$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb9549c9-70d0-3b7d-9fad-22a5134a0864.roa File: bb9549c9-70d0-3b7d-9fad-22a5134a0864.roa (raw, json) Hash identifier: TT39NzquxYOlaXG2R3oSgHcZKC69Y8roMfSmyuXSmbI= Subject key identifier: AE:AF:F9:90:B2:6F:75:B0:ED:5F:6C:46:94:28:A3:1D:2A:A3:F9:77 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7853878324FE9C2F95F2400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb9549c9-70d0-3b7d-9fad-22a5134a0864.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.65.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:38:78:32:4f:e9:c2:f9:5f:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=13b32fab-0252-472d-bcbe-a408d3ff54a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c9:7f:4d:c3:62:c6:1a:e1:6b:b9:05:95:d3: d4:4b:b1:ca:ea:2f:2a:4c:0c:7b:27:0a:73:af:35: 8e:31:33:3b:e5:ec:ae:77:b1:4f:6d:3f:4f:18:35: ba:44:d7:8b:32:7e:33:fb:24:43:28:83:df:56:cd: 11:0b:29:02:f2:ad:88:3f:d2:a2:df:44:a5:ea:22: 7c:43:44:f8:6c:65:7b:d2:df:39:f0:dd:3d:1f:6c: 00:5c:55:cc:18:53:be:ad:70:28:2f:36:71:d5:51: 76:87:ce:f2:4e:ee:21:98:ec:c2:f9:2e:1d:0d:5d: 7b:de:85:39:bf:90:c1:ba:68:cd:72:d2:30:66:7b: d5:63:91:84:9a:fb:ce:3e:d9:03:98:54:a7:32:c8: d2:bd:2f:78:45:f5:f4:8f:e5:c1:ef:86:e3:b7:32: 29:ec:16:33:a5:41:14:d5:a7:25:1b:07:08:c4:e7: c8:44:6a:cb:fb:cd:4f:36:ed:db:33:ad:cc:3c:5d: f2:80:ce:38:a9:1f:d2:57:b2:f4:48:51:5e:42:a6: 08:3c:b5:28:81:a3:54:83:e4:4e:a7:17:f5:a0:ae: c5:47:c5:e3:80:80:13:7f:fb:e1:11:a4:e4:4e:1e: 88:38:ad:98:83:74:4d:86:02:81:9e:1d:4a:2a:e4: cf:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:AF:F9:90:B2:6F:75:B0:ED:5F:6C:46:94:28:A3:1D:2A:A3:F9:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bb9549c9-70d0-3b7d-9fad-22a5134a0864.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.65.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:10:d1:54:ca:99:b2:e7:0d:ea:d1:dd:c1:e3:1c:80:e5:67: 4f:60:3d:76:80:2a:12:9a:22:2d:b7:b5:c9:62:4e:f6:e8:4f: f4:2f:2c:f2:06:e6:bf:6a:b3:b0:c1:a7:d7:11:87:11:c4:27: 7c:44:b7:7e:b5:3d:19:7d:94:38:bd:5d:1c:fa:2e:0d:c5:68: 78:2a:30:ec:9b:a3:35:74:9c:af:02:98:ca:61:88:92:61:0e: 52:ae:74:d3:6c:e6:e6:3d:1a:b2:d1:90:1b:78:d4:1e:fa:73: 12:f5:40:2d:58:f8:32:a1:fc:bd:9e:90:3b:f2:99:a3:93:de: 0a:56:fe:2f:cf:48:f8:ba:40:fe:3c:d6:3a:96:15:f5:51:0a: 90:8a:df:e2:a6:02:18:10:4b:26:e5:29:30:5b:75:f7:67:0d: 18:b2:e4:f2:13:48:7f:ac:4c:c1:4b:3f:3d:54:6a:b0:b5:39: 8c:8f:b6:26:b0:6c:43:ad:02:32:58:86:db:43:6f:93:3b:8d: 79:9e:e8:2f:62:3f:24:e4:7b:50:00:8c:49:6e:99:57:14:e8: 7d:d8:d9:af:f6:9c:f5:32:7d:f7:46:63:28:38:63:77:11:5d: 70:7e:56:aa:30:c0:42:18:ff:0a:cb:60:f7:4e:9c:53:a6:d9: 59:44:30:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTh4Mk/pwvlfJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MTNiMzJmYWItMDI1Mi00NzJkLWJjYmUtYTQwOGQzZmY1NGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMl/TcNixhrha7kFldPUS7HK6i8qTAx7Jwpz rzWOMTM75eyud7FPbT9PGDW6RNeLMn4z+yRDKIPfVs0RCykC8q2IP9Ki30Sl6iJ8 Q0T4bGV70t858N09H2wAXFXMGFO+rXAoLzZx1VF2h87yTu4hmOzC+S4dDV173oU5 v5DBumjNctIwZnvVY5GEmvvOPtkDmFSnMsjSvS94RfX0j+XB74bjtzIp7BYzpUEU 1aclGwcIxOfIRGrL+81PNu3bM63MPF3ygM44qR/SV7L0SFFeQqYIPLUogaNUg+RO pxf1oK7FR8XjgIATf/vhEaTkTh6IOK2Yg3RNhgKBnh1KKuTP5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6v+ZCyb3Ww7V9sRpQoox0qo/l3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmI5NTQ5YzktNzBkMC0z YjdkLTlmYWQtMjJhNTEzNGEwODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYQ0VTKmbLnDerR3cHjHIDlZ09gPXaAKhKaIi23tcliTvboT/QvLPIG 5r9qs7DBp9cRhxHEJ3xEt361PRl9lDi9XRz6Lg3FaHgqMOybozV0nK8CmMphiJJh DlKudNNs5uY9GrLRkBt41B76cxL1QC1Y+DKh/L2ekDvymaOT3gpW/i/PSPi6QP48 1jqWFfVRCpCK3+KmAhgQSyblKTBbdfdnDRiy5PITSH+sTMFLPz1UarC1OYyPtiaw bEOtAjJYhttDb5M7jXme6C9iPyTke1AAjElumVcU6H3Y2a/2nPUyffdGYyg4Y3cR XXB+VqowwEIY/wrLYPdOnFOm2VlEMNg= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:01 2025 by rpki-client