$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8997a34-5a6b-3573-aade-ee0b8923b6c4.roa File: c8997a34-5a6b-3573-aade-ee0b8923b6c4.roa (raw, json) Hash identifier: 1OIHZ1oXg4Nq7fdZpJxPksv4Ik2ODNF8X/Dv5UbluHo= Subject key identifier: 35:BE:2B:78:34:0F:DE:EE:2B:5E:2B:09:B2:55:CE:3F:C0:DA:31:CD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784FCAAB9FB16FE0CA0C180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8997a34-5a6b-3573-aade-ee0b8923b6c4.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.138.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:fc:aa:b9:fb:16:fe:0c:a0:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=be225f08-d247-4251-ad8e-bcb0421f1cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:65:fc:83:4b:fc:1b:a3:e3:d3:19:a6:b2:60: 68:ef:53:de:27:fb:af:06:f8:8a:54:20:88:59:3b: 1f:7c:34:3f:98:86:30:e1:06:3b:16:a1:c0:d3:c4: a2:9e:6e:1e:95:24:7e:d7:ab:b9:43:a9:35:9d:97: ad:db:3e:36:7d:20:83:1a:a3:3b:94:fb:f9:46:ae: 5a:63:ea:48:9f:c3:50:5b:cb:d0:b7:a5:99:ab:cd: 8a:7e:98:d4:77:6a:0e:18:dd:32:20:83:65:ab:e0: 51:31:a6:ae:5c:e1:85:d6:47:9a:33:40:51:a2:63: db:6c:9f:d7:3b:e1:b9:14:62:bd:9e:d8:20:87:08: 01:8f:82:84:dc:3d:51:11:91:c7:e6:ff:3d:2f:dd: e6:8c:85:5d:2d:28:45:10:97:3d:76:70:af:4f:03: 22:60:cb:23:0b:61:49:99:34:f9:b8:4f:90:2e:57: 91:ab:0f:2a:a2:1a:0d:af:68:a1:7b:6f:35:da:01: b7:1f:10:7b:d5:5c:59:fd:03:09:04:c5:7e:fd:18: 5c:68:99:d7:df:91:5c:cd:6a:f1:2e:a8:08:82:10: 5e:8a:56:8b:4c:25:4c:99:b8:ef:c9:fe:53:81:f8: 77:ac:a0:e3:f2:74:3a:28:e3:7c:06:dc:85:75:90: 08:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:BE:2B:78:34:0F:DE:EE:2B:5E:2B:09:B2:55:CE:3F:C0:DA:31:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c8997a34-5a6b-3573-aade-ee0b8923b6c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.138.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:d4:99:12:d9:51:73:1d:09:59:7f:1a:18:7f:0f:aa:79:38: 7c:e1:35:67:ef:23:13:f4:62:70:e7:e2:1e:94:c7:2c:4f:8d: 33:aa:d8:6b:5b:d8:7b:c0:5e:ae:0d:d8:82:e6:2d:81:34:0e: 2b:c7:3a:03:bb:b8:3e:a0:59:54:ca:82:48:9b:63:3f:d3:bb: 5c:22:82:ff:a5:92:c9:5c:07:6b:d0:24:24:f2:80:76:46:b7: ae:32:01:6e:d9:de:e3:c7:5d:ee:8f:a3:f5:0c:96:31:0f:c2: 5f:09:94:fd:82:73:72:58:ff:3f:64:83:5b:89:73:a9:3a:c7: 12:e4:ca:4b:f4:e6:81:6a:79:09:1a:b3:c7:a4:fb:17:1d:63: 02:f2:14:19:bb:75:a9:37:09:e0:0f:47:a0:0b:29:bb:68:5f: 51:00:61:5a:d3:ad:d7:df:2e:d6:55:89:c5:7d:d1:fa:0a:33: 29:a6:69:b0:4a:c3:38:2b:71:6b:1a:18:38:cf:bb:e5:4a:8f: 60:ee:ab:5b:4b:30:44:f9:0d:24:77:50:64:79:3a:0d:24:83: 55:fb:74:c0:a1:4c:13:a6:18:bb:ec:73:f5:13:3d:7f:cd:0d: 33:a2:78:9c:ed:cc:03:77:40:e9:cc:de:33:2f:2b:cf:9e:26: 99:b0:90:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPyqufsW/gygwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YmUyMjVmMDgtZDI0Ny00MjUxLWFkOGUtYmNiMDQyMWYxY2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGX8g0v8G6Pj0xmmsmBo71PeJ/uvBviKVCCI WTsffDQ/mIYw4QY7FqHA08Sinm4elSR+16u5Q6k1nZet2z42fSCDGqM7lPv5Rq5a Y+pIn8NQW8vQt6WZq82KfpjUd2oOGN0yIINlq+BRMaauXOGF1keaM0BRomPbbJ/X O+G5FGK9ntgghwgBj4KE3D1REZHH5v89L93mjIVdLShFEJc9dnCvTwMiYMsjC2FJ mTT5uE+QLleRqw8qohoNr2ihe2812gG3HxB71VxZ/QMJBMV+/RhcaJnX35FczWrx LqgIghBeilaLTCVMmbjvyf5Tgfh3rKDj8nQ6KON8BtyFdZAI0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDW+K3g0D97uK14rCbJVzj/A2jHNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzg5OTdhMzQtNWE2Yi0z NTczLWFhZGUtZWUwYjg5MjNiNmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIopQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjUmRLZUXMdCVl/Ghh/D6p5OHzhNWfvIxP0YnDn4h6UxyxPjTOq2Gtb 2HvAXq4N2ILmLYE0DivHOgO7uD6gWVTKgkibYz/Tu1wigv+lkslcB2vQJCTygHZG t64yAW7Z3uPHXe6Po/UMljEPwl8JlP2Cc3JY/z9kg1uJc6k6xxLkykv05oFqeQka s8ek+xcdYwLyFBm7dak3CeAPR6ALKbtoX1EAYVrTrdffLtZVicV90foKMymmabBK wzgrcWsaGDjPu+VKj2Duq1tLMET5DSR3UGR5Og0kg1X7dMChTBOmGLvsc/UTPX/N DTOieJztzAN3QOnM3jMvK8+eJpmwkLg= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:51 2025 by rpki-client