$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/42c2d915-5eff-3f59-a5b8-73de42f76f90.roa File: 42c2d915-5eff-3f59-a5b8-73de42f76f90.roa (raw, json) Hash identifier: pV2NJ/NgvdJ0bXnrokPuZ2Ab11vr5bgajOf6UporavM= Subject key identifier: 68:21:C0:08:01:A2:9B:7C:6D:75:B6:99:4F:F6:25:B1:79:88:10:96 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BB719464A387203EE2BA40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/42c2d915-5eff-3f59-a5b8-73de42f76f90.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 34.106.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:71:94:64:a3:87:20:3e:e2:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=695cd6d4-595c-4e02-a9d6-b7d34782fe7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4a:55:e8:79:ad:ee:eb:bd:3e:d7:49:b3:d9: 38:5a:ed:aa:17:2f:75:a7:04:2e:dc:f6:f6:ba:4a: 54:9c:02:4f:9f:3d:46:49:56:84:93:fb:db:70:5e: 49:ec:db:1a:61:75:a8:7f:ab:58:77:9a:e6:ca:57: 59:9f:0f:59:c5:49:32:16:90:0c:ed:5d:b3:62:4e: c1:b2:cc:69:6f:38:63:62:54:f8:67:ec:15:c3:16: 46:ee:09:64:ba:96:14:fb:04:33:d4:f8:4a:98:b1: 6d:23:6b:f4:1a:3f:f9:91:18:f0:dd:8a:9d:97:6f: 93:3c:48:61:07:22:89:9e:38:e8:21:9a:3f:26:db: 13:94:fc:44:d8:82:ec:14:7b:f7:5e:28:8a:f4:3c: d6:c7:3e:bb:76:47:50:0c:e4:6d:50:ac:a9:18:c9: 8f:c4:cc:ba:96:95:ca:ef:4c:64:06:47:28:27:fc: 73:50:22:a7:43:f5:d1:fc:ee:3e:f6:74:31:e6:b5: f4:4a:5d:76:61:3e:26:4a:21:3c:93:22:04:ab:c1: eb:fa:1e:ea:c2:b3:9c:1d:72:f1:97:cf:26:a1:31: 40:10:f6:17:02:09:cf:33:af:79:44:40:9f:6b:03: 3a:9f:5b:a4:d4:49:c4:e6:c0:00:9e:ab:7e:c6:f1: 7d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:21:C0:08:01:A2:9B:7C:6D:75:B6:99:4F:F6:25:B1:79:88:10:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/42c2d915-5eff-3f59-a5b8-73de42f76f90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.106.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:84:4e:aa:ed:66:51:71:df:99:30:b8:33:b9:c3:d5:b7:08: 51:bd:20:33:96:58:7f:11:6e:83:a8:cc:41:15:8d:39:4d:c2: e5:21:11:9b:44:d7:72:fe:2a:7c:64:3d:c0:5e:da:bb:de:ac: 34:72:7d:6a:0f:19:45:04:10:07:c5:d8:81:9d:fd:16:1e:e8: 5f:46:9c:4d:f3:0f:90:fa:09:24:e3:d4:87:7b:58:0b:f0:93: 35:49:7f:ed:70:b9:56:b2:3b:28:c2:9d:71:3b:7c:6a:1f:27: e0:ad:95:e3:a5:63:78:26:8b:5a:a1:ad:29:76:e5:b4:04:5f: b5:33:af:09:5a:af:b0:99:21:99:7f:c6:8a:f8:30:95:47:88: 03:a3:65:55:c7:6f:c1:f0:aa:09:bb:1d:23:4b:e1:7e:bb:4a: 1b:a8:70:db:56:9f:50:18:18:d2:d2:f3:f8:1b:60:c7:31:1d: 07:1b:21:a5:32:1b:6c:28:87:ba:ac:5b:f0:70:bf:90:3c:77: 82:35:dc:a0:70:43:7d:eb:d6:c3:c2:a2:cb:c4:a7:ee:4f:61: 9e:38:fe:02:55:54:f7:ef:94:c0:05:50:e2:73:3d:fe:b7:06: bc:12:19:36:1d:4a:a1:a8:20:bc:f9:54:60:dd:92:b6:87:d5: d4:a3:9c:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku3GUZKOHID7iukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Njk1Y2Q2ZDQtNTk1Yy00ZTAyLWE5ZDYtYjdkMzQ3ODJmZTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUpV6Hmt7uu9PtdJs9k4Wu2qFy91pwQu3Pb2 ukpUnAJPnz1GSVaEk/vbcF5J7NsaYXWof6tYd5rmyldZnw9ZxUkyFpAM7V2zYk7B ssxpbzhjYlT4Z+wVwxZG7glkupYU+wQz1PhKmLFtI2v0Gj/5kRjw3Yqdl2+TPEhh ByKJnjjoIZo/JtsTlPxE2ILsFHv3XiiK9DzWxz67dkdQDORtUKypGMmPxMy6lpXK 70xkBkcoJ/xzUCKnQ/XR/O4+9nQx5rX0Sl12YT4mSiE8kyIEq8Hr+h7qwrOcHXLx l88moTFAEPYXAgnPM695RECfawM6n1uk1EnE5sAAnqt+xvF96wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGghwAgBopt8bXW2mU/2JbF5iBCWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDJjMmQ5MTUtNWVmZi0z ZjU5LWE1YjgtNzNkZTQyZjc2ZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEImqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGETqrtZlFx35kwuDO5w9W3CFG9IDOWWH8RboOozEEVjTlNwuUhEZtE 13L+KnxkPcBe2rverDRyfWoPGUUEEAfF2IGd/RYe6F9GnE3zD5D6CSTj1Id7WAvw kzVJf+1wuVayOyjCnXE7fGofJ+CtleOlY3gmi1qhrSl25bQEX7Uzrwlar7CZIZl/ xor4MJVHiAOjZVXHb8Hwqgm7HSNL4X67ShuocNtWn1AYGNLS8/gbYMcxHQcbIaUy G2woh7qsW/Bwv5A8d4I13KBwQ33r1sPCosvEp+5PYZ44/gJVVPfvlMAFUOJzPf63 BrwSGTYdSqGoILz5VGDdkraH1dSjnJM= -----END CERTIFICATE-----Generated at Sun May 4 18:32:15 2025 by rpki-client