$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0fa8f944-00d1-3fbc-8cd7-9a6f879fdb03.roa File: 0fa8f944-00d1-3fbc-8cd7-9a6f879fdb03.roa (raw, json) Hash identifier: +KSTENpNQy7yo/OajQqCjZSvEwi49VJwv0n3UKOfNgI= Subject key identifier: 34:C8:78:CD:03:47:56:71:F3:B9:76:07:DA:E9:CC:23:55:23:3C:C3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BAD5A0D01F7B5567047740 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0fa8f944-00d1-3fbc-8cd7-9a6f879fdb03.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 34.121.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d5:a0:d0:1f:7b:55:67:04:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=e163812d-c3ee-41af-813f-c6e96e63b0f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:98:b2:6e:12:67:ac:8c:92:1f:a9:c2:5d:d0: e0:a6:db:f4:35:76:2c:d8:7d:1c:b7:96:41:95:ab: 11:34:b8:11:44:aa:2b:6f:36:d6:80:69:05:74:61: c2:fa:21:73:7d:7e:ea:b1:e8:c3:77:33:b1:27:c6: 3e:3e:28:b9:33:0c:5d:74:7b:71:7d:6b:ab:ea:5a: 7a:32:4c:cb:dd:46:87:41:80:bf:a9:07:93:88:d2: 71:cf:b3:bc:c4:93:e0:53:20:cb:7c:ff:4d:10:37: 6e:2c:6b:ef:a7:61:c4:69:f4:c9:28:47:15:2c:b5: ca:c9:81:83:b6:be:64:bd:a7:b3:8f:da:d5:0f:b1: bf:ab:02:8f:0f:9d:d0:61:d7:12:12:b5:c7:48:0b: 0f:ad:fc:5b:0f:68:7b:63:26:8a:61:9b:14:81:ff: 68:bc:8a:15:75:e4:41:44:d4:22:62:b8:e8:45:53: e0:06:65:e4:29:90:3a:62:3a:68:ef:94:c2:4f:9a: ae:a3:74:9a:c2:45:c5:0e:7f:cc:ad:d3:3c:6b:30: 5e:8e:c7:74:d9:d3:2d:fd:73:c8:1b:57:bb:d7:9d: 92:bd:91:8f:19:87:db:66:f0:ca:77:d3:6e:1f:f8: 98:73:b8:19:c4:58:ee:5d:b0:62:82:53:e7:6b:61: 10:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C8:78:CD:03:47:56:71:F3:B9:76:07:DA:E9:CC:23:55:23:3C:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0fa8f944-00d1-3fbc-8cd7-9a6f879fdb03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.121.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:43:19:18:9a:e9:c2:e8:df:f4:1f:96:ec:40:8c:ea:f4:66: 82:18:92:f5:72:b7:61:64:6a:7f:52:d7:bb:e3:0a:d9:f8:01: 8b:c7:5f:fd:09:dc:06:8b:b8:9f:4e:cf:10:51:f9:e7:77:ea: fe:2b:6a:5f:3d:0e:39:b1:d1:d2:a1:d9:23:ba:69:16:49:e2: 63:42:27:1c:b4:ee:30:d0:85:2e:23:24:a6:4a:d9:c0:1e:17: 0b:6e:b2:0f:00:d6:b5:e7:a5:4e:85:cc:22:bb:55:ad:40:a9: cf:3d:c3:7f:f7:a4:d3:e5:f3:94:6e:37:ac:67:69:6f:0f:5c: be:3d:c3:92:b0:e6:67:0b:46:5e:67:2d:d4:73:af:6e:d2:b1: 0b:b9:8f:66:1f:36:0e:86:ab:25:da:01:e7:3e:79:64:7a:39: 82:57:d1:9a:96:bf:1d:97:5d:25:5b:ea:3b:f1:c8:ec:38:21: a8:c9:40:f9:ca:46:b4:9a:59:cc:dc:a0:35:7e:4b:ad:52:27: 86:8a:42:e4:d5:4b:1a:3a:d8:21:33:ee:b1:70:9d:6a:ac:a3: ae:4e:74:1a:cc:ef:2f:b8:67:f4:14:43:f4:5b:44:ae:f5:6d: 8f:19:ec:e2:9b:09:7d:f5:60:01:73:af:ed:8c:44:b6:85:5d: 62:a0:3f:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkutWg0B97VWcEd0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZTE2MzgxMmQtYzNlZS00MWFmLTgxM2YtYzZlOTZlNjNiMGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JiybhJnrIySH6nCXdDgptv0NXYs2H0ct5ZB lasRNLgRRKorbzbWgGkFdGHC+iFzfX7qsejDdzOxJ8Y+Pii5MwxddHtxfWur6lp6 MkzL3UaHQYC/qQeTiNJxz7O8xJPgUyDLfP9NEDduLGvvp2HEafTJKEcVLLXKyYGD tr5kvaezj9rVD7G/qwKPD53QYdcSErXHSAsPrfxbD2h7YyaKYZsUgf9ovIoVdeRB RNQiYrjoRVPgBmXkKZA6Yjpo75TCT5quo3SawkXFDn/MrdM8azBejsd02dMt/XPI G1e7152SvZGPGYfbZvDKd9NuH/iYc7gZxFjuXbBiglPna2EQrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTIeM0DR1Zx87l2B9rpzCNVIzzDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGZhOGY5NDQtMDBkMS0z ZmJjLThjZDctOWE2Zjg3OWZkYjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRDGRia6cLo3/QfluxAjOr0ZoIYkvVyt2Fkan9S17vjCtn4AYvHX/0J 3AaLuJ9OzxBR+ed36v4ral89Djmx0dKh2SO6aRZJ4mNCJxy07jDQhS4jJKZK2cAe Fwtusg8A1rXnpU6FzCK7Va1Aqc89w3/3pNPl85RuN6xnaW8PXL49w5Kw5mcLRl5n LdRzr27SsQu5j2YfNg6GqyXaAec+eWR6OYJX0ZqWvx2XXSVb6jvxyOw4IajJQPnK RrSaWczcoDV+S61SJ4aKQuTVSxo62CEz7rFwnWqso65OdBrM7y+4Z/QUQ/RbRK71 bY8Z7OKbCX31YAFzr+2MRLaFXWKgP8A= -----END CERTIFICATE-----Generated at Mon May 5 07:21:18 2025 by rpki-client