$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d260a877-52ff-3894-9012-c3ab514886e3.roa File: d260a877-52ff-3894-9012-c3ab514886e3.roa (raw, json) Hash identifier: ZT9+YlCxE3J49iaJBFMU/6q2MokWbCpTmdueBdw8UVw= Subject key identifier: 05:E2:E5:27:BB:73:3E:CA:9B:96:B1:E1:A0:02:02:4D:81:7B:80:17 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784F87A6C8B77AA938F60E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d260a877-52ff-3894-9012-c3ab514886e3.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.64.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:f8:7a:6c:8b:77:aa:93:8f:60:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=6510b76c-5c10-4117-bbba-e1f41d9b055e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:70:44:62:0d:1d:21:a0:73:cc:b1:0a:90:45: 44:af:2f:27:1c:f2:47:38:63:f4:60:21:85:7b:e7: 8b:97:4e:85:4a:bc:17:6f:47:2d:dd:ab:8b:64:bb: 34:19:69:35:85:ba:ae:62:28:9e:c3:c9:5d:ac:0f: bf:2b:7b:7f:fd:db:f2:5f:3b:e7:8c:d6:d3:dc:3e: b2:21:81:96:1c:9c:f5:a9:5a:2c:75:66:19:c5:51: 0e:27:5a:f1:dc:c8:89:3e:8c:70:c4:3e:46:d4:0b: 3a:1e:63:c0:b5:ef:5f:35:51:2b:97:42:33:c3:0c: 2c:b2:01:75:ee:7f:f7:4d:5f:6d:91:f3:40:0f:a3: 60:73:e6:18:e0:94:84:9d:56:1a:ff:7a:01:45:09: 80:ef:a3:d5:3c:89:7f:af:d2:61:72:16:5e:86:1c: b6:a2:15:df:58:e6:fa:82:88:82:cf:4c:f0:11:37: 74:70:3c:46:64:12:67:aa:44:d0:74:7f:a3:24:0c: b6:35:0b:5b:de:99:19:43:f0:f2:c3:37:57:d5:19: c5:87:77:4f:54:94:b1:db:19:3d:d5:b9:5d:87:b0: fa:fe:aa:70:15:c0:03:e2:c4:c0:8f:11:a0:91:67: af:20:92:6f:3e:0b:22:64:0e:6a:db:df:3f:a7:1e: a6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E2:E5:27:BB:73:3E:CA:9B:96:B1:E1:A0:02:02:4D:81:7B:80:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d260a877-52ff-3894-9012-c3ab514886e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.64.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:15:95:2d:85:4c:96:ec:da:07:20:bd:19:e4:b2:94:e1:e7: 34:68:1d:4c:d1:90:a0:b9:80:d8:c9:e8:df:4f:a1:9f:2c:c5: 94:07:30:fb:25:e5:c2:b1:41:53:ed:05:5d:b1:9f:83:ef:23: 68:8b:50:d9:26:80:06:9a:9e:f2:21:2a:9b:43:a7:97:91:95: 76:79:18:b4:f9:5b:87:c7:2e:f4:23:55:31:a6:d3:a9:e1:93: b2:14:05:1f:f5:f4:b2:73:d4:b9:2e:a2:d5:8d:59:b8:9a:7b: 5a:9c:5e:ab:62:0e:2e:aa:5c:7b:f0:ab:ca:c7:4f:e3:87:d2: b4:27:90:fd:0b:3f:a5:02:88:fa:ef:d1:60:81:c4:70:51:28: de:2c:6e:9c:0d:25:24:33:9b:e3:f6:cf:db:25:b3:64:8f:fd: b1:f9:fb:ac:9a:3f:86:8d:99:d0:0d:d5:c0:4e:b0:35:b4:34: e2:f2:ea:51:b5:2d:b4:e2:25:0d:ae:e5:cd:ab:31:b8:4c:37: b7:c4:cc:0c:fd:4b:05:e9:eb:4f:17:1d:a1:61:90:93:eb:2b: e5:45:ee:97:c0:c9:d1:b7:e2:16:8a:3f:ab:4e:42:65:43:e8: eb:4e:cc:3e:63:8e:21:07:a2:a6:be:e5:c0:84:7c:be:5c:92: 35:6a:d5:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPh6bIt3qpOPYOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NjUxMGI3NmMtNWMxMC00MTE3LWJiYmEtZTFmNDFkOWIwNTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHBEYg0dIaBzzLEKkEVEry8nHPJHOGP0YCGF e+eLl06FSrwXb0ct3auLZLs0GWk1hbquYiiew8ldrA+/K3t//dvyXzvnjNbT3D6y IYGWHJz1qVosdWYZxVEOJ1rx3MiJPoxwxD5G1As6HmPAte9fNVErl0IzwwwssgF1 7n/3TV9tkfNAD6Ngc+YY4JSEnVYa/3oBRQmA76PVPIl/r9JhchZehhy2ohXfWOb6 goiCz0zwETd0cDxGZBJnqkTQdH+jJAy2NQtb3pkZQ/DywzdX1RnFh3dPVJSx2xk9 1bldh7D6/qpwFcAD4sTAjxGgkWevIJJvPgsiZA5q298/px6m/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXi5Se7cz7Km5ax4aACAk2Be4AXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDI2MGE4NzctNTJmZi0z ODk0LTkwMTItYzNhYjUxNDg4NmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDIkCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcVlS2FTJbs2gcgvRnkspTh5zRoHUzRkKC5gNjJ6N9PoZ8sxZQHMPsl 5cKxQVPtBV2xn4PvI2iLUNkmgAaanvIhKptDp5eRlXZ5GLT5W4fHLvQjVTGm06nh k7IUBR/19LJz1LkuotWNWbiae1qcXqtiDi6qXHvwq8rHT+OH0rQnkP0LP6UCiPrv 0WCBxHBRKN4sbpwNJSQzm+P2z9sls2SP/bH5+6yaP4aNmdAN1cBOsDW0NOLy6lG1 LbTiJQ2u5c2rMbhMN7fEzAz9SwXp608XHaFhkJPrK+VF7pfAydG34haKP6tOQmVD 6OtOzD5jjiEHoqa+5cCEfL5ckjVq1Ug= -----END CERTIFICATE-----Generated at Sun May 4 20:24:43 2025 by rpki-client