$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5734b89-ea00-32ee-bb42-a159a0ed862a.roa File: c5734b89-ea00-32ee-bb42-a159a0ed862a.roa (raw, json) Hash identifier: OaJkcz2LMS/eD5mzBzrvv8Ldeb6w+mxaau1JSxnjE9o= Subject key identifier: A0:91:CB:FC:06:48:8D:7E:D2:DC:A5:A8:E2:7B:41:24:C6:1E:E1:89 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BB76AB15986FB58C6F7880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5734b89-ea00-32ee-bb42-a159a0ed862a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 34.107.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:76:ab:15:98:6f:b5:8c:6f:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=a3626e83-5d58-4dc7-be6e-dbf04fd58b39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f7:25:ab:d9:08:67:d7:c1:ee:a6:74:8c:15: 4c:56:92:9c:61:16:11:a4:5b:44:27:bf:ae:73:89: e8:a9:bd:e8:ab:a8:1c:8d:76:d2:7c:74:e1:b4:dd: 7b:d6:e8:63:24:fa:fb:f6:6a:c7:44:89:01:97:66: 4a:ee:79:91:4c:d2:14:b2:2d:c9:20:23:8a:03:86: b9:4c:ce:15:4c:e9:5f:44:1f:72:f0:67:68:91:6b: 4d:79:67:39:2e:1d:b4:aa:e3:9b:33:bb:a7:96:48: f3:50:f6:d1:fc:25:78:a4:a4:dc:d4:fd:5b:4f:85: d8:f5:2f:de:90:ea:cc:9b:77:b2:e2:51:59:60:21: 98:18:78:34:3d:7e:7e:04:1f:9d:fb:73:2d:cd:03: 3c:51:50:f1:89:86:d3:80:bc:fb:c0:88:71:a9:8f: f5:be:f2:83:b7:4e:19:32:0f:2f:ff:0f:61:97:77: 9a:47:5e:b7:6c:ab:07:b2:a9:6c:d1:8d:07:be:29: 94:40:2d:0b:34:a0:4b:3c:4b:af:0a:36:62:44:a7: 21:fe:f0:db:17:d8:75:ea:ec:3d:74:46:4a:23:fa: 17:1c:aa:2b:d9:94:86:a6:54:4f:db:93:51:29:f5: ff:31:e6:9d:55:b7:09:cf:ce:2f:83:07:ec:eb:a3: 4e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:91:CB:FC:06:48:8D:7E:D2:DC:A5:A8:E2:7B:41:24:C6:1E:E1:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c5734b89-ea00-32ee-bb42-a159a0ed862a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.107.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:cb:89:d8:9d:cb:85:1c:a6:1f:80:04:83:c9:cd:c8:af:40: f0:47:34:ca:1b:0d:b3:a8:fb:26:3d:57:6f:79:6e:9b:9a:c3: 14:9e:40:24:3b:31:2c:af:aa:aa:04:6e:cb:10:bb:45:9e:34: 21:c5:6c:a2:e3:a3:0f:c4:a8:87:8c:2b:70:6f:fa:6f:ba:39: 01:9c:06:9b:a2:76:e0:da:ef:c3:9f:f7:aa:dd:bf:5c:68:d2: 14:1a:bf:e5:b4:63:81:d7:83:0f:57:3a:56:a2:c1:45:c1:26: 65:02:7a:26:8a:03:66:11:69:5c:37:fd:65:b4:12:5e:e4:8e: 7c:73:eb:33:c0:38:fe:f7:80:28:48:ae:62:e5:ae:d5:ff:62: 0e:cd:64:d5:76:99:51:98:fd:6b:f2:9a:2d:ed:17:d0:32:aa: 89:f7:d9:dd:03:39:26:97:ef:37:1a:bb:a8:72:31:72:78:62: d5:c8:06:12:58:6c:9e:3f:df:f3:fa:dd:5c:2d:e1:93:bf:1b: f4:79:76:e4:26:c0:f2:25:37:71:65:19:53:92:43:1b:0f:44: c5:2b:a0:16:e2:74:b6:c3:7d:28:94:69:35:85:ba:a7:7f:ea: cf:20:36:de:da:f6:9c:05:13:64:a4:83:27:17:f5:cd:61:56: 4e:52:55:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku3arFZhvtYxveIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YTM2MjZlODMtNWQ1OC00ZGM3LWJlNmUtZGJmMDRmZDU4YjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPclq9kIZ9fB7qZ0jBVMVpKcYRYRpFtEJ7+u c4noqb3oq6gcjXbSfHThtN171uhjJPr79mrHRIkBl2ZK7nmRTNIUsi3JICOKA4a5 TM4VTOlfRB9y8GdokWtNeWc5Lh20quObM7unlkjzUPbR/CV4pKTc1P1bT4XY9S/e kOrMm3ey4lFZYCGYGHg0PX5+BB+d+3MtzQM8UVDxiYbTgLz7wIhxqY/1vvKDt04Z Mg8v/w9hl3eaR163bKsHsqls0Y0HvimUQC0LNKBLPEuvCjZiRKch/vDbF9h16uw9 dEZKI/oXHKor2ZSGplRP25NRKfX/MeadVbcJz84vgwfs66NOpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCRy/wGSI1+0tylqOJ7QSTGHuGJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzU3MzRiODktZWEwMC0z MmVlLWJiNDItYTE1OWEwZWQ4NjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjLididy4Ucph+ABIPJzcivQPBHNMobDbOo+yY9V295bpuawxSeQCQ7 MSyvqqoEbssQu0WeNCHFbKLjow/EqIeMK3Bv+m+6OQGcBpuiduDa78Of96rdv1xo 0hQav+W0Y4HXgw9XOlaiwUXBJmUCeiaKA2YRaVw3/WW0El7kjnxz6zPAOP73gChI rmLlrtX/Yg7NZNV2mVGY/Wvymi3tF9Ayqon32d0DOSaX7zcau6hyMXJ4YtXIBhJY bJ4/3/P63Vwt4ZO/G/R5duQmwPIlN3FlGVOSQxsPRMUroBbidLbDfSiUaTWFuqd/ 6s8gNt7a9pwFE2SkgycX9c1hVk5SVRM= -----END CERTIFICATE-----Generated at Sat Apr 26 18:11:07 2025 by rpki-client