$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d02dcfe9-0597-36d8-83dd-4ce7a4ad6ed1.roa File: d02dcfe9-0597-36d8-83dd-4ce7a4ad6ed1.roa (raw, json) Hash identifier: IBfzfwo12D0c0nP3luNVArXU1c/ZTMBdkhq1ra+xM/Q= Subject key identifier: 4D:9A:2B:39:95:F5:0C:B6:56:A7:C9:F2:4D:72:73:7B:2B:93:FC:36 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78537E060FCA3AB60E597F0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d02dcfe9-0597-36d8-83dd-4ce7a4ad6ed1.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.177.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:37:e0:60:fc:a3:ab:60:e5:97:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=bbf00c54-af94-4d3d-aa1f-75abe2fe368c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fa:d3:97:d8:8c:91:a6:e2:dc:87:9b:65:5c: a9:fe:3f:98:55:8c:bb:9d:71:72:e6:ca:10:5c:49: 12:a6:92:49:fd:2d:70:49:3c:8f:6c:51:e8:ae:8b: 28:12:e8:52:79:21:ea:88:fc:cb:21:a8:bf:37:71: b6:46:08:a8:90:ed:46:b4:03:b1:01:92:f6:ab:e0: c0:df:39:65:43:96:06:30:db:f6:cc:d2:3b:e8:4b: 3e:1a:fd:1d:47:8a:6a:f2:8d:e9:d7:c3:d5:14:26: 29:bd:ae:6e:d4:82:7c:1e:b8:ef:2d:d3:d8:ae:93: 74:b2:27:a8:5a:ee:f2:99:4b:b3:af:51:9a:8a:04: 0f:12:8f:46:e5:4c:fb:d3:f4:a4:8a:73:87:1d:cd: 7a:22:9e:12:e4:2e:06:44:3f:b2:24:b4:60:6c:01: f3:d8:fd:3e:93:42:d8:89:dd:f4:40:a9:5f:c1:3b: e0:a1:fc:34:75:de:e1:ed:10:4c:25:81:fd:61:ee: 46:cb:11:13:c2:a8:63:00:7f:c7:fa:b0:6f:96:dc: 7e:04:1c:0c:fe:64:b2:76:a1:ff:b6:14:8b:7f:9a: f0:5c:e1:f4:f2:0e:32:57:9a:0b:ba:19:4d:ce:08: bd:f8:55:ab:35:52:77:0c:2c:5f:54:90:da:45:b3: 61:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:9A:2B:39:95:F5:0C:B6:56:A7:C9:F2:4D:72:73:7B:2B:93:FC:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d02dcfe9-0597-36d8-83dd-4ce7a4ad6ed1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.177.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:dd:89:10:6e:a4:c0:4a:0a:2b:12:8f:87:50:88:f4:6f:8f: f8:52:c3:98:6e:17:2b:95:f6:85:42:1b:cc:61:05:a6:fc:be: 18:bf:00:33:7a:4f:1b:de:f7:8e:ee:3a:18:94:50:50:e5:8d: 9f:ec:d6:25:89:15:90:22:2c:73:6c:29:45:57:47:ba:e2:be: 32:32:4a:fd:eb:03:41:c3:82:cb:b1:29:1c:14:48:19:37:ab: 5a:6a:42:2a:41:7a:08:86:ed:cb:c3:b6:9f:4b:a0:6e:06:11: 84:28:78:23:b1:c4:52:33:8c:8b:11:ef:7a:75:15:a2:34:dc: 93:c6:3b:25:f6:3e:8f:68:8b:11:16:c9:e7:43:60:a5:7d:34: 90:2d:46:28:94:b8:43:55:38:33:5a:95:2e:2f:35:07:53:86: fd:b5:4e:c8:b0:5c:ba:10:aa:be:0c:0c:cc:de:f9:e4:d2:84: 95:e5:49:43:48:59:e0:b6:94:ed:a6:47:28:76:23:fb:a1:90: ff:99:fb:b2:19:bc:6f:58:bd:2d:19:93:00:c4:c4:c5:9a:72: ae:50:b5:9e:82:1a:02:9b:dc:7b:2e:a7:36:ad:cd:12:23:c3: 0a:f3:e1:2f:c3:42:fd:1a:23:29:40:03:4b:09:96:9a:86:5d: 42:14:b5:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTfgYPyjq2Dll/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YmJmMDBjNTQtYWY5NC00ZDNkLWFhMWYtNzVhYmUyZmUzNjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfrTl9iMkabi3IebZVyp/j+YVYy7nXFy5soQ XEkSppJJ/S1wSTyPbFHorosoEuhSeSHqiPzLIai/N3G2RgiokO1GtAOxAZL2q+DA 3zllQ5YGMNv2zNI76Es+Gv0dR4pq8o3p18PVFCYpva5u1IJ8HrjvLdPYrpN0sieo Wu7ymUuzr1GaigQPEo9G5Uz70/SkinOHHc16Ip4S5C4GRD+yJLRgbAHz2P0+k0LY id30QKlfwTvgofw0dd7h7RBMJYH9Ye5GyxETwqhjAH/H+rBvltx+BBwM/mSydqH/ thSLf5rwXOH08g4yV5oLuhlNzgi9+FWrNVJ3DCxfVJDaRbNhoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2aKzmV9Qy2VqfJ8k1yc3srk/w2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDAyZGNmZTktMDU5Ny0z NmQ4LTgzZGQtNGNlN2E0YWQ2ZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIrF8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTdiRBupMBKCisSj4dQiPRvj/hSw5huFyuV9oVCG8xhBab8vhi/ADN6 Txve947uOhiUUFDljZ/s1iWJFZAiLHNsKUVXR7rivjIySv3rA0HDgsuxKRwUSBk3 q1pqQipBegiG7cvDtp9LoG4GEYQoeCOxxFIzjIsR73p1FaI03JPGOyX2Po9oixEW yedDYKV9NJAtRiiUuENVODNalS4vNQdThv21TsiwXLoQqr4MDMze+eTShJXlSUNI WeC2lO2mRyh2I/uhkP+Z+7IZvG9YvS0ZkwDExMWacq5QtZ6CGgKb3HsupzatzRIj wwrz4S/DQv0aIylAA0sJlpqGXUIUtTo= -----END CERTIFICATE-----Generated at Sat Apr 26 16:06:19 2025 by rpki-client