$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/98dedf34-29c6-3e46-b17c-f5e6a425c74c.roa File: 98dedf34-29c6-3e46-b17c-f5e6a425c74c.roa (raw, json) Hash identifier: xB+5QN0laiLZiLGKmsIbbHdTouv33e7SaZJl0tQvlb0= Subject key identifier: 85:61:F7:07:8E:74:AD:88:20:6D:C6:E5:9B:33:08:7B:71:CA:22:D6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7853BCE86ED06D4C97062C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/98dedf34-29c6-3e46-b17c-f5e6a425c74c.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.89.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:3b:ce:86:ed:06:d4:c9:70:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=e18b488a-3063-4f61-85a8-2a2a90037f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0a:ba:f1:ef:89:3e:68:80:77:82:84:c3:cb: c3:3a:b9:f0:7a:ec:51:83:e8:05:fb:11:88:dd:3d: 0b:62:ce:8b:06:d9:b4:ec:eb:0c:0f:d3:d7:84:82: 7d:92:5b:e7:f5:00:ec:ed:ac:62:a0:d8:8d:7b:d7: 6d:9f:e4:eb:07:f8:ce:01:d2:97:d0:70:26:05:0e: bc:35:37:53:7f:b5:88:02:a7:1e:2f:00:33:bc:49: 7d:27:2e:6d:86:fc:47:d9:1b:0d:60:47:26:d8:95: f1:e1:2c:e3:bc:71:33:8f:dd:82:f4:19:80:60:ca: 3e:08:1f:44:c6:ea:7b:4b:ad:fe:48:23:f6:06:68: 61:26:c3:6a:ec:10:7b:9d:f4:ca:3d:88:e6:c8:3c: ff:92:4e:cc:c2:cb:db:6c:98:ca:f4:ad:af:21:92: 40:e9:31:cc:9b:09:dc:42:e4:8d:b0:18:83:2c:81: d2:32:d5:e2:a4:03:df:82:bd:f0:54:9c:6f:7d:48: fc:6e:95:f5:47:d5:f4:dc:a1:fe:c8:2c:af:c7:15: dd:64:71:c6:3f:65:8a:55:43:c5:22:ec:2f:00:42: ac:11:66:66:0a:97:c7:ba:c6:47:33:67:ff:12:3c: 0c:3d:3b:40:e4:63:be:b8:ea:94:71:e2:67:15:da: 2d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:61:F7:07:8E:74:AD:88:20:6D:C6:E5:9B:33:08:7B:71:CA:22:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/98dedf34-29c6-3e46-b17c-f5e6a425c74c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.89.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:24:50:9d:2c:b7:bb:8f:97:f2:0b:84:c2:8e:49:02:de:34: e2:3b:14:52:cf:c0:02:a8:a8:92:15:96:c5:2d:71:fa:de:a6: 12:d5:00:92:6f:b4:94:0a:64:c4:34:6e:27:4e:37:c7:33:57: c1:56:24:9c:d0:5e:83:81:d3:61:c2:a3:82:16:8e:11:51:e1: 11:0e:b1:b5:4a:d4:a3:c7:a1:14:b0:12:ac:c3:4b:f5:ef:12: 68:33:d3:c6:f0:fa:7b:bd:9d:9e:b2:bf:b8:ae:0f:c1:44:66: f8:9a:6d:4e:18:e8:e0:ef:07:86:14:ab:a1:44:00:ae:88:97: 38:8a:25:9a:f1:45:67:ea:86:a4:b8:4d:85:04:8a:06:c6:88: 0d:40:e5:f2:85:d6:4d:41:1a:b2:82:96:40:0f:40:a1:86:a4: b1:9e:55:83:a7:62:66:75:ba:50:d6:dc:2f:c4:79:8b:be:cf: 64:b6:55:67:50:df:fa:f1:0a:2c:3d:45:83:d7:a5:0b:72:86: 14:07:bd:38:b9:9e:12:98:87:db:97:a7:56:b7:03:13:4f:17: a7:5b:3e:b8:38:e2:2a:ed:7c:55:07:da:22:32:9d:30:3c:95: 90:4a:f2:96:3a:59:2e:16:90:22:4a:3a:1d:bc:e4:a4:3f:ef: 19:7f:92:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTvOhu0G1MlwYsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZTE4YjQ4OGEtMzA2My00ZjYxLTg1YTgtMmEyYTkwMDM3ZjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAq68e+JPmiAd4KEw8vDOrnweuxRg+gF+xGI 3T0LYs6LBtm07OsMD9PXhIJ9klvn9QDs7axioNiNe9dtn+TrB/jOAdKX0HAmBQ68 NTdTf7WIAqceLwAzvEl9Jy5thvxH2RsNYEcm2JXx4SzjvHEzj92C9BmAYMo+CB9E xup7S63+SCP2BmhhJsNq7BB7nfTKPYjmyDz/kk7MwsvbbJjK9K2vIZJA6THMmwnc QuSNsBiDLIHSMtXipAPfgr3wVJxvfUj8bpX1R9X03KH+yCyvxxXdZHHGP2WKVUPF IuwvAEKsEWZmCpfHusZHM2f/EjwMPTtA5GO+uOqUceJnFdotMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVh9weOdK2IIG3G5ZszCHtxyiLWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOThkZWRmMzQtMjljNi0z ZTQ2LWIxN2MtZjVlNmE0MjVjNzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlmwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4kUJ0st7uPl/ILhMKOSQLeNOI7FFLPwAKoqJIVlsUtcfrephLVAJJv tJQKZMQ0bidON8czV8FWJJzQXoOB02HCo4IWjhFR4REOsbVK1KPHoRSwEqzDS/Xv Emgz08bw+nu9nZ6yv7iuD8FEZviabU4Y6ODvB4YUq6FEAK6IlziKJZrxRWfqhqS4 TYUEigbGiA1A5fKF1k1BGrKClkAPQKGGpLGeVYOnYmZ1ulDW3C/EeYu+z2S2VWdQ 3/rxCiw9RYPXpQtyhhQHvTi5nhKYh9uXp1a3AxNPF6dbPrg44irtfFUH2iIynTA8 lZBK8pY6WS4WkCJKOh285KQ/7xl/kjc= -----END CERTIFICATE-----Generated at Sun Apr 27 01:01:41 2025 by rpki-client