$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d45e4854-2481-3de3-ae93-5079464c2fae.roa File: d45e4854-2481-3de3-ae93-5079464c2fae.roa (raw, json) Hash identifier: oXzpPvQLhNv16uRDzyTJn1DOD/NM/r7kPSKyfRTXDtQ= Subject key identifier: BA:88:50:5D:48:7E:6A:16:9D:DB:9A:98:2C:E5:01:A4:25:EA:7B:CA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784E651EF9481AA6EEC3200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d45e4854-2481-3de3-ae93-5079464c2fae.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.71.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e6:51:ef:94:81:aa:6e:ec:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=5c309c83-6c30-4297-8853-8e013a125b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bd:38:44:de:38:37:36:1e:f1:a1:34:0b:6c: e4:9f:89:3c:e4:5b:0e:50:14:55:0e:c4:d9:28:13: 1c:4c:01:14:9b:fc:53:6d:78:ac:fe:d5:6b:67:d7: 93:40:d6:b2:fd:78:d0:bb:4b:5f:7e:80:11:11:26: 99:27:50:52:8f:06:ff:ae:10:a1:f2:ce:52:85:0f: d0:cd:ad:98:c5:97:64:0c:8f:56:a8:ef:f4:0e:6d: 56:a6:7a:20:28:e7:25:72:ac:0f:75:e1:de:86:44: 46:a6:a1:dc:bc:f1:71:c2:b0:b8:b2:c7:64:c8:aa: f6:ee:c6:8a:2f:b5:4c:23:6a:b9:28:f0:2d:8f:8c: ac:2e:e4:a7:5b:96:4e:22:fb:d0:14:5f:cf:b4:ab: c4:55:92:88:23:4c:0f:d6:40:c0:aa:0c:bd:a4:ac: 69:55:90:c7:29:6a:72:5d:3a:82:59:55:ca:58:63: fd:95:57:e1:29:9c:2c:62:ae:39:b8:9d:37:53:e2: 05:ad:bc:07:ca:41:90:3d:02:e4:54:4d:aa:5b:9d: ae:1e:3a:fa:12:b9:e3:11:d7:52:7a:07:ec:13:01: 5e:fb:e7:99:b2:ed:be:ee:8d:e8:90:5a:0e:c1:e5: 19:db:45:68:ee:89:fa:41:2e:9a:46:3f:ec:39:62: bc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:88:50:5D:48:7E:6A:16:9D:DB:9A:98:2C:E5:01:A4:25:EA:7B:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d45e4854-2481-3de3-ae93-5079464c2fae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.71.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:b8:87:b2:7a:c8:87:53:b4:48:c9:71:02:d2:1d:cb:3f:3f: df:d3:08:25:64:ae:c4:1e:45:6a:17:15:8d:47:11:d1:d8:42: 7f:51:ee:3c:c2:57:82:3f:d5:59:a2:9d:9f:b3:c2:52:79:34: 2f:d1:08:ad:4a:cd:c0:47:c0:96:69:25:22:4d:ea:a6:ea:66: 55:c3:11:0f:33:ee:b2:df:1f:14:13:b0:d5:51:60:47:a1:cd: d4:b3:b0:ef:b9:83:e8:86:3f:8e:6e:22:74:fe:bb:d3:03:80: 7d:3d:29:eb:e4:34:a4:50:46:cc:bb:17:e1:c6:72:91:a6:97: d9:0b:02:e6:63:a4:b4:b9:e8:ae:72:f9:b0:7e:4a:c1:a9:79: 3a:7c:c0:31:39:d3:a0:e0:cb:82:d3:eb:c7:67:ca:cb:f6:e5: 31:40:df:bf:9f:8f:36:42:de:b4:40:b8:16:80:06:a3:12:63: 33:02:b7:23:09:11:ca:77:77:3d:2a:c5:51:85:ec:28:22:b7: e8:1d:e9:a8:62:bc:6c:df:17:61:4b:d0:27:56:99:b2:e7:e0: 60:41:e1:08:a3:41:15:91:07:af:7b:c8:f0:b4:2e:f6:59:38: 3d:2a:10:2f:c2:3d:1c:12:35:7f:cb:50:36:db:8e:3c:1f:cd: 32:1c:b4:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOZR75SBqm7sMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NWMzMDljODMtNmMzMC00Mjk3LTg4NTMtOGUwMTNhMTI1YjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL04RN44NzYe8aE0C2zkn4k85FsOUBRVDsTZ KBMcTAEUm/xTbXis/tVrZ9eTQNay/XjQu0tffoARESaZJ1BSjwb/rhCh8s5ShQ/Q za2YxZdkDI9WqO/0Dm1WpnogKOclcqwPdeHehkRGpqHcvPFxwrC4ssdkyKr27saK L7VMI2q5KPAtj4ysLuSnW5ZOIvvQFF/PtKvEVZKII0wP1kDAqgy9pKxpVZDHKWpy XTqCWVXKWGP9lVfhKZwsYq45uJ03U+IFrbwHykGQPQLkVE2qW52uHjr6ErnjEddS egfsEwFe++eZsu2+7o3okFoOweUZ20Vo7on6QS6aRj/sOWK8vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqIUF1IfmoWnduamCzlAaQl6nvKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDQ1ZTQ4NTQtMjQ4MS0z ZGUzLWFlOTMtNTA3OTQ2NGMyZmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+4h7J6yIdTtEjJcQLSHcs/P9/TCCVkrsQeRWoXFY1HEdHYQn9R7jzC V4I/1VminZ+zwlJ5NC/RCK1KzcBHwJZpJSJN6qbqZlXDEQ8z7rLfHxQTsNVRYEeh zdSzsO+5g+iGP45uInT+u9MDgH09KevkNKRQRsy7F+HGcpGml9kLAuZjpLS56K5y +bB+SsGpeTp8wDE506Dgy4LT68dnysv25TFA37+fjzZC3rRAuBaABqMSYzMCtyMJ Ecp3dz0qxVGF7Cgit+gd6ahivGzfF2FL0CdWmbLn4GBB4QijQRWRB697yPC0LvZZ OD0qEC/CPRwSNX/LUDbbjjwfzTIctJg= -----END CERTIFICATE-----Generated at Sat Apr 26 18:11:03 2025 by rpki-client