$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a0a442e0-cf8f-3bc9-b9df-ed8f9a3bda8f.roa File: a0a442e0-cf8f-3bc9-b9df-ed8f9a3bda8f.roa (raw, json) Hash identifier: 1Za+6wR1wuMjdL3ncabxCJHW+Z2gscEAeR+dJEns+Ug= Subject key identifier: 32:4D:9E:9D:46:58:E4:D0:65:D6:B7:3D:FF:44:6F:FE:E3:47:72:9E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784FBD5268A3BD10A7EBD00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a0a442e0-cf8f-3bc9-b9df-ed8f9a3bda8f.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.139.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:fb:d5:26:8a:3b:d1:0a:7e:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=dba93abe-006c-4371-81ba-8c9b9c8d377e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:23:be:db:72:f4:f7:d2:de:20:3a:56:ae:3f: 58:0b:2e:ff:6e:e7:58:d7:bd:27:51:70:89:46:73: f0:c4:9e:7c:d9:3a:56:36:f0:b0:e5:9f:9e:5f:60: 19:82:a0:ce:45:c6:7e:41:96:60:2e:12:2b:13:a8: 64:b8:d6:56:92:43:17:3e:6d:ab:8d:3e:8c:2f:43: d0:3d:01:01:fe:a5:72:98:a9:83:66:04:f3:69:da: 2b:53:0b:b7:b8:6d:aa:c5:d1:13:cf:eb:05:b4:5e: f6:36:ae:61:d5:03:cc:ab:60:bf:57:f8:72:f9:be: 0d:7d:db:d5:70:3d:51:a2:f0:b9:22:e7:fe:c5:79: d8:c0:a4:01:fb:93:ce:a9:60:ad:f3:54:6c:92:5c: 67:89:35:f7:bd:eb:ab:ff:54:ba:45:0e:ff:50:1e: 66:d6:1d:05:08:2d:65:ce:44:3e:9e:00:2f:68:3d: d0:8c:4a:57:29:23:03:74:0f:53:e4:58:12:94:1a: 79:8e:76:c4:b0:4b:ef:b5:7a:5b:c1:f5:52:54:9a: 05:af:44:76:f8:20:8f:5f:55:fb:e3:35:c8:a7:3c: 2a:3f:ae:62:3d:d2:ae:6f:9f:5c:df:85:cf:e1:ba: d4:3e:df:0f:53:d3:94:a5:13:45:4c:69:3e:86:01: e9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4D:9E:9D:46:58:E4:D0:65:D6:B7:3D:FF:44:6F:FE:E3:47:72:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a0a442e0-cf8f-3bc9-b9df-ed8f9a3bda8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.139.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:c0:c0:b2:92:93:91:82:2c:bf:c8:e2:fd:a0:e3:99:4d:00: 7b:52:27:3a:73:b4:f4:01:3b:eb:90:30:00:8d:47:1f:f7:59: 46:cd:65:4c:c6:ad:f0:ed:70:50:e4:38:bd:13:a6:ae:9c:f1: e0:df:84:2c:90:42:cb:76:c7:5d:55:6b:42:dc:14:82:b7:06: 68:69:ac:ee:5d:f7:d8:d2:f3:58:01:a0:fa:f9:f6:b3:1f:9b: f7:ee:1f:ae:68:10:5c:1e:5c:44:5d:4c:d6:f6:8a:6d:26:5b: 3f:67:a8:66:db:41:04:ef:f4:69:c0:9d:76:a0:b4:15:63:24: cd:38:89:29:ce:e4:d3:c5:e6:1a:a5:cc:e6:26:5f:17:c5:54: 31:98:05:11:bc:07:e3:e1:e1:33:8e:00:eb:12:b7:64:2c:60: b6:95:d6:05:e5:6d:5f:2e:2f:b7:c0:6c:2b:cf:ff:dc:e5:f1: 23:e0:a4:6a:a0:92:fa:66:f4:d6:1d:5c:50:18:95:e4:91:73: 70:8a:12:63:37:f7:f8:5b:0a:97:0f:49:ae:0c:0b:97:25:e5: a5:48:c7:1a:32:a6:a3:f6:00:a6:00:20:37:7b:ea:8b:21:00: 05:cf:36:f7:3b:e5:67:e2:62:26:22:29:50:83:5f:40:bc:fa: 45:16:4b:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPvVJoo70Qp+vQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZGJhOTNhYmUtMDA2Yy00MzcxLTgxYmEtOGM5YjljOGQzNzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCO+23L099LeIDpWrj9YCy7/budY170nUXCJ RnPwxJ582TpWNvCw5Z+eX2AZgqDORcZ+QZZgLhIrE6hkuNZWkkMXPm2rjT6ML0PQ PQEB/qVymKmDZgTzadorUwu3uG2qxdETz+sFtF72Nq5h1QPMq2C/V/hy+b4NfdvV cD1RovC5Iuf+xXnYwKQB+5POqWCt81RsklxniTX3veur/1S6RQ7/UB5m1h0FCC1l zkQ+ngAvaD3QjEpXKSMDdA9T5FgSlBp5jnbEsEvvtXpbwfVSVJoFr0R2+CCPX1X7 4zXIpzwqP65iPdKub59c34XP4brUPt8PU9OUpRNFTGk+hgHpYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJNnp1GWOTQZda3Pf9Eb/7jR3KeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTBhNDQyZTAtY2Y4Zi0z YmM5LWI5ZGYtZWQ4ZjlhM2JkYThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIouAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7AwLKSk5GCLL/I4v2g45lNAHtSJzpztPQBO+uQMACNRx/3WUbNZUzG rfDtcFDkOL0Tpq6c8eDfhCyQQst2x11Va0LcFIK3BmhprO5d99jS81gBoPr59rMf m/fuH65oEFweXERdTNb2im0mWz9nqGbbQQTv9GnAnXagtBVjJM04iSnO5NPF5hql zOYmXxfFVDGYBRG8B+Ph4TOOAOsSt2QsYLaV1gXlbV8uL7fAbCvP/9zl8SPgpGqg kvpm9NYdXFAYleSRc3CKEmM39/hbCpcPSa4MC5cl5aVIxxoypqP2AKYAIDd76osh AAXPNvc75WfiYiYiKVCDX0C8+kUWSyM= -----END CERTIFICATE-----Generated at Sun May 4 18:35:24 2025 by rpki-client