$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca68969c-6bab-3a18-b3f8-70281e402c94.roa File: ca68969c-6bab-3a18-b3f8-70281e402c94.roa (raw, json) Hash identifier: kK5N2Vw4HTBCnEU6VYjcQXTGYJKbr2oPS6SgGWCW7XI= Subject key identifier: 9A:1C:6B:B9:43:62:DE:B2:1A:02:C3:9E:FF:E7:68:80:4C:0F:A3:A4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784E40BB19B156C4EE8D3C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca68969c-6bab-3a18-b3f8-70281e402c94.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.65.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e4:0b:b1:9b:15:6c:4e:e8:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=5de08628-9a69-482b-b207-54d1d8f87a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:03:a9:bf:b7:0b:de:08:d1:60:59:d8:f5:d1: f4:e0:78:a0:11:7d:ac:ab:2d:e1:2b:90:b9:a9:92: fc:ff:9e:3c:05:38:7b:dd:6c:33:d7:81:78:26:63: a7:4f:92:d8:73:17:b2:ab:18:6a:7a:f6:1c:fc:32: c1:ee:23:5d:fc:5d:a9:1a:b0:fe:32:a7:cf:a3:e5: 03:f7:8a:c8:d6:77:4f:90:35:ee:fa:97:9f:61:56: ca:88:42:20:03:86:25:f7:4d:b4:c7:d5:b1:5d:59: e1:22:63:09:67:f7:39:85:79:a3:64:bf:13:f9:bc: cc:5b:1a:5a:96:9f:d5:82:19:61:08:09:cd:6f:fb: 60:59:67:ac:e6:82:90:d9:bb:48:66:be:25:5f:17: a6:c3:37:42:d1:7a:1d:4a:40:9a:64:67:9d:9e:f4: b9:c4:1e:fa:87:04:c9:19:01:2c:1d:0e:1e:87:a3: 62:64:11:40:00:64:93:ec:34:ca:01:ba:e9:d9:89: eb:4d:11:6e:08:bd:ce:3c:e2:84:33:7e:e4:92:a2: 12:c8:ed:32:e1:cc:79:04:05:2a:2f:fe:f8:0e:ff: f3:34:97:87:20:ea:e3:a0:29:6a:84:64:b3:0b:f4: 76:69:eb:54:70:ad:f4:0b:85:3a:55:5e:e9:b2:ce: eb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:1C:6B:B9:43:62:DE:B2:1A:02:C3:9E:FF:E7:68:80:4C:0F:A3:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca68969c-6bab-3a18-b3f8-70281e402c94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.65.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:8b:25:87:a9:58:5d:2b:ba:3f:66:07:c1:55:08:e5:02:dd: a2:ea:cc:00:ab:26:4f:77:d9:e8:0a:ba:15:1d:0f:cf:b1:9d: b5:a8:fa:22:0a:10:0e:c2:ca:58:72:e5:f4:77:3c:6e:be:74: 0e:68:49:3f:73:b9:07:a8:f2:f7:d8:73:5f:56:62:fa:56:fb: 9a:3e:e3:85:fd:f1:2c:64:73:eb:b3:01:4d:d5:f8:42:8b:3b: 68:92:c9:26:31:a9:b2:60:f0:da:da:8f:df:20:b8:e0:62:fe: 99:b2:10:61:71:21:9a:b0:0b:9c:b8:d4:53:bd:05:85:ab:91: f6:a4:aa:c6:f7:a2:84:00:d7:87:a0:bf:1f:cf:7d:03:c9:e2: 64:b2:32:26:02:78:73:39:24:24:a4:b7:8a:f8:db:23:80:90: 07:2e:ac:6b:23:89:4e:bb:de:a7:43:4f:a5:23:aa:92:24:56: e5:a0:20:e6:76:12:12:08:74:83:54:88:60:76:37:4b:e4:e9: 37:aa:4a:5f:90:57:1d:b0:8a:e8:fc:45:b2:e3:7d:a1:5e:7f: c4:f5:85:20:ff:3f:5d:42:55:b4:83:5b:20:41:2a:1b:88:4f: ef:08:c6:15:10:c6:51:ab:41:74:34:84:bc:73:9a:49:2b:20: 64:87:fa:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOQLsZsVbE7o08AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NWRlMDg2MjgtOWE2OS00ODJiLWIyMDctNTRkMWQ4Zjg3YTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQOpv7cL3gjRYFnY9dH04HigEX2sqy3hK5C5 qZL8/548BTh73Wwz14F4JmOnT5LYcxeyqxhqevYc/DLB7iNd/F2pGrD+MqfPo+UD 94rI1ndPkDXu+pefYVbKiEIgA4Yl9020x9WxXVnhImMJZ/c5hXmjZL8T+bzMWxpa lp/VghlhCAnNb/tgWWes5oKQ2btIZr4lXxemwzdC0XodSkCaZGednvS5xB76hwTJ GQEsHQ4eh6NiZBFAAGST7DTKAbrp2YnrTRFuCL3OPOKEM37kkqISyO0y4cx5BAUq L/74Dv/zNJeHIOrjoClqhGSzC/R2aetUcK30C4U6VV7pss7rHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoca7lDYt6yGgLDnv/naIBMD6OkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2E2ODk2OWMtNmJhYi0z YTE4LWIzZjgtNzAyODFlNDAyYzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqLJYepWF0ruj9mB8FVCOUC3aLqzACrJk932egKuhUdD8+xnbWo+iIK EA7Cylhy5fR3PG6+dA5oST9zuQeo8vfYc19WYvpW+5o+44X98Sxkc+uzAU3V+EKL O2iSySYxqbJg8Nraj98guOBi/pmyEGFxIZqwC5y41FO9BYWrkfakqsb3ooQA14eg vx/PfQPJ4mSyMiYCeHM5JCSkt4r42yOAkAcurGsjiU673qdDT6UjqpIkVuWgIOZ2 EhIIdINUiGB2N0vk6TeqSl+QVx2wiuj8RbLjfaFef8T1hSD/P11CVbSDWyBBKhuI T+8IxhUQxlGrQXQ0hLxzmkkrIGSH+ok= -----END CERTIFICATE-----Generated at Sat Apr 26 16:18:18 2025 by rpki-client