$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e2f5295-a881-3657-b274-38df78fdc035.roa File: 8e2f5295-a881-3657-b274-38df78fdc035.roa (raw, json) Hash identifier: SN7APtrEpIj/G3x60GIL2Aup/eqzToFQgGL50d7LxAk= Subject key identifier: 38:60:5A:2D:81:87:CF:D5:89:D6:C7:24:E3:0A:AF:38:CF:43:6C:F3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7851EA770B4C4089064F300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e2f5295-a881-3657-b274-38df78fdc035.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.69.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:1e:a7:70:b4:c4:08:90:64:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=a6783e39-a0d8-49e3-8fdf-45f442fb3d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1b:de:48:d1:45:77:f5:df:e8:ab:8c:d9:91: 07:fb:cd:3d:46:5b:12:a1:cd:d5:52:c6:ce:96:58: 5a:08:df:97:60:30:12:d3:4a:e5:49:38:94:34:f9: 46:36:9c:ea:47:07:5e:64:68:f1:ec:73:16:b3:3f: 7f:23:cd:69:30:21:04:fc:e5:6f:c7:4e:f9:50:92: 41:7e:14:e2:c0:84:ca:89:04:8c:13:53:aa:55:97: 75:23:0c:2a:a3:58:05:fe:de:14:d2:6b:1b:c8:44: 0f:20:21:21:44:3f:f9:7f:d4:52:4e:2d:89:0e:69: b6:13:29:e2:8d:9f:5f:25:94:fb:f4:b9:3f:07:60: bb:d0:73:48:d6:fb:dc:2d:dd:23:52:32:5f:77:cb: 29:9f:db:30:46:38:46:cb:a1:ec:a2:26:1e:0b:39: af:af:62:a0:05:a2:86:0f:60:61:c4:08:73:49:e3: da:76:57:3a:0c:d4:89:28:e2:f8:a7:a9:2a:16:f8: dd:ae:7d:ed:70:cd:76:ff:f2:9d:60:2e:dd:34:6e: 4a:f3:d7:cd:fb:f4:79:6c:53:5e:97:c2:7d:03:45: b7:2f:2e:f7:c4:2c:71:51:db:a9:62:17:b6:7e:fa: d2:37:8b:3e:94:25:0a:5d:80:52:4a:7c:2c:d4:b7: 1a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:60:5A:2D:81:87:CF:D5:89:D6:C7:24:E3:0A:AF:38:CF:43:6C:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e2f5295-a881-3657-b274-38df78fdc035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.69.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:05:81:09:83:af:82:21:df:01:7c:4a:de:38:a6:b8:ab:f4: 78:66:06:f6:ea:1b:27:41:c5:01:bd:92:31:68:41:be:8e:3d: a3:ce:0a:d3:b6:74:96:5d:d8:e2:e9:ef:b2:69:63:a1:c4:22: 0b:31:3f:d5:7c:02:20:cf:bd:31:fa:b3:c8:90:9c:00:e0:c5: 6b:91:f1:cc:5e:7d:bf:14:08:06:a9:f9:5a:ef:e7:08:f9:02: e6:f5:3a:b2:44:7b:50:e1:7d:dc:80:11:e3:ef:e1:2c:05:66: 35:db:cc:86:45:1d:6e:ef:f8:3b:bf:68:cc:79:0d:9b:db:90: ad:4c:1a:2d:ca:2d:ad:02:5d:85:fd:18:1c:6c:55:59:30:21: 23:ed:d7:50:61:bc:4f:ef:ed:e6:9d:0a:6b:90:e9:e8:87:c9: 2c:e8:17:5f:f8:a8:e3:82:87:1c:08:09:a0:f9:cd:db:fa:ed: 0f:a2:e8:54:69:a1:c5:26:f5:a2:73:f9:94:7e:a2:f9:91:ef: c7:a6:ac:dc:35:16:1e:e0:46:dd:3b:12:db:ff:9b:d7:cf:c8: fb:f7:59:4b:a3:cf:7c:13:b3:fd:e5:fa:ec:e0:8f:0d:28:b5: 70:16:f5:44:ed:e1:78:80:d7:1f:41:a1:f0:a1:a5:89:5e:f5: ad:d7:d6:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhR6ncLTECJBk8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YTY3ODNlMzktYTBkOC00OWUzLThmZGYtNDVmNDQyZmIzZDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBveSNFFd/Xf6KuM2ZEH+809RlsSoc3VUsbO llhaCN+XYDAS00rlSTiUNPlGNpzqRwdeZGjx7HMWsz9/I81pMCEE/OVvx075UJJB fhTiwITKiQSME1OqVZd1Iwwqo1gF/t4U0msbyEQPICEhRD/5f9RSTi2JDmm2Eyni jZ9fJZT79Lk/B2C70HNI1vvcLd0jUjJfd8spn9swRjhGy6HsoiYeCzmvr2KgBaKG D2BhxAhzSePadlc6DNSJKOL4p6kqFvjdrn3tcM12//KdYC7dNG5K89fN+/R5bFNe l8J9A0W3Ly73xCxxUdupYhe2fvrSN4s+lCUKXYBSSnws1LcakwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhgWi2Bh8/VidbHJOMKrzjPQ2zzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGUyZjUyOTUtYTg4MS0z NjU3LWIyNzQtMzhkZjc4ZmRjMDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYFgQmDr4Ih3wF8St44prir9HhmBvbqGydBxQG9kjFoQb6OPaPOCtO2 dJZd2OLp77JpY6HEIgsxP9V8AiDPvTH6s8iQnADgxWuR8cxefb8UCAap+Vrv5wj5 Aub1OrJEe1DhfdyAEePv4SwFZjXbzIZFHW7v+Du/aMx5DZvbkK1MGi3KLa0CXYX9 GBxsVVkwISPt11BhvE/v7eadCmuQ6eiHySzoF1/4qOOChxwICaD5zdv67Q+i6FRp ocUm9aJz+ZR+ovmR78emrNw1Fh7gRt07Etv/m9fPyPv3WUujz3wTs/3l+uzgjw0o tXAW9UTt4XiA1x9BofChpYle9a3X1lk= -----END CERTIFICATE-----Generated at Sat Apr 26 14:59:09 2025 by rpki-client