$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ddc18a10-0e24-3e32-ac37-c19944b8673e.roa File: ddc18a10-0e24-3e32-ac37-c19944b8673e.roa (raw, json) Hash identifier: cb94jIiLk0/WdLmBtl8y+nZki42qPm0fQqicru9f4dc= Subject key identifier: 87:5F:01:91:53:C3:8A:94:9E:4A:D2:CF:F1:DA:A4:B9:E4:AE:5B:66 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BB61C624484833F3CA16C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ddc18a10-0e24-3e32-ac37-c19944b8673e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 34.116.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:61:c6:24:48:48:33:f3:ca:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=1a97bcad-2e7e-4e94-89a9-87f9e3be525a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:96:da:b5:50:35:71:c1:cc:12:b5:4f:47:34: db:49:40:56:75:00:93:fa:79:04:46:8d:e9:da:5d: 42:c3:1e:b0:dc:0e:b4:26:78:84:09:29:e4:f5:43: c7:79:11:2a:05:8a:7d:27:22:24:b2:5b:7e:4d:c9: 89:37:5e:32:e8:29:b5:3a:e5:c5:6b:74:53:d7:d7: 95:53:b0:c2:dd:4c:5e:ae:e5:f8:ab:4a:a1:36:31: 19:db:5a:b6:d9:59:6d:d9:e2:bb:0b:42:d4:15:f0: dc:a8:b6:ee:b3:81:aa:35:fd:0a:c0:e9:e5:78:0d: e0:53:e7:ae:5a:26:c2:89:2a:d8:7e:8a:ad:83:30: 8d:f9:3d:aa:50:01:9c:5e:2f:b0:48:28:e7:26:82: bf:5d:c1:63:cb:2c:37:8b:62:67:44:50:8e:20:49: 40:20:d2:c0:f4:f5:40:5b:61:68:01:4e:3e:b6:6e: 74:20:64:e1:bc:f8:d1:40:91:d6:b1:65:97:23:e7: 94:d4:62:a4:06:88:02:b6:78:0d:3b:1b:34:ef:db: d4:ff:4c:b7:2f:62:ce:92:c8:62:01:fb:96:c9:1d: 49:f4:73:a5:b9:67:9f:53:0d:1c:9c:7b:3d:8b:02: 48:03:29:7d:71:0a:30:95:80:bb:d3:7e:99:ec:a4: 3b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5F:01:91:53:C3:8A:94:9E:4A:D2:CF:F1:DA:A4:B9:E4:AE:5B:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ddc18a10-0e24-3e32-ac37-c19944b8673e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.116.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:ad:33:28:21:a9:3b:d2:6b:2d:78:4d:68:25:b2:db:5b:2a: 89:74:3d:22:a0:51:e0:a4:21:4c:15:28:bb:3f:99:37:d4:9b: 08:7a:57:25:d1:b9:68:92:b7:1e:9f:2f:5c:1a:e8:9d:c2:0f: 9d:06:0e:f5:91:34:00:27:1a:8e:91:c0:68:a4:cc:ee:be:4b: 4f:4f:a3:28:7b:a3:42:74:27:e2:a5:61:20:82:e8:18:f7:4a: 1f:ed:0e:af:95:ec:01:99:7a:b3:60:80:6d:e0:54:6d:b4:72: ba:46:7d:9f:4d:fa:59:5d:b4:31:5b:53:bf:a5:9b:81:bc:db: 6e:20:ab:ce:6b:d4:bd:ba:29:9a:7c:3e:f0:23:80:62:78:4c: 6f:1c:98:d7:d1:a6:70:10:e5:a4:e3:0a:0e:1e:38:9e:64:24: 43:77:ff:c3:eb:f0:48:d8:b9:be:a3:c1:d7:1c:a7:de:dc:16: d4:8e:91:e1:03:86:77:e6:11:f2:60:d7:8b:90:f1:6f:96:c7: 8f:f6:83:80:3c:4a:9b:57:16:7d:35:56:e8:15:60:00:8b:d4: 6e:ba:fc:27:51:3c:0b:ce:99:96:2a:55:b2:02:85:6e:33:b0: 4f:cd:80:49:27:cb:3e:d7:0e:8f:e8:b0:ab:4e:0d:f7:29:6b: bb:01:92:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2HGJEhIM/PKFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MWE5N2JjYWQtMmU3ZS00ZTk0LTg5YTktODdmOWUzYmU1MjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJbatVA1ccHMErVPRzTbSUBWdQCT+nkERo3p 2l1Cwx6w3A60JniECSnk9UPHeREqBYp9JyIkslt+TcmJN14y6Cm1OuXFa3RT19eV U7DC3UxeruX4q0qhNjEZ21q22Vlt2eK7C0LUFfDcqLbus4GqNf0KwOnleA3gU+eu WibCiSrYfoqtgzCN+T2qUAGcXi+wSCjnJoK/XcFjyyw3i2JnRFCOIElAINLA9PVA W2FoAU4+tm50IGThvPjRQJHWsWWXI+eU1GKkBogCtngNOxs079vU/0y3L2LOkshi AfuWyR1J9HOluWefUw0cnHs9iwJIAyl9cQowlYC7036Z7KQ7wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdfAZFTw4qUnkrSz/HapLnkrltmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGRjMThhMTAtMGUyNC0z ZTMyLWFjMzctYzE5OTQ0Yjg2NzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHutMyghqTvSay14TWglsttbKol0PSKgUeCkIUwVKLs/mTfUmwh6VyXR uWiStx6fL1wa6J3CD50GDvWRNAAnGo6RwGikzO6+S09Poyh7o0J0J+KlYSCC6Bj3 Sh/tDq+V7AGZerNggG3gVG20crpGfZ9N+lldtDFbU7+lm4G8224gq85r1L26KZp8 PvAjgGJ4TG8cmNfRpnAQ5aTjCg4eOJ5kJEN3/8Pr8EjYub6jwdccp97cFtSOkeED hnfmEfJg14uQ8W+Wx4/2g4A8SptXFn01VugVYACL1G66/CdRPAvOmZYqVbIChW4z sE/NgEknyz7XDo/osKtODfcpa7sBkmg= -----END CERTIFICATE-----Generated at Sat Apr 26 14:49:20 2025 by rpki-client