$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac48c18f-506f-3011-b1e0-e26cd277c9cd.roa File: ac48c18f-506f-3011-b1e0-e26cd277c9cd.roa (raw, json) Hash identifier: WhuhFHasRao6JEBjAARrcQZ6gX+BHzhnEhDZfDQmBsQ= Subject key identifier: 20:5B:FA:DF:46:2C:93:94:F6:19:13:73:91:17:F0:D6:54:C5:A5:8E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784F67206D838041BAB2300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac48c18f-506f-3011-b1e0-e26cd277c9cd.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.67.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:f6:72:06:d8:38:04:1b:ab:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=430291bb-4caf-4d48-a61d-b1eab9e0a075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:67:6e:d8:42:14:19:ca:9c:35:52:61:e1:08: a9:5e:11:92:ee:fd:b6:6b:72:51:40:65:6d:90:b4: 94:aa:f3:da:64:78:e6:99:c7:b6:a4:16:09:88:70: b1:1d:84:4c:44:a5:df:5f:f8:33:43:32:cf:d2:b6: 68:40:ca:f4:01:17:2c:c6:61:4f:54:af:47:9f:69: f3:b5:19:f2:dc:1d:cb:df:b3:44:00:f6:00:b0:bf: 75:28:99:4e:d2:6d:17:07:ff:a6:8d:24:e0:50:c6: 99:2b:34:9c:2c:c4:9f:a4:1a:55:cf:fe:ec:c8:74: 72:1d:2c:53:3d:ef:bb:b4:4a:b3:db:0b:94:42:ee: 88:1d:c7:fc:30:20:4f:08:47:71:56:9f:1c:2e:ef: 9f:3c:d9:13:88:01:da:92:ee:27:69:dd:dc:92:ae: c3:a6:6f:b6:e1:20:ab:ab:ff:d8:ae:69:c4:c5:b5: 1a:a8:8c:e7:53:4d:68:36:99:c1:42:7e:ee:92:c5: 46:5b:5d:dd:37:d5:c7:2e:3c:7b:07:15:e6:58:c9: 8e:21:2b:a7:55:b0:6d:71:ef:0d:6c:79:d0:35:39: 0f:b8:b4:16:63:40:a4:cc:9d:7b:7d:7b:b7:fc:6d: e6:af:e7:02:73:9a:e5:5c:06:98:f5:4a:06:d1:03: 2b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5B:FA:DF:46:2C:93:94:F6:19:13:73:91:17:F0:D6:54:C5:A5:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac48c18f-506f-3011-b1e0-e26cd277c9cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.67.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:27:e1:c5:f4:de:48:d6:39:04:e6:b0:cc:8c:ed:8f:5f:4c: fb:db:24:b9:80:3f:12:bc:67:48:72:ff:56:69:36:97:6d:f8: 2a:54:26:bd:22:f6:28:8e:d5:e7:8e:86:37:ae:83:0f:96:9e: 55:77:93:f9:b4:a7:99:95:14:ac:29:34:89:c1:16:2f:c7:75: b8:06:84:4d:12:28:ab:22:cc:27:a8:60:ba:3f:1a:10:17:15: 98:a0:c0:40:6c:50:bf:7d:54:95:13:52:1c:9e:bb:f5:12:a0: 2e:97:f1:ea:65:5a:1e:93:fb:2a:98:06:73:10:b7:db:02:33: e3:9b:46:4a:6e:b7:49:a1:02:cc:98:db:b7:71:e0:bf:5f:a3: 20:f1:ca:2c:0f:18:cf:c2:55:eb:82:b4:cd:7a:87:1e:35:e5: 9c:cb:3a:ea:4c:82:af:44:59:72:d0:93:b3:82:bd:d4:2f:52: 6c:1b:7d:4f:83:50:b6:a6:3a:0c:85:d3:3c:13:98:8f:80:d9: 54:ab:25:5b:be:80:41:ed:44:d3:b5:e2:ab:d9:b0:35:85:a6: d6:6d:91:90:ad:41:d7:a5:64:31:a1:0d:a8:66:5b:32:ed:91: e6:0f:6e:92:7c:2d:bb:2d:b8:9f:a5:d6:2b:e4:4e:87:c3:49: 7c:c3:1d:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPZyBtg4BBurIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NDMwMjkxYmItNGNhZi00ZDQ4LWE2MWQtYjFlYWI5ZTBhMDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2du2EIUGcqcNVJh4QipXhGS7v22a3JRQGVt kLSUqvPaZHjmmce2pBYJiHCxHYRMRKXfX/gzQzLP0rZoQMr0ARcsxmFPVK9Hn2nz tRny3B3L37NEAPYAsL91KJlO0m0XB/+mjSTgUMaZKzScLMSfpBpVz/7syHRyHSxT Pe+7tEqz2wuUQu6IHcf8MCBPCEdxVp8cLu+fPNkTiAHaku4nad3ckq7Dpm+24SCr q//YrmnExbUaqIznU01oNpnBQn7uksVGW13dN9XHLjx7BxXmWMmOISunVbBtce8N bHnQNTkPuLQWY0CkzJ17fXu3/G3mr+cCc5rlXAaY9UoG0QMrsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBb+t9GLJOU9hkTc5EX8NZUxaWOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWM0OGMxOGYtNTA2Zi0z MDExLWIxZTAtZTI2Y2QyNzdjOWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEn4cX03kjWOQTmsMyM7Y9fTPvbJLmAPxK8Z0hy/1ZpNpdt+CpUJr0i 9iiO1eeOhjeugw+WnlV3k/m0p5mVFKwpNInBFi/HdbgGhE0SKKsizCeoYLo/GhAX FZigwEBsUL99VJUTUhyeu/USoC6X8eplWh6T+yqYBnMQt9sCM+ObRkput0mhAsyY 27dx4L9foyDxyiwPGM/CVeuCtM16hx415ZzLOupMgq9EWXLQk7OCvdQvUmwbfU+D ULamOgyF0zwTmI+A2VSrJVu+gEHtRNO14qvZsDWFptZtkZCtQdelZDGhDahmWzLt keYPbpJ8LbstuJ+l1ivkTofDSXzDHfI= -----END CERTIFICATE-----Generated at Sun May 4 19:26:56 2025 by rpki-client