$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/81c89afc-5b29-3f9c-89d8-f47b5852725e.roa File: 81c89afc-5b29-3f9c-89d8-f47b5852725e.roa (raw, json) Hash identifier: gDLXaFGOL5lGB+ZQrde/C39F904cuY/fur8dPNv7uGI= Subject key identifier: 9F:9E:DB:C3:3E:FB:68:19:A6:92:B1:77:A2:4B:48:BE:9A:56:B2:64 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584973DEDDB479A959F82F56E300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/81c89afc-5b29-3f9c-89d8-f47b5852725e.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 19527 IP address blocks: 34.2.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:dd:b4:79:a9:59:f8:2f:56:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=02baa9d7-0fa6-46d3-b80e-0ac16f6efa09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8f:cc:c6:6a:43:50:4c:a6:b9:a9:a8:54:13: d2:d7:f7:2f:8d:46:99:59:d2:1e:7d:bd:88:e6:d9: cb:01:e4:a8:b9:c7:44:3c:3e:0c:9f:34:ba:f1:92: 20:34:54:09:af:ad:3c:4a:25:d7:fa:e8:2f:38:64: e4:f1:3b:da:81:ab:40:e8:85:d9:46:eb:19:e9:a5: c6:06:ca:63:1e:d2:99:df:33:e0:98:51:c5:ed:1e: da:b0:ce:44:27:f5:e5:e6:c1:76:ea:72:87:47:14: 0f:4d:16:54:f6:63:90:2f:c5:87:6f:ba:d8:bd:3a: ef:42:94:02:92:80:93:aa:d3:15:f6:15:89:a5:a5: 74:cd:03:03:25:f7:aa:fb:8a:4e:54:c2:22:07:4d: f6:7d:77:9e:a7:e4:91:5c:39:c3:5b:39:a5:22:85: 7e:46:0b:f1:bc:b4:6f:55:7e:a6:c2:3e:40:9e:6e: 05:88:00:30:5c:02:57:58:65:29:05:b8:f1:b2:6a: 38:de:75:09:ef:b6:79:75:64:fa:f0:6b:a1:02:55: 19:ca:8b:19:be:64:15:8f:c9:6a:0b:62:cd:e9:23: 6a:65:9f:8f:d4:24:7e:47:01:7f:3a:04:8a:d3:74: ac:b2:a8:f9:92:62:26:3c:4f:66:2a:8f:35:fd:e9: 4d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9E:DB:C3:3E:FB:68:19:A6:92:B1:77:A2:4B:48:BE:9A:56:B2:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/81c89afc-5b29-3f9c-89d8-f47b5852725e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.2.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:3b:19:93:63:b1:32:33:c9:e2:34:9a:52:08:df:9e:ba:c4: 69:43:10:ef:d9:cf:3d:de:1c:e0:58:48:50:23:26:6e:e3:44: a8:71:3b:2b:08:e0:8e:a5:6d:4a:92:60:7b:73:ac:2b:d1:99: 50:a5:60:c4:2c:c0:bd:a2:35:0e:47:0c:c8:9b:6c:0e:0d:b5: b3:47:ac:23:9d:8b:d9:47:48:ca:9f:ef:04:c8:0d:3a:35:0b: 5f:07:0d:20:fd:79:f3:b4:2a:e1:78:34:a2:a4:c0:de:76:92: 01:7d:77:b6:f3:d2:8c:1b:01:6c:81:14:06:06:6e:f7:6a:9d: 6b:9c:38:8e:03:8c:50:76:26:b7:cd:ae:bf:0f:63:e2:d8:cb: d3:83:27:fe:1d:9b:bd:bd:c3:93:40:72:2d:b0:0e:7c:43:12: 9a:3d:d0:62:82:cb:3e:c6:cf:59:81:3e:de:e1:7c:ef:13:19: 49:83:f1:9d:62:80:5d:54:ce:cf:e5:3c:31:0e:0c:43:da:32: 4f:24:8a:3f:64:be:4d:9a:83:ff:e0:87:f2:05:fd:9d:e3:e7: d0:29:de:d4:06:bf:91:21:41:7e:fd:3b:00:ca:ee:1a:f3:0d: 90:26:e9:5d:15:38:f4:8b:11:2f:19:1e:8f:b9:6d:76:c2:f6: f2:94:b3:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3t20ealZ+C9W4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk MDJiYWE5ZDctMGZhNi00NmQzLWI4MGUtMGFjMTZmNmVmYTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY/MxmpDUEymuamoVBPS1/cvjUaZWdIefb2I 5tnLAeSoucdEPD4MnzS68ZIgNFQJr608SiXX+ugvOGTk8TvagatA6IXZRusZ6aXG BspjHtKZ3zPgmFHF7R7asM5EJ/Xl5sF26nKHRxQPTRZU9mOQL8WHb7rYvTrvQpQC koCTqtMV9hWJpaV0zQMDJfeq+4pOVMIiB032fXeep+SRXDnDWzmlIoV+RgvxvLRv VX6mwj5Anm4FiAAwXAJXWGUpBbjxsmo43nUJ77Z5dWT68GuhAlUZyosZvmQVj8lq C2LN6SNqZZ+P1CR+RwF/OgSK03Sssqj5kmImPE9mKo81/elNswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+e28M++2gZppKxd6JLSL6aVrJkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODFjODlhZmMtNWIyOS0z ZjljLTg5ZDgtZjQ3YjU4NTI3MjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBIgJEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGo7GZNjsTIzyeI0mlII3566xGlDEO/Zzz3eHOBYSFAjJm7jRKhxOysI 4I6lbUqSYHtzrCvRmVClYMQswL2iNQ5HDMibbA4NtbNHrCOdi9lHSMqf7wTIDTo1 C18HDSD9efO0KuF4NKKkwN52kgF9d7bz0owbAWyBFAYGbvdqnWucOI4DjFB2JrfN rr8PY+LYy9ODJ/4dm729w5NAci2wDnxDEpo90GKCyz7Gz1mBPt7hfO8TGUmD8Z1i gF1Uzs/lPDEODEPaMk8kij9kvk2ag//gh/IF/Z3j59Ap3tQGv5EhQX79OwDK7hrz DZAm6V0VOPSLES8ZHo+5bXbC9vKUs7M= -----END CERTIFICATE-----Generated at Sun May 4 18:28:53 2025 by rpki-client