$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8cc44ea8-f271-3d19-b0bf-a2a0ea6ef010.roa File: 8cc44ea8-f271-3d19-b0bf-a2a0ea6ef010.roa (raw, json) Hash identifier: oJ+rljgNrkfnI4Ydy7mk6oqYDvlGcdIU/OF/Oo1XcAU= Subject key identifier: C4:83:F4:A0:3B:97:A7:C4:3C:33:AE:BB:A8:3B:E6:F7:D2:AC:74:98 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7850A40DC48DD262EA3CC80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8cc44ea8-f271-3d19-b0bf-a2a0ea6ef010.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.129.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:0a:40:dc:48:dd:26:2e:a3:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=f1c3208c-feaa-453a-93d3-59d59d80fedc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d9:70:8d:3c:a1:75:39:39:9e:91:bc:ed:01: 31:20:a4:f7:5f:65:c7:db:76:7c:56:5f:31:cc:15: af:f5:9c:d1:26:db:66:c0:b5:1b:05:62:d8:8c:e8: 6a:ce:1c:8a:c5:5f:ee:7a:a5:4d:b6:f9:90:80:b8: 07:20:80:a0:4a:d4:d9:fe:f6:74:20:ba:8c:d6:5e: ad:18:a2:41:49:3e:89:e3:18:f4:9e:d9:ba:a8:13: 22:31:fd:8f:6b:ac:c6:f8:02:00:ee:80:2d:e4:63: b0:90:75:13:19:8f:f4:9e:43:09:9b:d3:93:2b:ee: 28:21:42:06:70:57:fe:c2:a4:de:61:aa:4a:59:ac: 79:76:42:13:0a:90:51:d0:47:50:1f:46:d8:0f:d6: e0:8f:8d:d1:08:40:8f:19:ef:02:fd:81:3f:39:77: fb:8d:80:19:39:24:50:0a:95:1c:99:22:6b:a9:61: 35:d7:33:99:fe:84:d0:71:45:d0:ca:e6:13:e4:c3: 3f:4c:9e:9f:89:44:a5:7d:6b:7f:d9:7d:7e:19:48: 7f:87:95:8f:b9:94:5d:61:c3:3c:d5:e5:d0:cf:22: 1f:3d:c5:21:06:e5:34:dd:bb:7e:81:1d:17:55:57: 4f:98:5c:15:86:fc:1b:4b:5f:10:27:d4:77:60:a5: 4d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:83:F4:A0:3B:97:A7:C4:3C:33:AE:BB:A8:3B:E6:F7:D2:AC:74:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8cc44ea8-f271-3d19-b0bf-a2a0ea6ef010.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.129.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:54:6c:a7:25:57:97:b5:93:ef:d6:2f:78:57:f1:6a:a1:49: cb:46:c5:f1:5c:e2:66:81:5e:24:3d:70:1e:f3:a7:da:52:33: e6:6f:79:36:6b:90:07:68:44:8d:3b:cc:2a:46:d4:de:7f:14: f1:48:d0:ff:1a:b7:9e:9e:12:3c:a3:00:0b:c1:f0:bd:1a:77: b3:9c:47:f6:4a:73:ad:7c:b1:ce:2c:3e:2c:a5:49:9f:d9:02: 80:28:50:c2:c2:1a:84:f9:22:71:fe:69:83:59:31:34:f4:dc: 62:7c:f8:e7:fd:eb:91:da:2b:3f:10:27:ee:87:34:3c:9d:8f: a9:68:65:e7:60:b3:a7:44:e9:be:8e:c7:1d:a9:f4:29:cf:49: d6:2f:4a:c4:25:0c:6a:db:ee:cd:dc:09:9d:e2:84:42:83:2c: 5e:ca:b8:df:4b:e2:ec:56:d6:78:d8:a5:ab:49:ca:1b:fe:8b: b6:97:b2:31:eb:f1:da:11:39:7c:b7:b2:0d:3d:14:a1:4e:b4: ca:43:dc:47:aa:bc:7d:38:99:0d:75:4c:73:b5:bd:c8:a1:0d: 46:e2:71:4a:28:6c:c2:ac:5c:ab:74:4a:d4:41:43:ac:46:fa: 99:2a:e3:06:65:9a:78:5d:4e:87:70:9c:7f:44:2a:e6:71:16: 67:81:1d:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQpA3EjdJi6jzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZjFjMzIwOGMtZmVhYS00NTNhLTkzZDMtNTlkNTlkODBmZWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNlwjTyhdTk5npG87QExIKT3X2XH23Z8Vl8x zBWv9ZzRJttmwLUbBWLYjOhqzhyKxV/ueqVNtvmQgLgHIICgStTZ/vZ0ILqM1l6t GKJBST6J4xj0ntm6qBMiMf2Pa6zG+AIA7oAt5GOwkHUTGY/0nkMJm9OTK+4oIUIG cFf+wqTeYapKWax5dkITCpBR0EdQH0bYD9bgj43RCECPGe8C/YE/OXf7jYAZOSRQ CpUcmSJrqWE11zOZ/oTQcUXQyuYT5MM/TJ6fiUSlfWt/2X1+GUh/h5WPuZRdYcM8 1eXQzyIfPcUhBuU03bt+gR0XVVdPmFwVhvwbS18QJ9R3YKVNwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSD9KA7l6fEPDOuu6g75vfSrHSYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGNjNDRlYTgtZjI3MS0z ZDE5LWIwYmYtYTJhMGVhNmVmMDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtUbKclV5e1k+/WL3hX8WqhSctGxfFc4maBXiQ9cB7zp9pSM+ZveTZr kAdoRI07zCpG1N5/FPFI0P8at56eEjyjAAvB8L0ad7OcR/ZKc618sc4sPiylSZ/Z AoAoUMLCGoT5InH+aYNZMTT03GJ8+Of965HaKz8QJ+6HNDydj6loZedgs6dE6b6O xx2p9CnPSdYvSsQlDGrb7s3cCZ3ihEKDLF7KuN9L4uxW1njYpatJyhv+i7aXsjHr 8doROXy3sg09FKFOtMpD3EeqvH04mQ11THO1vcihDUbicUoobMKsXKt0StRBQ6xG +pkq4wZlmnhdTodwnH9EKuZxFmeBHWQ= -----END CERTIFICATE-----Generated at Mon Apr 28 02:03:50 2025 by rpki-client