$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9ba5ace5-0233-36ea-a4f1-84080f919ac7.roa File: 9ba5ace5-0233-36ea-a4f1-84080f919ac7.roa (raw, json) Hash identifier: FgDP3vLctlymva96CUgMgDjlPxyKTsFB948Ls7VOi5o= Subject key identifier: 29:FA:52:B6:D7:DE:A3:2B:E7:B6:A7:17:7E:E5:E6:0E:86:E8:20:A6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78501AE65631765A75422E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9ba5ace5-0233-36ea-a4f1-84080f919ac7.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.68.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:01:ae:65:63:17:65:a7:54:22:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=2b50c866-31ed-43df-939b-42fb426fa0ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:01:31:1d:cf:64:54:51:8c:f6:82:c9:1d:25: 0a:aa:23:7e:7a:6e:de:2f:eb:a3:58:e4:71:1c:df: 36:24:fb:e1:a7:4d:c6:3c:65:24:41:75:8c:f9:46: fd:66:f5:a6:0a:6e:d4:db:dd:b0:b4:68:03:bc:17: fe:5f:37:11:49:36:a6:11:1f:d5:c3:a5:84:85:d8: ef:a6:24:5f:28:85:6b:82:56:b7:62:1c:66:9c:a7: 55:b3:52:30:c3:b4:ac:64:8e:a2:f1:26:b4:da:67: e3:eb:34:0b:50:87:e9:27:5f:15:3c:5f:6b:ca:b3: ac:7f:9c:80:91:af:47:32:40:43:1f:41:49:7d:2c: 95:ce:e6:36:9f:e9:2a:38:ad:d2:f4:a0:aa:50:56: 83:44:dd:aa:77:30:06:2c:a7:cd:01:b5:27:55:e9: 3c:80:dd:74:78:a2:70:ed:d4:03:fa:d2:0c:e6:e2: 75:9e:94:ba:a3:69:b8:c0:d8:77:3e:48:c2:31:31: b7:c4:3e:12:e0:d7:c9:70:4d:e3:b0:d2:e8:2c:18: f8:01:db:33:18:8e:58:6b:44:00:73:ab:ee:bf:57: ac:50:00:cd:b2:0d:04:0c:2b:c1:bd:ae:8a:85:9c: c2:cb:df:d6:1f:ff:36:51:84:eb:7c:10:db:3f:85: b5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:FA:52:B6:D7:DE:A3:2B:E7:B6:A7:17:7E:E5:E6:0E:86:E8:20:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9ba5ace5-0233-36ea-a4f1-84080f919ac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.68.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:58:a8:c0:f6:b6:13:6d:c4:ee:65:dd:5c:4a:bd:d6:a2:7d: 1b:e2:52:9f:9d:0e:d1:55:a9:02:2d:b4:46:8a:d1:3d:10:34: 0c:81:8a:1e:5b:81:8d:04:70:0d:b2:de:8e:b2:0c:07:e4:24: 23:96:35:22:8e:98:d3:ed:34:7f:dc:d8:35:e8:fe:3f:47:d5: 72:aa:a3:86:df:d2:09:11:5c:c8:f6:59:f9:27:70:79:bd:66: 64:62:bd:7d:66:67:5c:9c:fd:b0:a1:bc:9c:d5:93:ab:6b:f7: b7:d4:00:b6:83:d8:c9:8a:f7:6f:c9:75:e4:6f:c3:48:b2:5a: 74:44:3e:81:20:a0:2c:79:8c:0c:27:28:71:a1:52:e7:a4:2e: c6:87:84:8d:82:95:d7:7e:20:87:96:57:bd:bb:9f:2a:e0:89: cc:e6:19:45:f4:45:15:6c:e5:d8:9f:d6:8e:1b:be:51:ed:5a: 1b:27:31:cd:47:8c:39:f2:1e:91:7e:66:5e:18:51:16:2e:8c: 1e:af:6a:b6:43:8e:f6:50:7c:d6:b6:82:30:64:75:e2:72:f5: cc:ef:1c:8f:f8:75:5d:e3:b0:3c:74:9f:5a:c3:b2:a6:87:5f: d3:91:2b:9b:ca:21:a2:f1:8b:2c:a0:18:3a:60:1f:77:13:f0: 18:e1:81:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQGuZWMXZadUIuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MmI1MGM4NjYtMzFlZC00M2RmLTkzOWItNDJmYjQyNmZhMGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAExHc9kVFGM9oLJHSUKqiN+em7eL+ujWORx HN82JPvhp03GPGUkQXWM+Ub9ZvWmCm7U292wtGgDvBf+XzcRSTamER/Vw6WEhdjv piRfKIVrgla3YhxmnKdVs1Iww7SsZI6i8Sa02mfj6zQLUIfpJ18VPF9ryrOsf5yA ka9HMkBDH0FJfSyVzuY2n+kqOK3S9KCqUFaDRN2qdzAGLKfNAbUnVek8gN10eKJw 7dQD+tIM5uJ1npS6o2m4wNh3PkjCMTG3xD4S4NfJcE3jsNLoLBj4AdszGI5Ya0QA c6vuv1esUADNsg0EDCvBva6KhZzCy9/WH/82UYTrfBDbP4W1BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCn6UrbX3qMr57anF37l5g6G6CCmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWJhNWFjZTUtMDIzMy0z NmVhLWE0ZjEtODQwODBmOTE5YWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1YqMD2thNtxO5l3VxKvdaifRviUp+dDtFVqQIttEaK0T0QNAyBih5b gY0EcA2y3o6yDAfkJCOWNSKOmNPtNH/c2DXo/j9H1XKqo4bf0gkRXMj2WfkncHm9 ZmRivX1mZ1yc/bChvJzVk6tr97fUALaD2MmK92/JdeRvw0iyWnREPoEgoCx5jAwn KHGhUuekLsaHhI2Cldd+IIeWV727nyrgiczmGUX0RRVs5dif1o4bvlHtWhsnMc1H jDnyHpF+Zl4YURYujB6varZDjvZQfNa2gjBkdeJy9czvHI/4dV3jsDx0n1rDsqaH X9ORK5vKIaLxiyygGDpgH3cT8BjhgUA= -----END CERTIFICATE-----Generated at Sun May 4 19:31:14 2025 by rpki-client