$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa99bbda-f0cc-368b-9f79-5ce4f3e71a1f.roa File: aa99bbda-f0cc-368b-9f79-5ce4f3e71a1f.roa (raw, json) Hash identifier: uo06Tva3uLT7SLd2D7Kg5gUmRNbzPukbyWO4IySnQX0= Subject key identifier: 0F:82:E1:F3:EF:EE:84:E8:64:00:1B:CE:CB:51:31:D1:62:20:07:92 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849AD1A09752F63C6265282A4D0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa99bbda-f0cc-368b-9f79-5ce4f3e71a1f.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 34.154.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:09:75:2f:63:c6:26:52:82:a4:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=a95e408e-87de-4219-81df-90d1ddc21a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9c:ab:28:48:93:83:8a:8f:a1:45:e8:d6:28: 27:bd:e5:40:92:88:0a:de:27:e3:99:02:77:9b:b7: 9f:9c:64:9a:a5:4e:30:eb:ae:84:8c:cb:88:fd:46: dd:d1:9d:ec:3a:37:9a:dd:99:5e:f6:a3:37:89:93: 73:45:96:14:f9:5b:97:61:59:ca:34:d8:94:b5:fc: dc:b7:dc:9d:d7:f2:8d:bf:48:a9:54:9f:bd:39:e8: 00:0b:cb:2f:f6:a7:13:ab:43:2c:00:44:42:a2:7b: 08:0f:0b:39:f2:c0:5e:b4:c2:79:c8:79:63:83:96: 85:09:c0:d6:73:49:63:a3:fa:1d:e7:f3:44:f2:0f: a6:db:38:81:28:0c:fd:ec:a5:26:2b:9d:01:97:68: 81:27:b2:48:23:ec:2a:57:48:5d:65:75:75:8a:44: 88:8e:07:35:b8:42:ec:a7:a6:41:e6:1c:5e:13:64: 80:3a:68:4f:2b:6f:6e:d6:5a:2c:8a:9b:77:4e:40: 73:c4:a8:fd:39:19:85:8c:b1:89:6c:a1:24:97:95: eb:54:42:f1:5e:01:66:2c:94:e1:8d:10:8d:36:29: 88:53:57:5e:62:31:f3:6e:a1:ab:5a:36:8b:d0:72: 3c:3f:a4:be:cc:66:f4:b2:9a:40:f5:c0:04:37:4c: fb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:82:E1:F3:EF:EE:84:E8:64:00:1B:CE:CB:51:31:D1:62:20:07:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa99bbda-f0cc-368b-9f79-5ce4f3e71a1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.154.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:85:8c:18:5a:f6:37:c8:2b:c6:37:61:bd:ff:59:06:12:52: 63:93:1c:86:0a:30:89:69:16:79:d7:89:ac:7a:8b:73:2f:9d: 4d:a6:42:1e:96:8e:42:55:b4:a5:8f:96:5b:fe:fc:23:09:63: b2:70:0e:a4:b5:9b:7c:fe:23:5e:6e:a6:0d:fd:96:3b:eb:67: 32:16:3e:af:1f:df:4b:15:01:66:70:70:cb:17:bf:79:be:80: 1d:ba:05:bf:b9:e2:e4:dd:98:d5:88:79:94:13:6f:88:d7:56: 27:79:2e:73:67:d2:76:f2:50:14:ae:58:6b:08:37:c1:41:b9: 83:6a:74:cb:14:57:dc:13:3f:d2:64:c6:85:f3:ea:0a:67:07: f5:74:aa:c0:19:5f:c9:cd:a4:29:65:85:7e:05:4f:95:b8:f6: 66:86:6f:5a:05:f7:b9:fe:f4:d3:cc:ca:fd:67:22:25:04:bc: 84:e8:60:f9:a8:e4:82:8c:32:40:cb:db:d8:aa:76:f8:cb:a2: 91:35:e3:a8:3d:eb:ea:60:1f:0f:d9:90:4e:75:95:35:3d:0b: 55:b1:f7:e4:a6:71:4d:be:1e:46:1b:27:ca:df:a6:50:ad:ae: 52:24:fd:6d:7f:e1:f4:19:22:09:82:3a:6c:8f:e9:98:72:0f: 85:5a:e3:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGgl1L2PGJlKCpNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk YTk1ZTQwOGUtODdkZS00MjE5LTgxZGYtOTBkMWRkYzIxYTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpyrKEiTg4qPoUXo1ignveVAkogK3ifjmQJ3 m7efnGSapU4w666EjMuI/Ubd0Z3sOjea3Zle9qM3iZNzRZYU+VuXYVnKNNiUtfzc t9yd1/KNv0ipVJ+9OegAC8sv9qcTq0MsAERConsIDws58sBetMJ5yHljg5aFCcDW c0ljo/od5/NE8g+m2ziBKAz97KUmK50Bl2iBJ7JII+wqV0hdZXV1ikSIjgc1uELs p6ZB5hxeE2SAOmhPK29u1losipt3TkBzxKj9ORmFjLGJbKEkl5XrVELxXgFmLJTh jRCNNimIU1deYjHzbqGrWjaL0HI8P6S+zGb0sppA9cAEN0z7MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+C4fPv7oToZAAbzstRMdFiIAeSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWE5OWJiZGEtZjBjYy0z NjhiLTlmNzktNWNlNGYzZTcxYTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHIpoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmFjBha9jfIK8Y3Yb3/WQYSUmOTHIYKMIlpFnnXiax6i3MvnU2mQh6W jkJVtKWPllv+/CMJY7JwDqS1m3z+I15upg39ljvrZzIWPq8f30sVAWZwcMsXv3m+ gB26Bb+54uTdmNWIeZQTb4jXVid5LnNn0nbyUBSuWGsIN8FBuYNqdMsUV9wTP9Jk xoXz6gpnB/V0qsAZX8nNpCllhX4FT5W49maGb1oF97n+9NPMyv1nIiUEvIToYPmo 5IKMMkDL29iqdvjLopE146g96+pgHw/ZkE51lTU9C1Wx9+SmcU2+HkYbJ8rfplCt rlIk/W1/4fQZIgmCOmyP6ZhyD4Va48Y= -----END CERTIFICATE-----Generated at Sun May 4 18:58:37 2025 by rpki-client