$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aea4721b-2e1f-3fdc-8afc-8d381df68056.roa File: aea4721b-2e1f-3fdc-8afc-8d381df68056.roa (raw, json) Hash identifier: rExHxuKMQTWaPVvJMznNEs6hbxu4WtKFvY2lGFkyfco= Subject key identifier: 60:4B:9F:22:F6:97:3E:5D:89:B9:18:77:D9:CA:4D:BB:FD:2B:95:69 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7851BC402C1F5E5EC3BDC00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aea4721b-2e1f-3fdc-8afc-8d381df68056.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.133.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:1b:c4:02:c1:f5:e5:ec:3b:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=e76905f1-d9b7-4a7c-aa94-2c96e3a3f820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8a:0e:e8:d5:42:1f:c7:66:c7:0e:2a:e8:b1: 2d:41:bd:f4:2c:65:85:ae:ea:ae:91:15:2c:4b:3c: f5:ae:63:39:71:98:7a:2c:bd:4f:24:09:cc:77:24: fe:2f:fd:f5:90:41:8e:ff:19:0a:11:b5:43:59:86: a9:c6:13:26:d8:74:47:58:b5:7a:fb:6b:b6:ec:25: da:b7:81:24:30:c4:36:63:6d:e7:45:2e:a1:59:6d: b0:ca:43:d2:a9:41:ce:53:f0:54:12:91:91:0a:12: 97:50:11:b1:ef:34:e2:c7:01:7c:9e:f3:3d:06:fe: 18:31:e5:4b:58:87:f9:17:86:bd:a3:d9:22:f9:81: 04:d5:49:d1:0b:67:ae:94:12:1b:31:f6:4d:6b:61: c4:fe:b6:32:6d:39:6c:5d:35:45:94:b9:df:08:c4: 9d:75:91:60:82:86:54:42:2b:d2:53:ab:1c:2f:5d: d0:9d:50:da:a0:ce:9d:4a:88:52:27:70:5d:fc:e9: 41:76:2e:e4:48:1f:79:4c:6c:9e:fb:88:82:15:62: a6:a6:99:6c:cb:39:cc:12:4c:c9:28:5f:f2:e0:8b: 84:40:72:5e:7a:a0:88:81:b2:06:fe:99:1e:18:c5: 51:6a:ff:0f:d9:62:c8:84:5d:ab:60:0e:ab:22:14: f5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:4B:9F:22:F6:97:3E:5D:89:B9:18:77:D9:CA:4D:BB:FD:2B:95:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aea4721b-2e1f-3fdc-8afc-8d381df68056.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.133.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:59:a4:29:39:b0:68:de:41:ac:0e:8e:b5:a2:fd:df:34:da: e4:f9:70:10:94:c7:68:d6:3f:bf:bf:c2:b5:d3:d1:02:01:3a: db:78:ba:8c:16:60:f2:3b:08:47:a2:1d:4f:bf:63:cc:eb:e2: 0f:ce:45:7c:98:cf:f4:11:67:dd:df:b2:54:8d:59:ad:c5:6f: e8:e5:5a:7b:2d:0d:f8:e1:be:4c:ec:44:70:4c:2a:72:a9:79: 0c:2c:ee:e9:43:db:d8:2d:95:10:13:cb:94:b6:53:94:c0:09: a8:36:06:68:1e:34:e6:bf:20:13:f4:b4:c6:af:76:20:ac:ce: fa:3d:74:a5:44:d5:d2:64:d5:51:47:54:76:a9:93:e6:ee:c0: b9:fe:f1:c0:79:e9:84:c4:cf:31:cc:29:e2:09:dd:e4:55:63: 91:ab:3a:23:c8:77:93:bd:58:02:8e:40:db:e4:6a:ef:41:49: cc:b5:42:81:7d:b4:c9:40:0b:11:5a:e2:e7:bd:dc:0a:94:e1: 36:75:fa:1a:70:8c:d4:8f:c3:d2:05:fb:58:f8:ad:df:11:c9: 92:54:c7:9f:48:79:be:54:13:96:70:0a:07:3f:2d:1b:16:6b: e4:5c:38:02:22:c3:b1:8e:08:5b:ca:29:a6:a9:79:30:2c:bd: 88:93:fc:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRvEAsH15ew73AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZTc2OTA1ZjEtZDliNy00YTdjLWFhOTQtMmM5NmUzYTNmODIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4oO6NVCH8dmxw4q6LEtQb30LGWFruqukRUs Szz1rmM5cZh6LL1PJAnMdyT+L/31kEGO/xkKEbVDWYapxhMm2HRHWLV6+2u27CXa t4EkMMQ2Y23nRS6hWW2wykPSqUHOU/BUEpGRChKXUBGx7zTixwF8nvM9Bv4YMeVL WIf5F4a9o9ki+YEE1UnRC2eulBIbMfZNa2HE/rYybTlsXTVFlLnfCMSddZFggoZU QivSU6scL13QnVDaoM6dSohSJ3Bd/OlBdi7kSB95TGye+4iCFWKmpplsyznMEkzJ KF/y4IuEQHJeeqCIgbIG/pkeGMVRav8P2WLIhF2rYA6rIhT1lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBLnyL2lz5dibkYd9nKTbv9K5VpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWVhNDcyMWItMmUxZi0z ZmRjLThhZmMtOGQzODFkZjY4MDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdZpCk5sGjeQawOjrWi/d802uT5cBCUx2jWP7+/wrXT0QIBOtt4uowW YPI7CEeiHU+/Y8zr4g/ORXyYz/QRZ93fslSNWa3Fb+jlWnstDfjhvkzsRHBMKnKp eQws7ulD29gtlRATy5S2U5TACag2BmgeNOa/IBP0tMavdiCszvo9dKVE1dJk1VFH VHapk+buwLn+8cB56YTEzzHMKeIJ3eRVY5GrOiPId5O9WAKOQNvkau9BScy1QoF9 tMlACxFa4ue93AqU4TZ1+hpwjNSPw9IF+1j4rd8RyZJUx59Ieb5UE5ZwCgc/LRsW a+RcOAIiw7GOCFvKKaapeTAsvYiT/P0= -----END CERTIFICATE-----Generated at Sun May 4 21:08:54 2025 by rpki-client