$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b23c060-e118-3105-b169-4562d614483f.roa File: 8b23c060-e118-3105-b169-4562d614483f.roa (raw, json) Hash identifier: 9PRXNJV9Eo68tam8XqJLLZgY3X2ZQlAPsXFR9LyU24o= Subject key identifier: 11:A1:77:56:E8:E2:83:CD:23:7E:1F:43:80:F2:17:A1:D2:80:FE:33 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7850AC037FECE6732332000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b23c060-e118-3105-b169-4562d614483f.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.68.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:0a:c0:37:fe:ce:67:32:33:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=a57b512e-0fdf-4bcf-9e7a-16beccbeaeba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8a:4d:25:bc:b8:7b:28:03:0e:4b:28:0e:3f: 99:47:38:8f:f9:bf:70:0e:27:fb:f1:a3:1b:81:94: 15:89:86:78:09:2a:22:69:aa:b0:5a:9e:c3:0f:9f: 26:87:43:e3:38:d1:5e:19:1c:3c:05:88:27:8d:4c: ee:09:2a:d0:4b:3e:ee:57:b4:f1:c0:4b:90:76:94: 8d:bb:38:82:7b:6b:5e:d8:d4:d0:ff:59:04:35:c0: 1b:7e:5b:b2:2c:fd:22:a8:d5:a7:a4:a9:d7:3f:d4: ea:2b:41:43:3b:54:07:31:cd:71:ae:14:31:0c:09: 42:05:70:75:a5:21:94:68:77:80:75:e7:91:b9:5e: d7:c3:97:35:2d:97:a8:b0:69:a4:9c:22:fb:07:26: 9c:0f:fb:71:5a:d2:47:d2:13:cd:b9:71:51:64:f5: 8c:57:6c:fe:cd:5f:14:fe:ca:96:b5:2c:57:99:48: 5a:d2:cb:34:65:06:50:2c:4c:9a:8e:25:05:70:e1: 8d:19:4f:18:bd:10:94:90:c4:2d:bd:41:be:20:7d: bd:4d:0b:82:19:e6:64:7e:31:cf:72:a7:c7:09:a7: 4f:22:a3:1b:8f:49:e1:e9:39:1f:2a:3e:a8:5d:66: 23:5b:73:a7:29:1c:9e:f3:f1:2b:c1:ca:3e:d6:b8: 72:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A1:77:56:E8:E2:83:CD:23:7E:1F:43:80:F2:17:A1:D2:80:FE:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b23c060-e118-3105-b169-4562d614483f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.68.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:4a:6e:de:bb:3b:61:93:bd:41:06:e4:f6:e2:e0:57:11:2b: 79:4c:b0:86:e5:dc:59:da:af:65:33:22:ab:29:15:98:50:d8: 44:0c:92:fd:3a:05:29:6b:e8:83:ce:59:d9:84:f6:32:28:4e: 87:ae:83:64:5e:2c:fc:d7:f1:39:93:c9:02:a4:08:79:cd:ce: 3c:73:3c:c4:ce:78:23:55:02:a5:b3:cd:90:b7:54:91:e0:4b: e3:ae:50:9b:89:86:7e:aa:dd:81:ce:79:49:df:c5:b9:04:f3: 0b:45:ad:e3:be:d0:bd:25:9e:45:a7:dd:4a:de:ba:e5:dd:8d: d3:8d:f1:dd:97:5c:91:22:f8:de:a8:e0:9b:95:25:74:5d:d2: 0a:8c:47:f1:ce:7c:f8:30:a0:a6:d7:1f:20:5a:cb:45:38:a9: 8b:0d:9a:6a:67:5e:56:72:a3:d3:48:27:78:07:6e:9f:91:5c: 2a:ba:7f:6b:1b:b8:60:82:16:7e:a6:ee:c9:a9:70:83:3c:62: 5c:2d:c2:11:d8:e2:50:01:82:21:b9:dd:38:fd:af:b0:3a:56: 7c:d6:29:c8:2e:44:05:6c:5e:46:de:89:74:b0:8b:ce:a3:38: c0:d8:97:39:92:62:99:fe:33:70:15:ce:3d:4a:94:be:62:e3: a7:72:52:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQrAN/7OZzIzIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YTU3YjUxMmUtMGZkZi00YmNmLTllN2EtMTZiZWNjYmVhZWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIpNJby4eygDDksoDj+ZRziP+b9wDif78aMb gZQViYZ4CSoiaaqwWp7DD58mh0PjONFeGRw8BYgnjUzuCSrQSz7uV7TxwEuQdpSN uziCe2te2NTQ/1kENcAbfluyLP0iqNWnpKnXP9TqK0FDO1QHMc1xrhQxDAlCBXB1 pSGUaHeAdeeRuV7Xw5c1LZeosGmknCL7ByacD/txWtJH0hPNuXFRZPWMV2z+zV8U /sqWtSxXmUha0ss0ZQZQLEyajiUFcOGNGU8YvRCUkMQtvUG+IH29TQuCGeZkfjHP cqfHCadPIqMbj0nh6TkfKj6oXWYjW3OnKRye8/Erwco+1rhypQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGhd1bo4oPNI34fQ4DyF6HSgP4zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGIyM2MwNjAtZTExOC0z MTA1LWIxNjktNDU2MmQ2MTQ0ODNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZKbt67O2GTvUEG5Pbi4FcRK3lMsIbl3Fnar2UzIqspFZhQ2EQMkv06 BSlr6IPOWdmE9jIoToeug2ReLPzX8TmTyQKkCHnNzjxzPMTOeCNVAqWzzZC3VJHg S+OuUJuJhn6q3YHOeUnfxbkE8wtFreO+0L0lnkWn3UreuuXdjdON8d2XXJEi+N6o 4JuVJXRd0gqMR/HOfPgwoKbXHyBay0U4qYsNmmpnXlZyo9NIJ3gHbp+RXCq6f2sb uGCCFn6m7smpcIM8YlwtwhHY4lABgiG53Tj9r7A6VnzWKcguRAVsXkbeiXSwi86j OMDYlzmSYpn+M3AVzj1KlL5i46dyUlE= -----END CERTIFICATE-----Generated at Sat Apr 26 16:42:00 2025 by rpki-client