$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e954f085-2a43-3055-9296-2b0667c58b58.roa File: e954f085-2a43-3055-9296-2b0667c58b58.roa (raw, json) Hash identifier: MU0hNKXdbydTmZoE+EV2mTsoO82I7TQ+9OAImqbESX0= Subject key identifier: 3D:DD:8A:72:DA:EA:0C:E3:17:1C:2A:58:5A:43:DF:87:B9:48:02:53 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BACFDA88CDA6E2CF0DA200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e954f085-2a43-3055-9296-2b0667c58b58.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 34.108.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:cf:da:88:cd:a6:e2:cf:0d:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=489b6aa4-a639-416e-84dd-0b33fcb2e2a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4a:a7:77:c2:1c:be:a6:d6:ca:91:07:f0:74: 87:cf:a3:b1:c4:7c:da:a6:83:b7:7d:40:d0:70:ff: 24:f0:c7:01:2f:18:26:25:cc:cf:c0:82:60:58:c2: 02:7e:0f:37:b8:cc:9c:79:fc:9c:b4:d7:21:53:fe: ec:f3:51:b5:95:cb:b1:0f:df:b8:e3:51:59:60:32: 22:ba:8f:c5:44:ea:9d:b8:56:83:b7:00:34:0d:a7: bc:40:19:b6:4d:37:e3:b6:f2:27:6c:78:6e:5b:e6: aa:a8:d6:50:ab:4f:53:ec:54:40:ac:0b:e6:32:71: 9c:b0:48:2c:11:67:0d:09:ff:5a:57:0c:55:a0:9a: b7:4e:8a:19:d5:cb:8e:62:72:97:80:d5:1e:1a:40: 9b:94:dd:6f:3a:0f:2a:85:b1:96:b1:4c:58:cf:ef: 48:9b:f1:ab:cb:ae:49:bb:ce:dd:30:82:51:d8:18: 4b:ef:e5:9b:69:ef:37:9e:eb:c6:cb:b2:10:26:f0: f1:4b:36:9b:04:7d:95:60:97:31:35:8a:cc:e7:9f: f6:87:fa:8a:2e:16:e3:ab:5a:af:4d:48:6c:01:ca: 7d:66:13:a9:60:85:da:9e:d6:40:f3:98:f9:66:71: f5:17:0e:0f:75:e7:3e:7c:d9:55:a0:e8:55:43:d5: 0e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DD:8A:72:DA:EA:0C:E3:17:1C:2A:58:5A:43:DF:87:B9:48:02:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e954f085-2a43-3055-9296-2b0667c58b58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.108.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:81:b5:aa:1c:b0:25:9b:8e:51:7d:6d:52:24:fc:bc:63:b8: ce:4d:ed:77:a9:07:3e:c1:e4:78:f2:21:bf:26:50:ab:0e:c8: 8c:af:6a:e5:f0:20:6a:82:61:4c:23:6f:b9:bd:fb:c0:f6:0a: 8c:5d:40:fc:f2:3a:e0:42:73:42:ff:e8:86:8b:59:94:96:f8: dc:7a:15:68:e1:30:0e:a3:8a:04:25:ff:31:e2:ae:de:29:05: ee:ed:01:c0:56:e6:44:ca:a7:43:31:32:68:0d:f4:cc:ca:19: 35:89:0a:dd:f3:f0:bf:79:0b:a5:44:3c:02:33:6b:7d:d0:17: 2f:bd:0b:be:b9:70:e4:09:3b:6a:d8:e8:fb:8d:0e:5b:65:8c: a2:4e:0e:24:06:0b:d9:7c:77:d6:1e:3a:73:fd:6f:6e:e9:ef: 00:81:a8:67:fd:a8:37:2f:a7:b9:a4:ec:e0:f5:ba:37:95:41: 71:d9:ca:84:48:5b:02:14:64:7b:44:c0:12:d2:13:89:4a:68: d5:f7:1f:c6:11:15:d7:77:b0:ae:d0:1e:9d:74:1f:d3:77:d7: c2:07:a8:02:1d:1e:5a:f8:08:8b:f1:50:86:e8:9d:81:f4:60: ca:7b:9f:3f:a4:72:16:b9:94:fc:7d:77:96:2e:be:e6:6f:28: 65:3d:96:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkus/aiM2m4s8NogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NDg5YjZhYTQtYTYzOS00MTZlLTg0ZGQtMGIzM2ZjYjJlMmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkqnd8IcvqbWypEH8HSHz6OxxHzapoO3fUDQ cP8k8McBLxgmJczPwIJgWMICfg83uMycefyctNchU/7s81G1lcuxD9+441FZYDIi uo/FROqduFaDtwA0Dae8QBm2TTfjtvInbHhuW+aqqNZQq09T7FRArAvmMnGcsEgs EWcNCf9aVwxVoJq3TooZ1cuOYnKXgNUeGkCblN1vOg8qhbGWsUxYz+9Im/Gry65J u87dMIJR2BhL7+Wbae83nuvGy7IQJvDxSzabBH2VYJcxNYrM55/2h/qKLhbjq1qv TUhsAcp9ZhOpYIXantZA85j5ZnH1Fw4Pdec+fNlVoOhVQ9UOSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3dinLa6gzjFxwqWFpD34e5SAJTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTk1NGYwODUtMmE0My0z MDU1LTkyOTYtMmIwNjY3YzU4YjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWBtaocsCWbjlF9bVIk/LxjuM5N7XepBz7B5HjyIb8mUKsOyIyvauXw IGqCYUwjb7m9+8D2CoxdQPzyOuBCc0L/6IaLWZSW+Nx6FWjhMA6jigQl/zHirt4p Be7tAcBW5kTKp0MxMmgN9MzKGTWJCt3z8L95C6VEPAIza33QFy+9C765cOQJO2rY 6PuNDltljKJODiQGC9l8d9YeOnP9b27p7wCBqGf9qDcvp7mk7OD1ujeVQXHZyoRI WwIUZHtEwBLSE4lKaNX3H8YRFdd3sK7QHp10H9N318IHqAIdHlr4CIvxUIbonYH0 YMp7nz+kcha5lPx9d5YuvuZvKGU9ltI= -----END CERTIFICATE-----Generated at Sat Apr 26 16:14:48 2025 by rpki-client