$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b4025787-ed90-31da-ba84-ef5a9728ea9d.roa File: b4025787-ed90-31da-ba84-ef5a9728ea9d.roa (raw, json) Hash identifier: d4MpxhjsVxpbEYg0CeESv0Wymqv1SGyO2Ttj4ZmoJOc= Subject key identifier: CD:38:5C:69:F5:90:13:D0:3B:6B:BC:5F:FA:C6:98:A0:71:DC:9E:05 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78523F22C0D602DFF0B8780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b4025787-ed90-31da-ba84-ef5a9728ea9d.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.84.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:23:f2:2c:0d:60:2d:ff:0b:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=dca6cc81-2ec5-4ad0-8281-fc8817f71e5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:49:55:e7:57:80:27:67:03:5d:a1:4d:90:eb: c4:26:16:5d:be:f0:d8:80:eb:95:9f:3a:95:3a:62: 95:a6:ac:8f:3d:37:d5:1f:d1:55:e7:c2:93:8d:38: 8a:45:07:ae:7b:7e:83:a9:ad:ca:2b:df:79:e0:f8: 98:17:1f:dc:bd:3d:0f:87:52:6d:78:76:16:5a:d4: a3:27:ac:96:6e:9b:37:76:fe:07:97:b6:c5:8e:7d: b2:ad:13:79:03:c1:7b:7b:a7:bc:a0:07:84:7d:81: f5:8c:da:6a:a3:7a:78:c8:6d:a1:21:b3:29:fb:4c: ed:b0:16:3c:9d:83:61:41:43:e9:c4:7c:9d:26:a8: dd:2e:58:db:3b:f8:06:50:6e:a8:1f:1c:80:c5:00: 6b:f0:55:ee:a3:e3:ed:54:94:92:22:60:5e:27:6d: a9:8f:a0:f3:7a:e3:22:92:99:d8:d0:41:5a:a2:32: 3b:4c:db:6e:5f:48:22:8f:20:e8:be:77:db:29:ab: f1:72:28:51:1b:b5:a1:37:ff:40:29:1a:83:ab:e9: 4b:cd:64:07:cc:8e:4b:43:41:e0:62:81:63:db:ef: 62:7c:d0:8e:ba:3f:0a:3a:95:a2:43:d8:db:2a:bd: 70:2f:38:82:16:34:3d:ec:58:cb:cb:be:81:29:fb: 23:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:38:5C:69:F5:90:13:D0:3B:6B:BC:5F:FA:C6:98:A0:71:DC:9E:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b4025787-ed90-31da-ba84-ef5a9728ea9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.84.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:f5:69:9a:3a:32:fd:d4:31:15:6c:35:34:57:67:de:0e:14: 77:ff:92:2a:3c:9f:f7:8c:cd:ae:7e:7c:a9:4d:dc:43:71:ad: 96:1c:e2:2d:88:e1:7b:c1:4b:f4:e9:75:a2:54:cd:d7:97:7d: 0a:d6:04:db:0b:fa:21:d1:bd:67:df:d3:20:30:da:ae:57:82: 9f:6d:f7:89:37:16:81:2c:be:65:c1:b8:4d:b9:13:74:d7:47: 11:5a:59:36:ea:86:ae:e3:6e:81:b6:44:61:d3:2e:40:7d:1a: b5:e7:61:79:9c:a3:f3:07:46:16:f8:ea:64:1b:34:18:3b:28: c2:96:3e:56:3f:a8:cd:7a:7c:65:90:17:f7:eb:4f:c0:31:f4: f3:fa:64:52:ce:83:55:7f:8a:27:4e:21:fd:cf:c5:d1:f6:29: 16:4a:34:45:d7:cf:5e:a9:d7:5f:5a:30:11:44:3c:73:f5:be: 98:b7:99:fc:50:08:27:d8:95:5a:cf:b3:c9:d1:1d:66:be:fb: 95:39:e2:37:5e:d1:3f:99:95:0e:87:97:40:ac:72:8c:80:17: 44:49:2a:5c:94:8f:6d:41:5f:97:50:bf:c2:e0:c5:83:f1:29: 54:61:dd:54:32:d6:de:d4:4b:9d:1e:7b:18:3a:c5:da:c6:f3: af:9e:20:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhSPyLA1gLf8Lh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZGNhNmNjODEtMmVjNS00YWQwLTgyODEtZmM4ODE3ZjcxZTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuElV51eAJ2cDXaFNkOvEJhZdvvDYgOuVnzqV OmKVpqyPPTfVH9FV58KTjTiKRQeue36Dqa3KK9954PiYFx/cvT0Ph1JteHYWWtSj J6yWbps3dv4Hl7bFjn2yrRN5A8F7e6e8oAeEfYH1jNpqo3p4yG2hIbMp+0ztsBY8 nYNhQUPpxHydJqjdLljbO/gGUG6oHxyAxQBr8FXuo+PtVJSSImBeJ22pj6DzeuMi kpnY0EFaojI7TNtuX0gijyDovnfbKavxcihRG7WhN/9AKRqDq+lLzWQHzI5LQ0Hg YoFj2+9ifNCOuj8KOpWiQ9jbKr1wLziCFjQ97FjLy76BKfsj2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM04XGn1kBPQO2u8X/rGmKBx3J4FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjQwMjU3ODctZWQ5MC0z MWRhLWJhODQtZWY1YTk3MjhlYTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlRwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEL1aZo6Mv3UMRVsNTRXZ94OFHf/kio8n/eMza5+fKlN3ENxrZYc4i2I 4XvBS/TpdaJUzdeXfQrWBNsL+iHRvWff0yAw2q5Xgp9t94k3FoEsvmXBuE25E3TX RxFaWTbqhq7jboG2RGHTLkB9GrXnYXmco/MHRhb46mQbNBg7KMKWPlY/qM16fGWQ F/frT8Ax9PP6ZFLOg1V/iidOIf3PxdH2KRZKNEXXz16p119aMBFEPHP1vpi3mfxQ CCfYlVrPs8nRHWa++5U54jde0T+ZlQ6Hl0CscoyAF0RJKlyUj21BX5dQv8LgxYPx KVRh3VQy1t7US50eexg6xdrG86+eILk= -----END CERTIFICATE-----Generated at Sat Apr 26 16:41:10 2025 by rpki-client