$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b548a6a1-7d1a-3891-845b-408572a16882.roa File: b548a6a1-7d1a-3891-845b-408572a16882.roa (raw, json) Hash identifier: a5mluxLNtbO5RSvfmfYO7xvRE+9IUN3RoLdMnV1h6TE= Subject key identifier: BC:BD:D2:C7:30:DD:DD:6A:BB:4A:75:48:3D:B5:11:C5:5C:60:45:1C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784E60D10E4088A0B765E40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b548a6a1-7d1a-3891-845b-408572a16882.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.99.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e6:0d:10:e4:08:8a:0b:76:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=d0f5b355-5e9e-42a9-b4d7-5c51ce3df0d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:43:6a:ed:c1:9c:d4:bc:ed:2d:f3:3d:9c:e4: 2a:64:cb:7f:38:70:e4:c2:39:10:9f:db:0c:5f:6d: 1f:b6:fc:fd:29:a4:a0:64:10:71:c2:ac:f9:f6:dd: 36:3f:bf:fd:16:43:0b:86:05:60:e9:3a:27:ce:16: 91:9e:95:41:97:e5:e1:23:b0:0e:9e:4c:5b:87:4f: 5a:12:75:ae:e2:35:28:16:95:e6:dc:1f:dd:3b:19: ea:97:1b:96:71:7e:a2:e4:1f:e8:0f:20:8c:1e:fb: d7:f7:8b:d1:70:43:57:dc:f9:35:c1:f8:46:ff:47: 90:7c:18:a6:14:0e:be:22:05:85:bf:7e:dd:45:82: fb:87:0d:47:f7:4d:f3:ca:2d:81:fb:50:66:ae:9f: fc:50:8b:c6:e8:17:a6:d9:2d:f6:05:97:91:88:96: cb:47:8a:52:c1:c4:c8:96:2d:7d:57:7f:c6:10:da: eb:5f:d1:1b:06:93:dd:12:9a:67:3d:57:1f:8b:cc: b1:44:d1:36:7d:60:cc:ac:18:cb:1b:e4:5a:b0:1e: 80:cf:1b:a3:96:3f:f5:9a:c2:f9:b6:e8:cf:bb:4d: 20:bd:a1:c2:f7:28:82:72:b0:b6:fe:38:85:b5:78: a0:21:d0:64:39:f0:52:5d:78:ff:48:be:1a:2f:db: 51:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:BD:D2:C7:30:DD:DD:6A:BB:4A:75:48:3D:B5:11:C5:5C:60:45:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b548a6a1-7d1a-3891-845b-408572a16882.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.99.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:2c:3e:8b:c2:ce:5a:87:e3:7b:fe:5e:18:b0:c8:79:74:3e: 0e:0c:bd:00:29:09:53:6a:70:40:2f:68:a3:37:34:e7:86:17: 34:8c:f3:e2:0e:d9:60:02:95:bb:cb:cf:2c:fd:22:5d:4f:aa: bb:74:20:fb:d3:19:47:e8:c6:21:77:29:b5:5a:9c:ea:7b:34: 9e:e9:1c:53:c6:eb:7f:1f:da:3b:c7:68:95:33:30:dd:db:e2: 00:2c:b1:ad:43:3a:6f:8b:9c:8e:00:4e:21:9b:77:ad:46:d9: 9c:0f:4f:85:3a:6f:95:2c:7f:05:4c:d3:73:db:2f:c4:fe:d3: 16:e5:87:7e:02:6f:cc:01:5e:55:01:be:16:67:2e:1e:b0:fe: 0a:c3:3d:d1:5c:a4:44:5e:fe:63:b8:94:74:09:0a:e4:4f:b9: 00:38:14:f0:6d:4f:7f:7c:60:02:15:1b:e8:bf:60:75:cd:69: 04:26:b4:d7:79:51:ea:17:6c:9c:87:f1:86:6a:c5:21:91:65: 9c:55:07:f1:50:01:0e:79:7b:49:aa:a6:85:b2:75:8b:6f:b8: 71:de:01:cc:75:3b:b7:af:02:d7:ce:a6:1c:19:d5:01:c7:e7: d8:b9:18:74:77:08:3c:2b:b2:8d:f6:f1:b3:bf:87:32:c0:7a: 2b:9e:6a:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOYNEOQIigt2XkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZDBmNWIzNTUtNWU5ZS00MmE5LWI0ZDctNWM1MWNlM2RmMGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUNq7cGc1LztLfM9nOQqZMt/OHDkwjkQn9sM X20ftvz9KaSgZBBxwqz59t02P7/9FkMLhgVg6TonzhaRnpVBl+XhI7AOnkxbh09a EnWu4jUoFpXm3B/dOxnqlxuWcX6i5B/oDyCMHvvX94vRcENX3Pk1wfhG/0eQfBim FA6+IgWFv37dRYL7hw1H903zyi2B+1Bmrp/8UIvG6Bem2S32BZeRiJbLR4pSwcTI li19V3/GENrrX9EbBpPdEppnPVcfi8yxRNE2fWDMrBjLG+RasB6Azxujlj/1msL5 tujPu00gvaHC9yiCcrC2/jiFtXigIdBkOfBSXXj/SL4aL9tRiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLy90scw3d1qu0p1SD21EcVcYEUcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjU0OGE2YTEtN2QxYS0z ODkxLTg0NWItNDA4NTcyYTE2ODgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQsPovCzlqH43v+XhiwyHl0Pg4MvQApCVNqcEAvaKM3NOeGFzSM8+IO 2WAClbvLzyz9Il1Pqrt0IPvTGUfoxiF3KbVanOp7NJ7pHFPG638f2jvHaJUzMN3b 4gAssa1DOm+LnI4ATiGbd61G2ZwPT4U6b5UsfwVM03PbL8T+0xblh34Cb8wBXlUB vhZnLh6w/grDPdFcpERe/mO4lHQJCuRPuQA4FPBtT398YAIVG+i/YHXNaQQmtNd5 UeoXbJyH8YZqxSGRZZxVB/FQAQ55e0mqpoWydYtvuHHeAcx1O7evAtfOphwZ1QHH 59i5GHR3CDwrso328bO/hzLAeiueaqw= -----END CERTIFICATE-----Generated at Sat Apr 26 15:02:01 2025 by rpki-client