$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c6979ec1-69b7-3a1b-b393-999e66b4ea62.roa File: c6979ec1-69b7-3a1b-b393-999e66b4ea62.roa (raw, json) Hash identifier: M1toE1cJe8aJyBPuXYfQTYQUTra5KD/YIp3bfA7BA44= Subject key identifier: 91:0C:17:6A:DB:0E:C5:C6:6E:A3:EA:0B:17:80:31:AA:C3:53:5B:0B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78500D361E1B50733E80880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c6979ec1-69b7-3a1b-b393-999e66b4ea62.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.142.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:00:d3:61:e1:b5:07:33:e8:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=a7030d07-f652-4160-a5fa-84eb71642fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f8:9a:78:33:a8:fd:9c:29:2f:49:6f:af:c1: 28:ff:f2:46:7c:14:9b:3a:6f:fe:6f:d4:6d:f3:93: e0:6c:08:da:58:5f:76:ea:96:51:72:09:e1:a1:19: 3e:e3:79:f2:8d:00:b4:11:db:5d:73:31:70:78:be: 3e:9f:4d:f3:56:71:6d:bb:00:f9:53:78:cb:24:e0: a4:8a:94:7a:ce:4f:dd:64:ad:22:b2:6a:eb:02:28: 62:96:e6:dd:cc:b5:39:1c:76:ab:54:a9:08:29:2f: a2:2e:70:b1:b8:50:49:98:ab:db:bc:64:2d:7c:e4: 52:9d:81:bd:70:e6:33:09:3f:6d:cd:7b:29:de:34: b0:88:79:39:19:97:95:1f:16:80:dc:18:85:16:53: 8b:f5:ca:ab:54:2e:28:b2:15:88:c3:29:8a:65:f0: bb:1f:de:92:99:34:ef:d8:ba:9d:e1:23:95:90:bf: c7:3f:88:9e:88:0d:cb:98:a9:5c:36:1b:1d:74:d6: 8d:fa:29:37:81:71:59:e4:d3:06:80:67:d5:74:eb: fa:08:1f:7c:7f:ba:ce:d3:39:4b:e1:7e:dc:f0:6d: eb:bc:33:5b:ea:11:db:64:b8:d4:55:54:a4:29:e7: 09:4f:0d:21:d9:10:25:89:76:bf:dc:33:93:84:db: bd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:0C:17:6A:DB:0E:C5:C6:6E:A3:EA:0B:17:80:31:AA:C3:53:5B:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c6979ec1-69b7-3a1b-b393-999e66b4ea62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.142.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:94:a0:80:0f:64:02:81:5d:41:e4:f4:c3:41:8f:c5:32:d3: a3:87:25:e8:c9:74:92:04:b8:12:4e:f4:05:22:07:7e:8e:3c: 31:1a:0a:cc:fb:63:3d:b2:45:61:86:bc:23:56:19:24:26:69: 77:78:5e:74:56:ae:ac:33:a8:99:38:50:1b:c6:20:14:65:41: 68:c5:b0:b6:23:72:6a:cd:34:d7:6a:b9:0b:9f:e4:dd:05:ba: 4a:75:8b:cb:0e:23:cd:03:b3:b6:84:57:9c:cc:ca:b6:7b:f8: f9:4f:0a:8e:30:f0:62:12:90:47:e2:d4:58:97:13:fc:69:2d: 00:af:c7:7f:ba:b1:96:90:b7:93:ec:02:bb:8a:8c:b8:a3:71: 1f:a0:62:59:52:d9:0e:4f:27:18:9b:3d:d5:4a:d8:3a:52:e9: 5c:5c:f6:c9:52:74:65:fc:18:0f:93:40:fc:57:3c:8c:01:0d: d8:97:c1:f1:6e:8c:d9:79:79:88:89:2c:9c:83:0d:7c:08:b7: f6:34:6a:c7:37:4f:ef:c1:83:93:6a:76:39:53:74:08:29:a8: 20:f6:aa:eb:2a:26:c4:8e:7e:41:c5:90:d2:4e:02:5f:ef:26: d7:51:93:e7:b2:60:5c:ab:58:42:bf:fd:f2:b4:60:60:98:fb: 97:44:81:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQDTYeG1BzPoCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YTcwMzBkMDctZjY1Mi00MTYwLWE1ZmEtODRlYjcxNjQyZmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmviaeDOo/ZwpL0lvr8Eo//JGfBSbOm/+b9Rt 85PgbAjaWF926pZRcgnhoRk+43nyjQC0EdtdczFweL4+n03zVnFtuwD5U3jLJOCk ipR6zk/dZK0ismrrAihilubdzLU5HHarVKkIKS+iLnCxuFBJmKvbvGQtfORSnYG9 cOYzCT9tzXsp3jSwiHk5GZeVHxaA3BiFFlOL9cqrVC4oshWIwymKZfC7H96SmTTv 2Lqd4SOVkL/HP4ieiA3LmKlcNhsddNaN+ik3gXFZ5NMGgGfVdOv6CB98f7rO0zlL 4X7c8G3rvDNb6hHbZLjUVVSkKecJTw0h2RAliXa/3DOThNu9ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEMF2rbDsXGbqPqCxeAMarDU1sLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzY5NzllYzEtNjliNy0z YTFiLWIzOTMtOTk5ZTY2YjRlYTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIo5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSUoIAPZAKBXUHk9MNBj8Uy06OHJejJdJIEuBJO9AUiB36OPDEaCsz7 Yz2yRWGGvCNWGSQmaXd4XnRWrqwzqJk4UBvGIBRlQWjFsLYjcmrNNNdquQuf5N0F ukp1i8sOI80Ds7aEV5zMyrZ7+PlPCo4w8GISkEfi1FiXE/xpLQCvx3+6sZaQt5Ps AruKjLijcR+gYllS2Q5PJxibPdVK2DpS6Vxc9slSdGX8GA+TQPxXPIwBDdiXwfFu jNl5eYiJLJyDDXwIt/Y0asc3T+/Bg5NqdjlTdAgpqCD2qusqJsSOfkHFkNJOAl/v JtdRk+eyYFyrWEK//fK0YGCY+5dEgTI= -----END CERTIFICATE-----Generated at Sat Apr 26 16:04:24 2025 by rpki-client