$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd1968b0-ea1f-3906-ab3b-c292e91ef879.roa File: dd1968b0-ea1f-3906-ab3b-c292e91ef879.roa (raw, json) Hash identifier: g9ACAuQcwq57FXeThnsR9DOSVIJ/n2H0hZJo/X8Baoc= Subject key identifier: 53:37:3B:1F:03:96:01:BB:38:79:BD:DD:C2:43:C3:2D:95:78:4D:1B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78538E750D310420ED19AC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd1968b0-ea1f-3906-ab3b-c292e91ef879.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.21.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:38:e7:50:d3:10:42:0e:d1:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=8b150c53-2d29-40fc-9f16-5c36b9b9fa66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bf:3a:9c:fd:5d:43:f6:5e:29:97:97:4a:08: 97:4c:42:52:3b:ac:35:21:9e:c6:2d:14:fc:db:d2: 26:f2:aa:ea:f2:5f:56:1d:1b:4d:fd:19:61:ac:7b: 9f:6b:4a:1d:07:f9:ff:dd:ff:46:2d:9f:02:b3:f7: 4a:4d:2c:23:46:91:58:1e:1d:94:da:0a:93:ca:4e: 34:e1:f3:32:9a:d0:28:45:fd:bb:8f:0d:8b:04:db: 5c:18:9f:28:7a:0e:0b:83:06:b9:a0:4c:68:49:0b: 21:34:25:89:3c:a0:38:3e:89:9a:f2:bc:09:99:bb: d7:38:e2:d6:9a:f5:a1:7a:6e:0d:47:ba:8a:16:8a: 45:58:43:06:be:ba:25:42:b0:01:3a:a0:37:f1:41: 0c:46:d8:56:77:6f:18:c2:35:2d:94:52:7a:67:e4: c7:62:01:2b:75:04:9f:29:05:fe:ad:42:26:c6:41: 82:13:b0:76:5d:28:85:58:1f:c6:f0:dd:ca:bc:4b: c7:f9:68:4e:2d:f1:ad:96:08:ec:98:cc:e8:32:9d: 4d:6c:9b:f8:25:c8:89:86:51:35:18:26:05:9c:cb: 86:a4:f8:da:05:31:ed:d8:e2:d7:f8:e8:30:9e:2e: d5:6b:23:35:7f:a9:6f:8b:79:a8:14:cf:a6:84:ab: 46:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:37:3B:1F:03:96:01:BB:38:79:BD:DD:C2:43:C3:2D:95:78:4D:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd1968b0-ea1f-3906-ab3b-c292e91ef879.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.21.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:6a:48:96:8c:d6:e5:54:fd:ec:8c:c8:06:c7:95:28:f7:10: a1:cd:97:b0:09:c2:42:20:14:41:89:59:0a:a8:3c:d5:8b:80: a6:c0:c4:2c:8a:8b:22:5f:13:aa:94:2c:e5:8d:cf:84:9c:7f: 5e:16:1f:89:56:f9:ee:37:e1:4f:b1:8c:4f:46:5e:62:08:6a: 81:d7:a2:b8:54:9d:d8:2d:46:a4:3e:46:5c:5f:3e:a2:9e:43: 20:91:eb:47:6a:0a:d6:8a:60:61:ee:e7:c8:70:21:68:a0:b9: 84:54:da:c0:e1:d5:46:94:47:4d:5f:7c:d3:56:ad:2a:63:0b: 05:7c:d6:a5:af:78:d8:46:e5:62:0d:d3:e7:cd:46:77:9b:3e: 20:bd:a8:04:29:dc:40:0f:76:2f:c2:38:4e:7b:5d:ec:b6:d0: f9:7f:71:10:64:90:7d:55:dd:63:90:d4:70:ef:8a:00:1a:f9: b7:e4:c7:90:7c:f3:37:1f:2d:df:3c:ff:14:1c:bf:32:24:8f: 1f:d7:71:ae:3f:50:61:41:02:66:93:5b:29:01:44:77:c3:0c: 4c:b9:2c:55:a1:e0:65:8a:48:10:66:09:ef:ef:b9:d7:75:06: 3b:ca:44:e8:2d:53:29:be:be:cb:50:45:e9:9d:94:d2:c8:08: 47:b0:a8:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTjnUNMQQg7RmsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OGIxNTBjNTMtMmQyOS00MGZjLTlmMTYtNWMzNmI5YjlmYTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL86nP1dQ/ZeKZeXSgiXTEJSO6w1IZ7GLRT8 29Im8qrq8l9WHRtN/RlhrHufa0odB/n/3f9GLZ8Cs/dKTSwjRpFYHh2U2gqTyk40 4fMymtAoRf27jw2LBNtcGJ8oeg4Lgwa5oExoSQshNCWJPKA4Poma8rwJmbvXOOLW mvWhem4NR7qKFopFWEMGvrolQrABOqA38UEMRthWd28YwjUtlFJ6Z+THYgErdQSf KQX+rUImxkGCE7B2XSiFWB/G8N3KvEvH+WhOLfGtlgjsmMzoMp1NbJv4JciJhlE1 GCYFnMuGpPjaBTHt2OLX+Ogwni7VayM1f6lvi3moFM+mhKtGQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFM3Ox8DlgG7OHm93cJDwy2VeE0bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGQxOTY4YjAtZWExZi0z OTA2LWFiM2ItYzI5MmU5MWVmODc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIhUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFqSJaM1uVU/eyMyAbHlSj3EKHNl7AJwkIgFEGJWQqoPNWLgKbAxCyK iyJfE6qULOWNz4Scf14WH4lW+e434U+xjE9GXmIIaoHXorhUndgtRqQ+RlxfPqKe QyCR60dqCtaKYGHu58hwIWiguYRU2sDh1UaUR01ffNNWrSpjCwV81qWveNhG5WIN 0+fNRnebPiC9qAQp3EAPdi/COE57Xey20Pl/cRBkkH1V3WOQ1HDvigAa+bfkx5B8 8zcfLd88/xQcvzIkjx/Xca4/UGFBAmaTWykBRHfDDEy5LFWh4GWKSBBmCe/vudd1 BjvKROgtUym+vstQRemdlNLICEewqDY= -----END CERTIFICATE-----Generated at Sat Apr 26 16:01:59 2025 by rpki-client