$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d33260b8-8c3c-363f-a13e-61c4caf0b57f.roa File: d33260b8-8c3c-363f-a13e-61c4caf0b57f.roa (raw, json) Hash identifier: ylCcajIu3KiZqbhHFYPnJtxxzVtzpXJZEQtFj7wZdm4= Subject key identifier: D4:F9:50:43:37:A5:E2:F4:11:C5:4C:D7:FA:E7:B6:CF:00:7C:08:19 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784C8BF7F514F8081490E00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d33260b8-8c3c-363f-a13e-61c4caf0b57f.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.153.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:c8:bf:7f:51:4f:80:81:49:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=effd602c-ec65-404c-ae9b-3690cd0742af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:20:52:69:54:a0:9e:49:30:ae:f0:77:85:8b: d1:e3:1c:de:24:b3:a0:0d:de:72:ff:c0:49:9d:af: 1d:d0:b2:0a:09:13:ed:9f:8f:3d:db:a4:4a:14:f5: 8d:6d:5d:01:3a:12:bb:ae:28:44:11:f2:98:fc:45: 78:30:bb:17:3a:74:2a:10:b6:78:57:65:c0:d7:e1: 1b:7d:2f:33:bb:92:ee:17:9c:18:b6:8d:25:24:22: d5:3f:f8:34:4c:a0:1c:f8:cc:9f:4e:8a:2c:1d:50: ba:50:b9:8d:92:fb:9a:42:3b:87:05:5e:e6:17:f1: b0:0b:fb:fa:bc:3d:15:bf:ae:c2:80:19:7a:31:f5: 90:e1:47:04:79:d0:2b:c9:22:52:22:58:f4:a8:8c: 88:1a:26:cc:7d:32:21:bf:84:00:70:85:86:f1:98: e7:f8:43:cc:31:33:f0:15:ff:84:59:d9:25:b8:d6: 00:71:bc:6f:59:a5:67:82:3a:3c:be:d4:5d:8c:3c: 4c:a2:eb:5b:b5:33:89:7e:ca:be:4c:1b:c4:85:6c: 76:0f:d9:c8:34:94:68:13:c5:08:ac:6b:3e:0f:c9: 72:2b:f2:3d:07:ad:52:fb:08:40:d9:4a:d0:72:92: 6a:c8:43:83:11:9a:1b:fc:46:00:10:88:4b:b6:6c: 66:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F9:50:43:37:A5:E2:F4:11:C5:4C:D7:FA:E7:B6:CF:00:7C:08:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d33260b8-8c3c-363f-a13e-61c4caf0b57f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.153.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:d3:f7:56:71:89:fa:17:3e:6d:5b:0b:98:d2:7d:28:07:18: 04:f2:88:db:c7:c5:f2:a1:8b:9e:2d:d5:64:94:8d:8f:e5:b5: 6f:3c:7c:e8:b1:8d:7e:c1:36:3d:a7:31:6d:fa:81:c7:22:3e: a2:37:bb:e0:70:13:f5:50:f8:ee:9c:04:65:8a:3f:9b:93:6e: fc:b9:90:04:60:c9:c7:44:56:e1:6a:94:6d:a4:fa:29:2c:85: 4a:46:1e:96:15:bf:8a:e7:34:7f:e9:42:90:5f:90:cd:c6:6a: 2b:50:01:e8:e7:ae:06:1f:8c:c5:a6:9e:29:2f:66:5f:04:48: 8f:8c:b5:a7:56:21:1c:43:a0:a5:59:d2:ac:3c:3f:aa:3c:4c: e2:b8:5d:86:36:74:f5:2f:7a:c5:38:e4:e6:40:f3:b3:fb:b5: 08:d1:a9:6e:23:79:38:64:9d:6c:b6:99:2b:1b:e5:0b:6a:9a: 7a:9d:97:5b:dc:bd:ae:3b:f8:3b:24:b6:16:11:07:79:95:25: 1c:58:9a:13:c6:25:b0:94:a9:c3:f6:5f:68:88:bd:cf:3b:ab: df:f3:c6:51:95:fb:a7:3a:a2:2a:64:65:1b:ad:5b:5d:7a:9f: ba:70:71:1e:8c:72:dd:7d:b9:b1:53:e3:c0:b8:2c:5b:d6:72: 9a:a0:6b:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMi/f1FPgIFJDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZWZmZDYwMmMtZWM2NS00MDRjLWFlOWItMzY5MGNkMDc0MmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziBSaVSgnkkwrvB3hYvR4xzeJLOgDd5y/8BJ na8d0LIKCRPtn48926RKFPWNbV0BOhK7rihEEfKY/EV4MLsXOnQqELZ4V2XA1+Eb fS8zu5LuF5wYto0lJCLVP/g0TKAc+MyfToosHVC6ULmNkvuaQjuHBV7mF/GwC/v6 vD0Vv67CgBl6MfWQ4UcEedArySJSIlj0qIyIGibMfTIhv4QAcIWG8Zjn+EPMMTPw Ff+EWdkluNYAcbxvWaVngjo8vtRdjDxMoutbtTOJfsq+TBvEhWx2D9nINJRoE8UI rGs+D8lyK/I9B61S+whA2UrQcpJqyEODEZob/EYAEIhLtmxmZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNT5UEM3peL0EcVM1/rnts8AfAgZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDMzMjYwYjgtOGMzYy0z NjNmLWExM2UtNjFjNGNhZjBiNTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIpkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7T91ZxifoXPm1bC5jSfSgHGATyiNvHxfKhi54t1WSUjY/ltW88fOix jX7BNj2nMW36gcciPqI3u+BwE/VQ+O6cBGWKP5uTbvy5kARgycdEVuFqlG2k+iks hUpGHpYVv4rnNH/pQpBfkM3GaitQAejnrgYfjMWmnikvZl8ESI+MtadWIRxDoKVZ 0qw8P6o8TOK4XYY2dPUvesU45OZA87P7tQjRqW4jeThknWy2mSsb5Qtqmnqdl1vc va47+DskthYRB3mVJRxYmhPGJbCUqcP2X2iIvc87q9/zxlGV+6c6oipkZRutW116 n7pwcR6Mct19ubFT48C4LFvWcpqgawE= -----END CERTIFICATE-----Generated at Sun Apr 27 15:16:36 2025 by rpki-client