$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c91055f-20da-3c23-b862-dcdd076e260e.roa File: 2c91055f-20da-3c23-b862-dcdd076e260e.roa (raw, json) Hash identifier: YpOQ9iS0MwJpm61GQ2U09FJFsWo3w0pv/5d+BqlcbOc= Subject key identifier: 67:A6:E4:72:AB:40:DB:41:F6:F6:97:51:65:A1:89:C7:25:A4:86:F2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78536598B915841EAB62080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c91055f-20da-3c23-b862-dcdd076e260e.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.89.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:36:59:8b:91:58:41:ea:b6:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=b5078407-b571-4e27-8e16-15087461a028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9e:ab:a5:28:b6:cb:b7:7d:ad:81:0c:81:08: 4a:3d:2b:11:1f:cf:3e:46:08:81:66:e5:36:5f:cd: 64:fc:b5:b6:23:23:29:e9:23:1b:f3:19:6c:5a:82: 2d:0f:b4:08:ae:70:8e:f4:97:5c:5a:5c:dd:98:41: 33:99:c9:d6:5d:f3:65:40:1a:40:cf:2e:9d:6d:89: b9:3d:b5:c1:cf:ba:a8:26:89:39:52:b8:40:e4:e3: 38:00:df:ff:f0:1b:4f:a1:9d:1d:46:af:7a:68:dc: c4:a2:aa:61:ab:6e:0f:4b:bd:ee:07:9c:6b:76:19: 13:54:2d:1a:fa:ac:72:82:51:e8:1a:61:6d:2c:49: c2:16:a8:4f:cc:ef:cf:43:b5:e1:4a:67:0b:0e:e4: 15:a0:54:e3:2e:9f:bc:a2:43:66:6b:ba:52:6e:c1: d4:f3:0e:96:75:1e:76:8a:24:a0:a5:37:a6:1c:eb: b2:66:9a:9f:c2:cc:8d:4e:1a:48:23:b6:1e:87:69: fd:0e:ec:21:ee:64:97:6d:16:2e:e7:2b:e9:59:bd: f8:38:90:5e:f6:36:60:99:34:4c:9f:ce:3c:6b:be: 33:f1:1a:09:75:7d:d2:45:1a:d7:13:cf:47:b3:c1: 5f:1b:8c:d9:af:2d:f4:4a:75:1a:ee:4a:ca:e0:3e: af:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A6:E4:72:AB:40:DB:41:F6:F6:97:51:65:A1:89:C7:25:A4:86:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c91055f-20da-3c23-b862-dcdd076e260e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.89.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:18:27:fe:ca:bb:bc:dc:0c:33:9b:1f:0a:65:10:7b:ac:1d: b2:4f:f2:7a:17:fa:b6:30:08:b9:90:58:f5:65:ab:8f:be:8e: 26:3b:9b:09:72:22:b7:94:88:5d:26:77:5f:68:e3:ff:74:83: 73:25:27:42:38:30:d1:36:f8:e2:b4:3c:ea:85:10:af:3c:12: e6:fa:d1:d7:55:ec:ce:4d:f1:3d:20:8e:2f:5b:70:25:ae:cd: 6d:ee:a5:68:05:ba:4c:47:0d:0b:b5:53:de:bb:a8:b6:20:33: 64:13:02:b4:b9:72:50:da:5e:8b:a1:c5:09:b2:13:c5:d8:c0: 14:6b:fd:82:51:a5:ae:03:e3:22:b8:66:52:1e:4a:a0:a1:a2: be:2e:b3:41:5a:59:f9:86:e1:de:e8:ec:ea:76:37:a8:ea:84: b7:ff:04:42:7e:4d:ef:cf:fb:95:bb:70:b0:d7:fc:3c:2d:ef: 90:59:24:01:2f:a4:ed:ee:27:26:e0:0c:b9:c0:c0:48:3a:33: e0:e3:1d:bf:97:d3:32:13:a5:ab:b1:39:9e:02:59:6b:ad:e1: ac:d3:95:43:ca:a9:f9:00:c5:f7:a6:6d:4f:36:30:34:8c:cb: 83:55:e0:0a:28:dc:45:89:7f:ca:5d:bb:30:ce:bf:01:dc:f1: 84:78:25:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTZZi5FYQeq2IIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YjUwNzg0MDctYjU3MS00ZTI3LThlMTYtMTUwODc0NjFhMDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ6rpSi2y7d9rYEMgQhKPSsRH88+RgiBZuU2 X81k/LW2IyMp6SMb8xlsWoItD7QIrnCO9JdcWlzdmEEzmcnWXfNlQBpAzy6dbYm5 PbXBz7qoJok5UrhA5OM4AN//8BtPoZ0dRq96aNzEoqphq24PS73uB5xrdhkTVC0a +qxyglHoGmFtLEnCFqhPzO/PQ7XhSmcLDuQVoFTjLp+8okNma7pSbsHU8w6WdR52 iiSgpTemHOuyZpqfwsyNThpII7Yeh2n9Duwh7mSXbRYu5yvpWb34OJBe9jZgmTRM n848a74z8RoJdX3SRRrXE89Hs8FfG4zZry30SnUa7krK4D6vcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGem5HKrQNtB9vaXUWWhicclpIbyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmM5MTA1NWYtMjBkYS0z YzIzLWI4NjItZGNkZDA3NmUyNjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIlnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkYJ/7Ku7zcDDObHwplEHusHbJP8noX+rYwCLmQWPVlq4++jiY7mwly IreUiF0md19o4/90g3MlJ0I4MNE2+OK0POqFEK88Eub60ddV7M5N8T0gji9bcCWu zW3upWgFukxHDQu1U967qLYgM2QTArS5clDaXouhxQmyE8XYwBRr/YJRpa4D4yK4 ZlIeSqChor4us0FaWfmG4d7o7Op2N6jqhLf/BEJ+Te/P+5W7cLDX/Dwt75BZJAEv pO3uJybgDLnAwEg6M+DjHb+X0zITpauxOZ4CWWut4azTlUPKqfkAxfembU82MDSM y4NV4Aoo3EWJf8pduzDOvwHc8YR4JfY= -----END CERTIFICATE-----Generated at Sun May 4 19:53:23 2025 by rpki-client