$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d51b005-9e35-32cc-a541-7d3f5974a430.roa File: 1d51b005-9e35-32cc-a541-7d3f5974a430.roa (raw, json) Hash identifier: 0HeSG2Sq+cZXdRr+AhjShjehtx1JtuMUqkuGVkdM52Y= Subject key identifier: 91:91:4D:63:61:0C:A0:AD:AC:D0:44:82:C8:0C:0E:AA:06:2E:98:A2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785218FBFE9F654A1FA8800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d51b005-9e35-32cc-a541-7d3f5974a430.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.72.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:21:8f:bf:e9:f6:54:a1:fa:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=5f4a65b8-04c4-4091-a701-0348c4b70b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bd:75:4d:b5:50:f6:43:ef:ae:05:69:f0:0f: 17:df:71:78:e8:d1:b8:28:2b:71:2d:e0:39:bf:7b: c5:ae:69:38:63:25:3f:a2:fe:66:d4:5b:8f:e6:36: 80:69:cd:1e:77:a1:ea:01:2f:af:97:f8:12:15:a3: ae:41:d3:d8:14:0e:61:48:f4:f3:52:7c:4c:d8:1e: 74:cd:7f:ba:7a:8f:41:f8:5e:c1:dc:b6:72:a9:8b: f6:2b:53:e6:fd:d1:5e:d2:e5:1a:4f:c7:13:88:c3: cf:39:66:2c:97:f1:f0:07:09:0c:30:d2:94:68:c6: d8:6b:a1:9e:bc:7f:e1:41:63:c4:d4:90:b9:aa:93: 60:0e:eb:52:5d:15:57:fa:08:11:c9:0d:2c:e3:4a: 92:06:f9:4b:38:67:09:7e:61:7b:cb:7d:df:ab:30: ca:56:21:8a:36:0a:a1:18:73:95:94:51:d3:37:66: 1a:9e:9f:c3:78:1c:0f:20:cd:66:7d:dc:86:c7:2f: 29:e0:52:67:de:d9:5a:13:35:79:ca:7f:65:d4:46: ec:33:8e:0a:bb:d5:61:b0:b5:20:ea:88:32:a1:8b: 62:d0:b8:db:2b:38:74:51:76:f7:09:9c:fb:e8:c8: 35:66:6a:4f:5c:27:6f:bc:f1:59:d9:41:7e:39:d3: e0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:91:4D:63:61:0C:A0:AD:AC:D0:44:82:C8:0C:0E:AA:06:2E:98:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1d51b005-9e35-32cc-a541-7d3f5974a430.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.72.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:e8:09:d6:c2:45:fd:90:8f:51:d3:3b:d8:d6:db:f5:50:95: 4f:87:67:52:7b:f2:dd:5f:93:db:54:e2:80:c4:21:6c:ae:d2: 01:17:93:2d:4e:3d:e7:24:a7:41:c7:45:8a:86:a8:2b:22:de: 71:8e:3b:d4:74:b2:55:73:14:0c:ba:2a:aa:7d:02:59:54:1b: d9:fa:10:27:0e:0e:dd:05:ce:61:3a:ac:c0:86:b9:9e:1b:6a: 5a:ee:60:ef:86:c1:46:52:7f:3a:b0:1c:af:be:9c:df:74:52: bb:f0:dc:27:26:8c:6e:79:97:3a:cb:19:22:21:a9:ea:42:77: be:32:4f:3d:1c:dd:3d:7e:f6:a5:91:49:a5:d0:ed:25:82:2e: e2:d7:26:ba:a3:5d:4a:38:7e:0e:07:db:f8:62:84:05:29:ea: 5f:e4:e4:67:de:82:9a:b4:a6:1e:63:db:54:c1:c7:4a:35:f3: 82:c8:42:31:f7:6d:48:24:f7:fc:c7:29:af:2d:ee:e1:65:3f: 82:1a:d1:24:c9:ff:8b:18:bc:ca:73:1a:ff:b8:66:7e:5c:e5: 75:7d:a6:6f:fc:d6:74:b4:b3:fb:9c:73:c2:15:19:df:54:86: 30:e5:1a:8d:8d:b7:01:80:a5:ef:91:69:08:05:16:46:2b:5b: 9a:1b:5f:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhSGPv+n2VKH6iAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NWY0YTY1YjgtMDRjNC00MDkxLWE3MDEtMDM0OGM0YjcwYjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb11TbVQ9kPvrgVp8A8X33F46NG4KCtxLeA5 v3vFrmk4YyU/ov5m1FuP5jaAac0ed6HqAS+vl/gSFaOuQdPYFA5hSPTzUnxM2B50 zX+6eo9B+F7B3LZyqYv2K1Pm/dFe0uUaT8cTiMPPOWYsl/HwBwkMMNKUaMbYa6Ge vH/hQWPE1JC5qpNgDutSXRVX+ggRyQ0s40qSBvlLOGcJfmF7y33fqzDKViGKNgqh GHOVlFHTN2Yanp/DeBwPIM1mfdyGxy8p4FJn3tlaEzV5yn9l1EbsM44Ku9VhsLUg 6ogyoYti0LjbKzh0UXb3CZz76Mg1ZmpPXCdvvPFZ2UF+OdPg0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGRTWNhDKCtrNBEgsgMDqoGLpiiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWQ1MWIwMDUtOWUzNS0z MmNjLWE1NDEtN2QzZjU5NzRhNDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfoCdbCRf2Qj1HTO9jW2/VQlU+HZ1J78t1fk9tU4oDEIWyu0gEXky1O Peckp0HHRYqGqCsi3nGOO9R0slVzFAy6Kqp9AllUG9n6ECcODt0FzmE6rMCGuZ4b alruYO+GwUZSfzqwHK++nN90Urvw3CcmjG55lzrLGSIhqepCd74yTz0c3T1+9qWR SaXQ7SWCLuLXJrqjXUo4fg4H2/hihAUp6l/k5Gfegpq0ph5j21TBx0o184LIQjH3 bUgk9/zHKa8t7uFlP4Ia0STJ/4sYvMpzGv+4Zn5c5XV9pm/81nS0s/ucc8IVGd9U hjDlGo2NtwGApe+RaQgFFkYrW5obX9k= -----END CERTIFICATE-----Generated at Sun May 4 19:55:48 2025 by rpki-client