$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/43be4dcd-65a7-3de2-9e21-a973c89d7621.roa File: 43be4dcd-65a7-3de2-9e21-a973c89d7621.roa (raw, json) Hash identifier: cicuvqILicuQbbs/qLzt5aBP0/2SnnhjUszPsWsScEc= Subject key identifier: C7:76:43:05:5D:CD:DA:08:AE:01:29:CA:C0:84:74:3F:94:5B:85:84 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7850DB361C898D5FED8D680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/43be4dcd-65a7-3de2-9e21-a973c89d7621.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.72.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:0d:b3:61:c8:98:d5:fe:d8:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=c531a37d-6341-428e-8d0e-9c96c071551a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ed:27:fe:ac:5f:b5:78:1b:39:8a:a5:9e:4c: f2:73:6d:31:c8:79:64:dd:d6:01:ef:08:46:c2:d9: a4:55:ae:db:07:2d:99:8e:68:7d:44:e5:f0:3a:67: 6b:f2:12:c3:5e:da:98:f7:6d:73:c0:bf:da:b9:42: f3:83:7e:df:a9:b5:f4:a4:c8:b8:9e:3a:dd:b0:67: 4f:69:b2:7c:04:6b:e2:6d:a8:9b:c5:9a:f8:7f:c3: b1:6b:8f:64:98:74:59:ba:9c:d2:44:99:04:f0:a8: d4:0f:b2:c9:a6:1a:e7:2c:57:9c:73:0b:b2:d9:e8: 44:b2:df:ce:85:94:55:31:5d:c7:0c:52:6f:87:6c: 52:85:30:6e:d7:59:e1:9b:ab:e0:7c:25:57:ed:99: ff:a8:63:2d:f4:dc:80:4f:75:fa:68:fd:51:aa:96: ca:f6:fe:3f:e6:ce:0f:b5:a4:f4:e0:0f:53:a5:c9: c8:3b:2d:5d:a8:66:3b:b4:f0:d2:2f:df:15:74:0b: 11:e2:87:24:80:b2:fd:09:dc:79:91:36:bf:b0:ed: 9c:4f:eb:24:66:ef:db:9e:b7:d6:5e:0c:5b:9c:97: 21:18:e3:51:07:c0:8d:df:fc:25:aa:d5:b8:5a:c7: ca:78:2e:17:75:fe:b2:5d:f5:83:22:df:d4:34:a1: d2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:76:43:05:5D:CD:DA:08:AE:01:29:CA:C0:84:74:3F:94:5B:85:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/43be4dcd-65a7-3de2-9e21-a973c89d7621.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.72.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:1a:34:cc:a9:13:58:24:e0:2a:39:5f:f3:49:03:84:21:98: 0c:aa:3b:04:0d:35:a6:98:4d:fd:20:20:a2:00:b9:e4:34:3f: b9:e8:a7:3b:3c:86:b8:8f:3c:59:60:72:4c:be:43:3e:1d:58: df:bb:34:91:f5:0a:da:33:3c:08:b4:68:63:5e:ec:5a:c9:92: aa:8a:ec:91:f7:9e:d3:43:fb:a2:38:3c:50:06:cc:ad:28:58: d2:03:e3:9d:58:b3:18:75:14:10:36:57:aa:3a:3a:85:62:9b: c9:00:cd:33:03:fe:3d:23:b4:c4:b3:59:5b:22:32:dd:6b:bd: 16:3b:f9:c0:8f:a6:a4:ab:c4:a1:71:26:ba:f5:85:27:b7:f7: d2:0a:e2:d0:88:c4:4b:3b:b4:c3:f6:d1:de:d5:dc:81:d5:42: bb:5a:36:af:3b:96:1b:ab:f7:1c:70:7b:67:d0:7e:0d:83:30: 38:76:e9:7f:64:9c:1f:6e:08:ee:fa:db:e8:cf:f6:de:30:08: 8f:1a:f9:4a:97:eb:49:6a:bc:c6:2b:53:13:e2:23:73:18:25: 00:28:fc:d7:ba:ca:c1:36:39:71:77:a3:4a:8f:51:8a:fa:a4: 7d:da:ac:2d:4a:0a:e5:8f:50:ad:07:d7:29:00:ec:38:c1:19: 9c:30:37:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQ2zYciY1f7Y1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YzUzMWEzN2QtNjM0MS00MjhlLThkMGUtOWM5NmMwNzE1NTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO0n/qxftXgbOYqlnkzyc20xyHlk3dYB7whG wtmkVa7bBy2Zjmh9ROXwOmdr8hLDXtqY921zwL/auULzg37fqbX0pMi4njrdsGdP abJ8BGvibaibxZr4f8Oxa49kmHRZupzSRJkE8KjUD7LJphrnLFeccwuy2ehEst/O hZRVMV3HDFJvh2xShTBu11nhm6vgfCVX7Zn/qGMt9NyAT3X6aP1RqpbK9v4/5s4P taT04A9TpcnIOy1dqGY7tPDSL98VdAsR4ockgLL9Cdx5kTa/sO2cT+skZu/bnrfW XgxbnJchGONRB8CN3/wlqtW4WsfKeC4Xdf6yXfWDIt/UNKHSaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMd2QwVdzdoIrgEpysCEdD+UW4WEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDNiZTRkY2QtNjVhNy0z ZGUyLTllMjEtYTk3M2M4OWQ3NjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkjAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0aNMypE1gk4Co5X/NJA4QhmAyqOwQNNaaYTf0gIKIAueQ0P7nopzs8 hriPPFlgcky+Qz4dWN+7NJH1CtozPAi0aGNe7FrJkqqK7JH3ntND+6I4PFAGzK0o WNID451Ysxh1FBA2V6o6OoVim8kAzTMD/j0jtMSzWVsiMt1rvRY7+cCPpqSrxKFx Jrr1hSe399IK4tCIxEs7tMP20d7V3IHVQrtaNq87lhur9xxwe2fQfg2DMDh26X9k nB9uCO762+jP9t4wCI8a+UqX60lqvMYrUxPiI3MYJQAo/Ne6ysE2OXF3o0qPUYr6 pH3arC1KCuWPUK0H1ykA7DjBGZwwN1Y= -----END CERTIFICATE-----Generated at Sun May 4 18:57:00 2025 by rpki-client