:84:11:dd:39:ad:78:1d:a8:06:66:6b:f4: 68:39:9a:2a:13:7e:d7:30:2f:d3:17:d9:8c:8c:65: 36:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:94:1D:9E:D9:CF:EF:83:18:C8:C8:74:DA:B1:58:90:F8:E8:11:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6c8a9eee-9b60-3aac-8b8b-0ad479dc127b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.151.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:26:39:dd:55:7d:95:d0:a7:2a:5b:37:cc:5f:84:f6:b3:37: d7:1e:01:5f:1d:11:4b:c1:cb:d4:66:ec:13:a7:54:c7:44:0d: 22:a9:f5:7c:f8:4c:8a:db:21:f5:33:6a:7d:db:0a:6d:fb:64: 95:1c:01:e7:1f:df:a3:d8:25:62:da:d0:6d:df:44:d3:42:3a: 5c:10:b3:86:53:a6:41:4b:a4:c8:26:6e:67:16:ce:13:60:a0: 2e:73:8a:a5:7d:09:8e:dc:39:94:7e:c1:03:d3:89:b1:90:cb: f4:9d:e4:e1:47:5e:e3:41:af:d2:72:65:f3:8b:a4:8c:d5:e5: 1c:3d:34:85:5b:a9:e2:ab:c7:fc:97:a9:f7:8a:fa:8c:ae:67: 13:11:79:de:f9:e4:2e:25:84:a5:1e:bf:8c:06:85:44:bb:48: f5:35:1f:9f:10:65:81:d6:6e:5c:e7:94:ee:81:e5:df:34:f0: 61:84:75:c2:90:5b:b8:0f:2c:bb:18:94:98:2b:c6:98:9c:81: 3f:18:26:ef:bb:4a:4b:e3:29:2c:13:4c:cc:a6:a5:ff:f9:e0: ec:1f:5c:aa:72:1c:23:4e:72:1e:5a:cd:0d:40:66:b1:9c:36: 1d:2e:05:0e:60:1c:eb:4b:6d:14:23:6a:cc:80:d5:74:f2:62: af:34:7a:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNQGtoxcXP6xaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NjRkZDBkNDAtM2RkNC00ZjVlLWExYjEtN2QwM2NmOWI5MGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3y0+R9llMizZKNyW6z/TEsjBWd5YS5LE239O d3AkQvH5DuBJR3RPxD1KI9JfKYxiPcgvxU5JPC8Yx2+zJvvdCaA2ZE6UiyNBkHSe N9IXGYCf6sZAQ3DHuwr44ABNq6IzkhWerMgHQt7WZ+jye9Njc0FdlnKkQjQ8ZU/+ eis0qUIGRpY0Qc19HHMrlnXRMxObkI2aRx5bJ3n/9jwaygnRBnXHUSH6/PnSWab6 d0x9+AGPIszWFHrFzm4DXrmtRpZgwLLcAWWoX/c3Mg04NXZP+mnQ4ng5ava3F0HF av9ZIuO5K4aEEd05rXgdqAZma/RoOZoqE37XMC/TF9mMjGU2lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKUHZ7Zz++DGMjIdNqxWJD46BEeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNmM4YTllZWUtOWI2MC0z YWFjLThiOGItMGFkNDc5ZGMxMjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEmOd1VfZXQpypbN8xfhPazN9ceAV8dEUvBy9Rm7BOnVMdEDSKp9Xz4 TIrbIfUzan3bCm37ZJUcAecf36PYJWLa0G3fRNNCOlwQs4ZTpkFLpMgmbmcWzhNg oC5ziqV9CY7cOZR+wQPTibGQy/Sd5OFHXuNBr9JyZfOLpIzV5Rw9NIVbqeKrx/yX qfeK+oyuZxMRed755C4lhKUev4wGhUS7SPU1H58QZYHWblznlO6B5d808GGEdcKQ W7gPLLsYlJgrxpicgT8YJu+7SkvjKSwTTMympf/54OwfXKpyHCNOch5azQ1AZrGc Nh0uBQ5gHOtLbRQjasyA1XTyYq80esk= -----END CERTIFICATE-----Generated at Sat Apr 26 14:55:39 2025 by rpki-client