$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f768ed33-88a7-31d3-8560-a3179e78c3c7.roa File: f768ed33-88a7-31d3-8560-a3179e78c3c7.roa (raw, json) Hash identifier: 3lWDnK3BfHe0SIoyoe4hz/NnRNc82/rMqhlwC0gPOqk= Subject key identifier: 8D:A9:11:B7:C4:80:09:BF:6B:B5:75:E2:9A:1E:91:1F:53:8F:C2:5F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784CEAE6FAE4E057AA00140 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f768ed33-88a7-31d3-8560-a3179e78c3c7.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.148.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ce:ae:6f:ae:4e:05:7a:a0:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=eb326ee1-5c12-4f1f-ad0d-b23bf83d96dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:29:16:97:75:d9:09:5b:c2:b7:16:85:9d:67: 89:fc:9a:80:fb:e5:6f:e3:49:64:6f:28:2a:f1:39: 84:48:e3:9c:64:60:89:55:5d:1d:28:16:85:b4:1c: 42:26:b2:ab:1d:35:19:cd:d7:27:eb:34:35:47:98: 52:e6:60:a4:dd:4d:a0:5e:2a:d7:7f:d1:9f:20:9f: 32:c6:cb:4d:bc:57:b5:cc:07:c3:72:17:9d:7d:7e: 30:5b:63:3e:38:d8:b5:b8:6c:08:ff:9b:2e:1e:22: 55:d8:24:c1:35:13:36:f3:08:c3:fb:0c:79:03:31: 7c:74:22:3b:d1:ea:a5:dd:8a:0d:09:cd:dd:6b:b1: 6b:1f:ef:88:40:5a:34:b9:cc:0e:89:09:60:31:16: f5:90:37:c8:4b:03:3d:81:58:1a:d4:fd:c3:16:30: 6a:5a:73:43:6c:62:ac:b8:e9:ad:59:60:4f:76:6b: da:ac:6c:f1:87:24:50:ac:72:45:47:f7:56:dd:71: 53:2b:29:48:c6:89:e7:59:6f:4a:f4:af:0a:3d:14: 51:bd:38:5a:99:92:4e:78:d5:5c:bb:1a:e2:51:7d: 37:85:19:64:8c:03:0b:11:55:03:0e:39:87:cf:16: 1c:73:51:02:d2:d3:ce:08:b4:56:37:2a:cd:9e:13: d2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A9:11:B7:C4:80:09:BF:6B:B5:75:E2:9A:1E:91:1F:53:8F:C2:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f768ed33-88a7-31d3-8560-a3179e78c3c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.148.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:d3:56:3c:d9:41:25:74:60:5e:f6:36:36:b4:c6:46:af:ea: fe:b2:06:11:8b:1b:72:67:56:f8:23:4e:84:09:0c:9b:ad:84: c0:ed:34:a4:69:48:12:de:4c:62:00:fd:00:d4:a1:c2:2c:50: 33:b5:a5:17:e1:e4:d3:61:ff:89:cd:00:f5:f6:34:a5:7d:a8: e6:33:55:8b:28:2b:ee:dd:cd:45:df:64:7b:40:e4:69:8d:fb: de:fc:a3:29:aa:5a:47:ee:57:be:cc:5e:5f:9f:2e:41:cf:83: d5:8e:31:c4:6d:57:34:8a:28:db:41:71:a0:9a:96:63:c1:ab: c3:80:54:66:b5:65:48:94:07:da:1f:06:e8:73:fe:b5:be:5c: df:3e:cd:ef:97:e0:af:df:b6:dc:fa:23:0f:ca:37:d6:ab:83: d9:b0:cb:37:17:98:5f:aa:93:d0:ff:bb:20:1a:82:38:31:a9: 25:96:fc:5b:69:57:3b:7f:a9:88:17:fd:e5:5d:df:16:73:e1: 8e:ca:42:19:1b:32:c7:d7:33:f2:dc:4f:a2:a2:00:8b:bb:9c: ba:6f:74:09:5d:0a:ea:31:db:71:8b:12:8e:a8:55:58:ee:8a: 98:8a:bb:1b:b9:69:f9:91:99:db:41:87:29:fa:9b:87:42:1e: 55:a2:3b:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhM6ub65OBXqgAUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZWIzMjZlZTEtNWMxMi00ZjFmLWFkMGQtYjIzYmY4M2Q5NmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCkWl3XZCVvCtxaFnWeJ/JqA++Vv40lkbygq 8TmESOOcZGCJVV0dKBaFtBxCJrKrHTUZzdcn6zQ1R5hS5mCk3U2gXirXf9GfIJ8y xstNvFe1zAfDchedfX4wW2M+ONi1uGwI/5suHiJV2CTBNRM28wjD+wx5AzF8dCI7 0eql3YoNCc3da7FrH++IQFo0ucwOiQlgMRb1kDfISwM9gVga1P3DFjBqWnNDbGKs uOmtWWBPdmvarGzxhyRQrHJFR/dW3XFTKylIxonnWW9K9K8KPRRRvThamZJOeNVc uxriUX03hRlkjAMLEVUDDjmHzxYcc1EC0tPOCLRWNyrNnhPSCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2pEbfEgAm/a7V14poekR9Tj8JfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjc2OGVkMzMtODhhNy0z MWQzLTg1NjAtYTMxNzllNzhjM2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPTVjzZQSV0YF72Nja0xkav6v6yBhGLG3JnVvgjToQJDJuthMDtNKRp SBLeTGIA/QDUocIsUDO1pRfh5NNh/4nNAPX2NKV9qOYzVYsoK+7dzUXfZHtA5GmN +978oymqWkfuV77MXl+fLkHPg9WOMcRtVzSKKNtBcaCalmPBq8OAVGa1ZUiUB9of Buhz/rW+XN8+ze+X4K/fttz6Iw/KN9arg9mwyzcXmF+qk9D/uyAagjgxqSWW/Ftp Vzt/qYgX/eVd3xZz4Y7KQhkbMsfXM/LcT6KiAIu7nLpvdAldCuox23GLEo6oVVju ipiKuxu5afmRmdtBhyn6m4dCHlWiOzE= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:12 2025 by rpki-client