$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e84f1803-c51a-3e9a-96cf-569693207764.roa File: e84f1803-c51a-3e9a-96cf-569693207764.roa (raw, json) Hash identifier: B3eEijbbpMxyQpPd7QONZpcnZdDLAgLlV7/A5EuAkRU= Subject key identifier: C0:65:D3:02:4C:AB:D2:C4:10:B1:F6:21:35:BD:2B:F9:1B:20:C9:2A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78508C190B820555C28D100 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e84f1803-c51a-3e9a-96cf-569693207764.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.138.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:08:c1:90:b8:20:55:5c:28:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=af4b9d0d-4221-4ded-a2d0-cdce42f054d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:95:23:ea:ee:9e:ff:26:ff:7f:30:2e:a2:ce: 27:bb:b4:95:b6:ba:13:db:c5:cc:43:f2:f8:15:da: 2b:a2:ac:6c:66:c1:e9:de:a3:56:a9:08:5b:e1:85: 09:5c:68:16:0c:fb:45:78:69:7d:bc:80:ae:dd:ff: 62:d1:ff:d3:c5:ec:42:e9:ed:79:e7:02:c1:10:f2: f4:89:36:32:78:ad:f1:eb:ae:27:a2:26:c5:54:b0: ce:b5:92:f8:5d:63:11:bf:c9:31:04:db:03:a0:09: dc:6d:da:47:52:d3:a1:de:49:cb:b2:fa:f3:46:0a: 09:be:65:44:d4:de:68:70:ca:14:10:5f:40:ef:3a: 9b:bd:cd:a3:d7:b1:2e:69:f9:cc:3f:cc:23:1a:9d: 2a:1d:da:59:c5:f4:00:cc:b8:f4:47:58:42:7e:1d: e7:d2:97:72:5b:d3:9c:4d:53:38:8d:b7:4c:46:1e: 6b:5f:ae:12:27:c6:27:3c:23:2a:d9:78:74:c9:53: f7:f9:c7:1c:d6:a7:7e:30:ab:65:04:ba:e7:63:e6: 8d:e1:bd:8e:15:60:e5:76:d3:e7:c6:b5:0e:b2:eb: 65:19:03:43:1d:f8:6f:62:9a:4a:ae:5d:ed:02:e6: 69:17:90:c1:4c:29:44:75:ea:47:8a:cb:d7:29:fe: bd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:65:D3:02:4C:AB:D2:C4:10:B1:F6:21:35:BD:2B:F9:1B:20:C9:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e84f1803-c51a-3e9a-96cf-569693207764.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.138.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:70:63:74:22:31:5c:19:9d:7a:8f:ad:dd:e2:1c:3c:f8:99: fe:13:d6:b7:2e:e5:6b:9d:5a:ea:45:2e:cb:58:f1:7d:ff:6b: 13:79:3e:9b:05:f7:11:7b:a7:1b:7e:24:d5:62:ed:94:32:79: ff:e9:0e:16:28:1a:c4:c1:69:e2:74:ab:4c:34:48:e7:d9:51: cb:13:da:5e:e9:99:9d:a6:9a:1b:53:d2:96:f5:fa:3f:89:3e: b0:f7:8f:40:b6:a9:bc:e8:8b:4a:08:9b:4d:fd:53:1c:e7:a1: 9a:1d:3a:cf:53:d8:99:3a:a7:4f:e4:c8:66:5b:6d:a3:94:32: 73:52:88:74:c3:e2:7e:72:49:7b:ed:43:2a:58:85:8d:f8:b1: db:94:64:b0:33:36:c2:50:2e:62:ef:9f:c5:9a:c0:ea:23:fc: 34:2e:1a:82:6d:5a:82:c8:8f:0f:76:88:bd:02:04:a2:4f:d1: 1d:5c:ac:d3:64:1e:c8:06:f3:1a:9a:ff:98:27:1d:54:0f:31: 1b:6c:64:c1:5d:5e:6c:a8:95:4d:03:e3:36:2f:96:b5:eb:bc: 86:f3:5c:46:82:dd:1e:16:5a:3a:da:dc:71:8a:3a:99:9a:16: a4:e2:c6:d6:89:fe:90:28:c9:2a:a8:f9:7d:f5:e9:27:41:2a: c2:f0:a8:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQjBkLggVVwo0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YWY0YjlkMGQtNDIyMS00ZGVkLWEyZDAtY2RjZTQyZjA1NGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZUj6u6e/yb/fzAuos4nu7SVtroT28XMQ/L4 FdoroqxsZsHp3qNWqQhb4YUJXGgWDPtFeGl9vICu3f9i0f/TxexC6e155wLBEPL0 iTYyeK3x664noibFVLDOtZL4XWMRv8kxBNsDoAncbdpHUtOh3knLsvrzRgoJvmVE 1N5ocMoUEF9A7zqbvc2j17EuafnMP8wjGp0qHdpZxfQAzLj0R1hCfh3n0pdyW9Oc TVM4jbdMRh5rX64SJ8YnPCMq2Xh0yVP3+ccc1qd+MKtlBLrnY+aN4b2OFWDldtPn xrUOsutlGQNDHfhvYppKrl3tAuZpF5DBTClEdepHisvXKf691wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBl0wJMq9LEELH2ITW9K/kbIMkqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTg0ZjE4MDMtYzUxYS0z ZTlhLTk2Y2YtNTY5NjkzMjA3NzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIopwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINwY3QiMVwZnXqPrd3iHDz4mf4T1rcu5WudWupFLstY8X3/axN5PpsF 9xF7pxt+JNVi7ZQyef/pDhYoGsTBaeJ0q0w0SOfZUcsT2l7pmZ2mmhtT0pb1+j+J PrD3j0C2qbzoi0oIm039UxznoZodOs9T2Jk6p0/kyGZbbaOUMnNSiHTD4n5ySXvt QypYhY34sduUZLAzNsJQLmLvn8WawOoj/DQuGoJtWoLIjw92iL0CBKJP0R1crNNk HsgG8xqa/5gnHVQPMRtsZMFdXmyolU0D4zYvlrXrvIbzXEaC3R4WWjra3HGKOpma FqTixtaJ/pAoySqo+X316SdBKsLwqOc= -----END CERTIFICATE-----Generated at Sat Apr 26 17:45:59 2025 by rpki-client