$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a44edf76-cbf0-3734-8e11-577e92d2d92e.roa File: a44edf76-cbf0-3734-8e11-577e92d2d92e.roa (raw, json) Hash identifier: fXO4jdfBzIuI4vpImL0vcTQqkzwtmcBrA5dl4Kta7jU= Subject key identifier: 49:03:19:95:F9:F5:A4:CE:F8:41:95:2B:D0:9C:3E:4E:FD:0C:4A:7E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784FE7B5192256089385080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a44edf76-cbf0-3734-8e11-577e92d2d92e.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.144.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:fe:7b:51:92:25:60:89:38:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=41bcfcbd-bd37-4467-a605-245c60438dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5f:7a:89:98:f7:f9:e7:af:52:35:e8:dc:4d: f8:6b:d0:20:09:71:b6:b4:4e:11:13:88:e8:14:a5: 0d:78:7f:0f:08:15:ff:0d:ec:78:e9:07:c8:a5:0b: f5:67:f7:fd:15:9a:b4:75:c9:8e:07:08:ed:a7:5e: 27:51:cf:47:27:38:22:d6:13:96:7c:04:c3:f8:95: 5e:c1:90:4e:62:13:ea:7d:e6:1d:af:36:6d:5b:a8: 9b:9c:fe:b5:1c:17:ef:67:98:a3:3a:b7:1c:da:d6: 09:0f:b9:d2:fc:15:97:94:f9:fd:2b:1d:d0:b4:46: 24:0b:1d:ef:3f:4e:82:92:c6:05:19:1d:85:65:ee: 2c:2b:e6:dd:12:32:24:f2:72:df:18:7e:65:b6:00: e4:be:60:b8:a5:73:d1:1a:9f:01:47:c8:d9:5b:91: 4e:b3:1e:b8:d3:08:64:11:a6:4b:5c:46:a1:64:c4: d0:9f:6c:a4:d0:73:3b:80:04:6a:b6:c4:b0:c5:a5: 82:59:e5:45:7b:a9:63:25:c7:6e:dc:93:c9:45:f8: ec:c8:29:94:95:04:c0:9c:0b:65:14:df:9a:02:77: bb:10:e1:8b:ac:47:69:93:5c:e4:4b:56:eb:52:bd: 59:72:be:dc:f7:5a:95:b2:26:45:f6:f5:2b:8b:10: b4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:03:19:95:F9:F5:A4:CE:F8:41:95:2B:D0:9C:3E:4E:FD:0C:4A:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a44edf76-cbf0-3734-8e11-577e92d2d92e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.144.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:5f:7e:3b:59:7b:92:9b:27:9a:44:28:2e:19:d8:40:e2:54: 1b:50:f4:35:cf:89:bd:d1:ce:7b:4b:82:1f:fb:78:a4:6e:0d: 61:80:31:74:3e:b7:37:e5:74:88:97:45:59:69:2d:30:13:99: ec:92:d2:27:ca:89:a8:dc:b9:43:c2:8a:23:4c:4a:a5:de:d6: 56:ae:64:1d:df:f9:97:03:00:4d:8a:96:cf:03:b4:3e:46:4a: 08:cd:cd:f3:58:35:d2:7b:d7:a3:e4:0c:03:43:81:9e:c6:31: 93:35:89:2b:63:4b:f4:26:7f:bd:f3:54:bc:36:35:d9:87:6f: e1:ff:36:42:5b:08:c4:28:9b:dd:4d:36:52:4e:37:fb:0b:e8: f9:63:ec:ad:9d:4a:f7:33:83:50:92:eb:59:92:71:3e:54:89: 61:9a:1a:2e:c9:5b:81:38:38:34:c8:01:49:40:6e:ea:0c:e6: fe:43:4b:03:b9:93:75:4a:26:bd:a2:59:60:f8:74:16:7a:6b: 49:ab:37:03:8c:2d:b0:95:37:24:80:2c:b8:0e:d2:74:c8:b3: 33:a2:56:9e:1f:52:1b:04:2c:03:b2:00:b9:0d:4a:84:5a:75: f3:2f:f8:29:e9:de:d0:0c:fa:0a:18:cd:1c:83:14:5c:50:bb: 70:6c:66:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhP57UZIlYIk4UIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NDFiY2ZjYmQtYmQzNy00NDY3LWE2MDUtMjQ1YzYwNDM4ZGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV96iZj3+eevUjXo3E34a9AgCXG2tE4RE4jo FKUNeH8PCBX/Dex46QfIpQv1Z/f9FZq0dcmOBwjtp14nUc9HJzgi1hOWfATD+JVe wZBOYhPqfeYdrzZtW6ibnP61HBfvZ5ijOrcc2tYJD7nS/BWXlPn9Kx3QtEYkCx3v P06CksYFGR2FZe4sK+bdEjIk8nLfGH5ltgDkvmC4pXPRGp8BR8jZW5FOsx640whk EaZLXEahZMTQn2yk0HM7gARqtsSwxaWCWeVFe6ljJcdu3JPJRfjsyCmUlQTAnAtl FN+aAne7EOGLrEdpk1zkS1brUr1Zcr7c91qVsiZF9vUrixC0UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkDGZX59aTO+EGVK9CcPk79DEp+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTQ0ZWRmNzYtY2JmMC0z NzM0LThlMTEtNTc3ZTkyZDJkOTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClffjtZe5KbJ5pEKC4Z2EDiVBtQ9DXPib3RzntLgh/7eKRuDWGAMXQ+ tzfldIiXRVlpLTATmeyS0ifKiajcuUPCiiNMSqXe1lauZB3f+ZcDAE2Kls8DtD5G SgjNzfNYNdJ716PkDANDgZ7GMZM1iStjS/Qmf73zVLw2NdmHb+H/NkJbCMQom91N NlJON/sL6Plj7K2dSvczg1CS61mScT5UiWGaGi7JW4E4ODTIAUlAbuoM5v5DSwO5 k3VKJr2iWWD4dBZ6a0mrNwOMLbCVNySALLgO0nTIszOiVp4fUhsELAOyALkNSoRa dfMv+Cnp3tAM+goYzRyDFFxQu3BsZpk= -----END CERTIFICATE-----Generated at Sat Apr 26 16:06:26 2025 by rpki-client