$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8897f9cf-d049-3e83-9172-0fd019146e4e.roa File: 8897f9cf-d049-3e83-9172-0fd019146e4e.roa (raw, json) Hash identifier: +Kkc98rGEHxr9Ikm1Fr1TvShZ8d+tGy1n/V6tBr5Ihc= Subject key identifier: E5:32:C8:5D:CA:14:04:76:A4:E9:A6:90:98:20:AC:42:43:83:AC:ED Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78516A990BA209EC0A30500 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8897f9cf-d049-3e83-9172-0fd019146e4e.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.151.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:16:a9:90:ba:20:9e:c0:a3:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=6639d086-1740-45ce-94de-7fedc50ee991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f1:dc:b4:65:11:35:1f:61:63:c8:9c:99:a3: 1b:1a:41:48:fc:49:82:04:ae:c4:12:98:15:7f:cc: d0:97:d3:91:fc:d7:f4:cd:56:3f:3d:75:ac:cc:3b: ff:0d:55:d7:90:5d:43:2e:70:2e:88:ab:cf:bc:b0: 61:cf:8d:af:e2:b9:38:47:cd:2c:57:c7:7a:f1:5b: 48:bf:f7:eb:9e:e8:99:ca:cd:09:67:82:58:6a:8c: eb:c6:17:0a:0d:fe:42:2b:35:00:0e:69:77:89:da: 2b:4b:b5:8d:46:85:29:7b:e9:af:b2:8e:0d:b2:87: 2a:17:31:ba:da:c6:6e:99:a5:c8:51:8f:b5:33:97: 29:0b:66:ec:d0:df:f3:d9:28:7f:8b:3a:81:bd:e2: af:25:57:19:28:ff:9d:c9:01:f2:07:ef:a6:f0:69: d4:64:9c:dd:e3:9f:56:74:f1:57:ae:89:be:83:aa: 2e:28:2f:a7:e8:d7:c1:20:cf:c7:98:51:52:24:10: 0b:ec:6f:85:b9:3a:01:25:f2:9c:67:18:cf:ae:98: 21:e9:0f:d4:66:94:0a:f0:cb:33:e6:65:52:31:46: de:06:ef:50:b8:3f:fc:93:9a:49:98:21:1d:0c:10: b2:33:68:cf:7b:57:97:be:64:0b:8a:61:27:ca:01: 78:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:32:C8:5D:CA:14:04:76:A4:E9:A6:90:98:20:AC:42:43:83:AC:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8897f9cf-d049-3e83-9172-0fd019146e4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.151.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:eb:01:74:4a:4a:64:79:39:c3:6a:3c:da:89:7e:34:3c:81: d6:e4:f4:4b:18:2d:eb:46:b8:f1:1a:79:82:15:02:40:04:a6: 75:a6:9f:1f:24:6a:55:5a:fe:5e:a2:0e:58:16:ba:21:9b:a3: 41:c9:42:00:6b:e6:07:b2:38:b0:77:1c:55:b7:06:4f:66:66: 5f:c3:7c:57:9f:21:fc:96:d8:e9:b9:8a:19:51:34:80:c3:a3: a1:13:96:6a:00:cb:98:80:41:5d:5f:c4:f9:2f:db:eb:ce:68: f7:36:5a:6b:2a:b9:4a:c4:de:89:9d:79:87:6e:80:67:ae:2a: bc:e7:c8:a5:f4:10:8b:87:49:c0:fc:1f:4c:db:aa:35:49:bf: 71:b8:52:67:a2:f8:26:19:3b:32:79:ed:fc:27:f0:71:6a:48: 45:e2:79:43:91:67:68:87:3b:79:e7:dd:91:76:43:83:eb:df: f2:42:45:37:8d:a5:43:17:98:82:bb:d5:c4:09:83:69:34:5d: a6:35:5b:0c:fb:d8:9f:d1:86:d6:87:08:31:12:89:86:a2:53: 58:05:4d:ea:b5:c8:18:a3:0d:63:0b:7c:b6:a4:3d:15:1c:68: f5:fe:20:e9:1c:bc:56:c5:15:75:2a:9a:bc:75:ad:a7:86:1c: cc:cf:cf:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRapkLognsCjBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NjYzOWQwODYtMTc0MC00NWNlLTk0ZGUtN2ZlZGM1MGVlOTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvHctGURNR9hY8icmaMbGkFI/EmCBK7EEpgV f8zQl9OR/Nf0zVY/PXWszDv/DVXXkF1DLnAuiKvPvLBhz42v4rk4R80sV8d68VtI v/frnuiZys0JZ4JYaozrxhcKDf5CKzUADml3idorS7WNRoUpe+mvso4NsocqFzG6 2sZumaXIUY+1M5cpC2bs0N/z2Sh/izqBveKvJVcZKP+dyQHyB++m8GnUZJzd459W dPFXrom+g6ouKC+n6NfBIM/HmFFSJBAL7G+FuToBJfKcZxjPrpgh6Q/UZpQK8Msz 5mVSMUbeBu9QuD/8k5pJmCEdDBCyM2jPe1eXvmQLimEnygF4SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUyyF3KFAR2pOmmkJggrEJDg6ztMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODg5N2Y5Y2YtZDA0OS0z ZTgzLTkxNzItMGZkMDE5MTQ2ZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIpcQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPrAXRKSmR5OcNqPNqJfjQ8gdbk9EsYLetGuPEaeYIVAkAEpnWmnx8k alVa/l6iDlgWuiGbo0HJQgBr5geyOLB3HFW3Bk9mZl/DfFefIfyW2Om5ihlRNIDD o6ETlmoAy5iAQV1fxPkv2+vOaPc2WmsquUrE3omdeYdugGeuKrznyKX0EIuHScD8 H0zbqjVJv3G4Umei+CYZOzJ57fwn8HFqSEXieUORZ2iHO3nn3ZF2Q4Pr3/JCRTeN pUMXmIK71cQJg2k0XaY1Wwz72J/RhtaHCDESiYaiU1gFTeq1yBijDWMLfLakPRUc aPX+IOkcvFbFFXUqmrx1raeGHMzPz2M= -----END CERTIFICATE-----Generated at Sun May 4 19:27:43 2025 by rpki-client