$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3f4e9e3-557e-3363-9ab0-7e765ae5606c.roa File: d3f4e9e3-557e-3363-9ab0-7e765ae5606c.roa (raw, json) Hash identifier: IztUmqYGsHSAE9HpSx8YBouNjd8pXA2vPssf6yp7AoA= Subject key identifier: 7B:FD:8B:E0:8F:00:9A:D6:38:8E:B1:ED:03:55:EB:F3:66:96:55:90 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78534CEE0DADF2DBA66C360 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3f4e9e3-557e-3363-9ab0-7e765ae5606c.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.98.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:34:ce:e0:da:df:2d:ba:66:c3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=d0329630-cccf-45db-b825-6aeda616310e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9b:93:e8:cd:11:01:b6:88:be:2b:fc:92:6d: 84:1d:f0:8e:08:7a:23:9b:d6:f3:4f:43:05:88:bd: c9:f7:51:2f:da:8e:5b:66:46:53:80:51:9b:ac:ed: 9b:87:61:92:99:da:09:5c:47:7a:89:a0:8e:8e:01: bd:c2:01:af:c0:fc:76:92:7a:c8:9e:40:2d:37:a6: 98:33:dc:a1:b5:7d:d3:26:f6:12:a2:c6:98:5f:99: 12:ed:86:42:b6:f6:8c:12:02:e9:dc:dc:a3:50:e6: 8e:b5:6d:0e:5b:8e:20:b0:67:1a:d8:9b:4f:a7:96: eb:b0:d3:34:f0:62:3d:10:46:12:ad:fe:fc:da:1c: 22:d7:d9:95:48:1a:99:76:ed:43:8f:26:f7:fb:e2: 14:14:31:65:9d:85:44:f4:bf:87:98:84:a6:30:fa: 4d:bd:ec:74:d0:2e:c6:d3:92:a5:b8:ea:67:da:6f: c3:ee:ec:03:da:69:b4:d4:8b:b7:a0:a3:9d:c3:61: 17:99:1c:03:61:e8:ab:96:b2:76:55:63:97:86:38: 93:70:21:24:a8:53:85:30:41:50:e7:1b:01:fa:fc: ce:b0:c8:94:c2:dc:c0:0d:1e:d5:f1:86:c8:1b:84: 67:4a:1a:5a:fa:8a:2d:b9:54:31:b7:99:cb:56:63: ea:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FD:8B:E0:8F:00:9A:D6:38:8E:B1:ED:03:55:EB:F3:66:96:55:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3f4e9e3-557e-3363-9ab0-7e765ae5606c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.98.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:cc:59:eb:f8:f4:09:da:a5:ed:69:d5:8c:3e:c3:60:41:0a: 72:29:2a:5c:7c:50:00:7f:93:94:aa:60:fc:c8:d8:6a:1b:bb: 8a:99:fa:13:71:b8:f6:ae:34:91:12:40:fd:54:a1:19:b8:eb: b4:9a:2c:88:01:5a:d6:25:69:f9:bc:6c:e2:74:d9:9f:50:87: 48:b1:3a:ab:b9:3d:96:80:19:5d:7f:31:9e:a5:93:ab:45:b9: b2:9c:bd:e5:8a:18:2c:ef:07:60:79:17:3a:3f:90:78:71:e9: 9c:95:e3:1e:7e:5d:bb:19:23:25:10:bc:f4:c7:88:9d:84:16: 8e:3c:0e:3e:df:02:1b:70:d5:21:b9:03:f1:54:ac:58:87:b2: 6d:88:de:63:e3:6c:0a:15:91:4d:0a:04:00:2b:65:aa:de:62: 63:4e:55:a5:51:9d:e7:3e:e1:cb:6a:ff:41:cc:98:d6:54:df: 3c:64:7f:62:56:e8:b6:c3:81:98:08:63:46:5d:e7:d1:d9:a1: a3:10:56:a8:86:23:96:0e:c6:50:53:f1:f0:25:20:56:3a:42: d7:0c:2d:ed:52:a4:1d:d6:40:7c:99:b2:36:fe:23:d1:cd:99: c7:84:d1:60:5f:39:f5:00:80:6b:26:0c:99:35:3a:17:c8:15: 61:a7:d7:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTTO4NrfLbpmw2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZDAzMjk2MzAtY2NjZi00NWRiLWI4MjUtNmFlZGE2MTYzMTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZuT6M0RAbaIviv8km2EHfCOCHojm9bzT0MF iL3J91Ev2o5bZkZTgFGbrO2bh2GSmdoJXEd6iaCOjgG9wgGvwPx2knrInkAtN6aY M9yhtX3TJvYSosaYX5kS7YZCtvaMEgLp3NyjUOaOtW0OW44gsGca2JtPp5brsNM0 8GI9EEYSrf782hwi19mVSBqZdu1Djyb3++IUFDFlnYVE9L+HmISmMPpNvex00C7G 05KluOpn2m/D7uwD2mm01Iu3oKOdw2EXmRwDYeirlrJ2VWOXhjiTcCEkqFOFMEFQ 5xsB+vzOsMiUwtzADR7V8YbIG4RnShpa+ootuVQxt5nLVmPq0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHv9i+CPAJrWOI6x7QNV6/NmllWQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDNmNGU5ZTMtNTU3ZS0z MzYzLTlhYjAtN2U3NjVhZTU2MDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTMWev49Anape1p1Yw+w2BBCnIpKlx8UAB/k5SqYPzI2Gobu4qZ+hNx uPauNJESQP1UoRm467SaLIgBWtYlafm8bOJ02Z9Qh0ixOqu5PZaAGV1/MZ6lk6tF ubKcveWKGCzvB2B5Fzo/kHhx6ZyV4x5+XbsZIyUQvPTHiJ2EFo48Dj7fAhtw1SG5 A/FUrFiHsm2I3mPjbAoVkU0KBAArZareYmNOVaVRnec+4ctq/0HMmNZU3zxkf2JW 6LbDgZgIY0Zd59HZoaMQVqiGI5YOxlBT8fAlIFY6QtcMLe1SpB3WQHyZsjb+I9HN mceE0WBfOfUAgGsmDJk1OhfIFWGn1wQ= -----END CERTIFICATE-----Generated at Sat Apr 26 22:17:21 2025 by rpki-client