$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a58ece8-50b9-3cab-97d0-d75539e34fb2.roa File: 0a58ece8-50b9-3cab-97d0-d75539e34fb2.roa (raw, json) Hash identifier: tQ15fhiI25M/buE9vYeK4FplAwUr6sMyE13rjcxI1zo= Subject key identifier: 00:68:A8:BE:40:BE:B3:21:E6:38:DF:AF:B2:BE:D7:26:CD:22:1B:9A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858499AF47135E7E33F43110AC380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a58ece8-50b9-3cab-97d0-d75539e34fb2.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 396982 IP address blocks: 34.15.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:71:35:e7:e3:3f:43:11:0a:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=79ee1b73-a4f0-4724-ac0e-fc115155f5ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:33:33:83:4f:2c:fa:93:d0:92:b0:ac:f6:ab: fd:36:44:a1:4d:e1:d0:23:93:7c:be:b1:33:a0:64: 6a:5f:ff:5c:d3:39:8c:1a:ec:c9:8f:6d:a6:c5:87: 7c:19:55:e3:2c:06:9e:f0:c9:09:dd:69:fa:4d:7e: e5:fc:0b:99:5c:e5:3d:f8:8b:ab:df:ab:65:31:91: 8b:73:a9:14:df:7f:41:c1:09:27:e0:49:60:0f:e9: 98:cf:17:ac:63:2c:2c:0a:3b:96:11:4c:87:51:07: 3b:e1:45:d3:6b:30:1d:c5:cc:89:53:b5:35:75:31: bd:4f:1c:3a:d8:e6:8a:d3:cd:24:41:9b:be:84:bc: 10:a7:96:8e:bc:4c:07:32:5c:fe:b9:43:41:54:b7: 9a:cc:2c:3d:8f:c0:ce:6e:e7:7c:cd:ef:b2:87:35: 91:73:6f:c9:55:36:f8:da:a5:31:d4:35:58:6e:21: 60:1d:e9:36:e2:c5:dd:c4:57:65:45:eb:cf:e1:15: 67:33:1b:7c:bf:8e:69:e6:32:ae:a3:b1:eb:d0:ac: 97:d7:6f:bc:86:2f:a6:3d:24:d2:b6:0a:c6:63:ad: fb:23:b9:00:d9:ef:23:c8:f8:5f:ef:1e:14:e0:37: 69:74:95:6e:d3:97:dc:be:8c:15:2f:01:de:5c:5c: 79:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:68:A8:BE:40:BE:B3:21:E6:38:DF:AF:B2:BE:D7:26:CD:22:1B:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0a58ece8-50b9-3cab-97d0-d75539e34fb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.15.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:9b:28:83:a6:d3:50:b4:d5:db:7c:54:96:d3:cd:d8:3e:1a: 33:e1:ac:7f:45:be:e5:fc:d8:6f:9f:3f:0b:71:26:5f:6f:e5: e0:d5:e1:a6:7a:b7:4a:7d:d9:56:2f:e3:dc:74:1c:7e:45:22: 90:e0:1a:3e:53:f8:21:e6:59:17:2e:ff:40:ae:e2:00:4c:19: a2:71:f0:6e:3a:f4:97:69:6b:ed:2a:2f:9a:d8:b9:84:8f:a6: 09:e1:f1:96:6c:1b:27:8d:ec:e4:f4:d0:27:9f:9d:ab:7e:4b: 0c:09:4e:23:81:6b:16:b0:41:ba:01:9c:9c:21:f6:4f:2f:bd: 58:e5:e8:83:65:e7:4f:8b:f2:51:c5:87:4d:e4:d8:f1:5d:5d: c1:a8:c8:d2:bd:73:a3:7c:f6:8e:fc:16:95:cc:79:b3:99:28: 05:be:5f:7c:4c:1d:f8:61:96:40:55:d0:17:99:01:f8:9c:9e: 88:26:1c:20:7d:9d:00:85:71:cf:12:1b:71:88:e2:a9:0b:b9: 20:cf:d6:64:65:b7:00:b6:7a:2c:6e:99:1b:f4:b7:02:59:68: b2:2a:25:1a:33:9d:d9:2f:72:56:7f:17:a9:21:5b:39:08:1a: c3:db:c3:11:f8:e8:a9:03:f4:b4:8a:fd:c8:86:22:fe:61:7c: a2:59:e8:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9HE15+M/QxEKw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk NzllZTFiNzMtYTRmMC00NzI0LWFjMGUtZmMxMTUxNTVmNWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTMzg08s+pPQkrCs9qv9NkShTeHQI5N8vrEz oGRqX/9c0zmMGuzJj22mxYd8GVXjLAae8MkJ3Wn6TX7l/AuZXOU9+Iur36tlMZGL c6kU339BwQkn4ElgD+mYzxesYywsCjuWEUyHUQc74UXTazAdxcyJU7U1dTG9Txw6 2OaK080kQZu+hLwQp5aOvEwHMlz+uUNBVLeazCw9j8DObud8ze+yhzWRc2/JVTb4 2qUx1DVYbiFgHek24sXdxFdlRevP4RVnMxt8v45p5jKuo7Hr0KyX12+8hi+mPSTS tgrGY637I7kA2e8jyPhf7x4U4DdpdJVu05fcvowVLwHeXFx5cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABoqL5AvrMh5jjfr7K+1ybNIhuaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGE1OGVjZTgtNTBiOS0z Y2FiLTk3ZDAtZDc1NTM5ZTM0ZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIg+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGabKIOm01C01dt8VJbTzdg+GjPhrH9FvuX82G+fPwtxJl9v5eDV4aZ6 t0p92VYv49x0HH5FIpDgGj5T+CHmWRcu/0Cu4gBMGaJx8G469Jdpa+0qL5rYuYSP pgnh8ZZsGyeN7OT00Cefnat+SwwJTiOBaxawQboBnJwh9k8vvVjl6INl50+L8lHF h03k2PFdXcGoyNK9c6N89o78FpXMebOZKAW+X3xMHfhhlkBV0BeZAficnogmHCB9 nQCFcc8SG3GI4qkLuSDP1mRltwC2eixumRv0twJZaLIqJRozndkvclZ/F6khWzkI GsPbwxH46KkD9LSK/ciGIv5hfKJZ6BE= -----END CERTIFICATE-----Generated at Sun May 4 18:54:17 2025 by rpki-client