$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d6d6c383-b6cc-311b-9ece-9bacfcd03b30.roa File: d6d6c383-b6cc-311b-9ece-9bacfcd03b30.roa (raw, json) Hash identifier: NzLh8yMvAiJ3Pda9f/vZxi/xu8ugj2/RvU1k8ZeHKjk= Subject key identifier: 20:A5:8F:5C:A0:18:E0:DA:3C:65:18:20:F9:67:E8:1D:FD:2E:A9:A8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784EB6B4F99484D75CD3380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d6d6c383-b6cc-311b-9ece-9bacfcd03b30.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.129.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:eb:6b:4f:99:48:4d:75:cd:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=6f614b1a-cafd-45f2-ae78-b82d6bca0937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a7:1c:7d:9d:d6:35:06:c4:a5:d0:9b:b9:2b: f0:26:65:49:8f:b1:64:9b:56:f5:15:47:2d:a2:c7: d5:73:64:bd:70:99:12:cd:11:8d:85:b4:40:59:6c: 32:47:49:dd:bf:22:e6:72:92:99:f0:62:f6:33:85: 16:1f:87:74:d1:c8:b6:d9:f2:a1:f8:1e:31:14:b5: 01:08:bd:6d:dd:f3:d6:ed:22:65:ad:79:44:76:d6: 96:26:c6:9b:86:30:0a:41:2a:81:50:81:40:03:41: 58:15:30:ae:9a:14:57:75:da:88:a0:a4:54:92:54: 3f:a3:ae:c0:4b:3d:71:50:bc:e8:b9:e5:4b:29:57: 31:f2:f3:d0:43:1c:ae:d1:47:76:26:63:44:98:f6: 5b:80:d7:db:67:f3:da:97:b8:5e:72:a4:a8:db:c0: 40:c7:2f:a3:07:4a:21:46:86:bb:85:a8:93:84:a5: 68:25:ce:47:7c:8d:da:7b:ed:5d:08:df:6d:cc:ad: 61:f1:d0:55:59:09:93:00:69:b0:54:f8:9c:f1:22: 65:b7:e5:53:39:e7:7d:d4:75:d6:2a:20:5c:64:ff: 7f:6f:ed:d8:a6:58:00:33:41:1b:00:a7:41:a8:e6: c6:f1:06:7d:73:b2:83:a4:14:41:1a:af:f5:6b:aa: 0a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A5:8F:5C:A0:18:E0:DA:3C:65:18:20:F9:67:E8:1D:FD:2E:A9:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d6d6c383-b6cc-311b-9ece-9bacfcd03b30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.129.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:70:c6:7d:e7:41:bd:c7:65:d9:fb:5b:27:17:ee:04:dd:49: 7b:27:d5:55:94:e8:0c:bc:15:f5:4c:7e:e5:d2:22:8c:52:27: 91:ab:c6:6b:db:dc:a8:c1:7f:c9:ea:cb:9f:d4:77:57:d3:91: 2b:b5:92:9c:5f:80:87:2b:56:94:95:2d:20:7e:cd:6b:ee:8f: 17:db:92:35:45:7f:5a:62:e8:19:41:51:92:1a:4f:7a:df:fd: 85:f3:14:2b:87:d2:46:82:70:2f:2c:ad:8e:33:5a:ea:de:f4: 96:42:58:18:8b:65:2b:92:73:77:ff:a5:77:e3:dc:8d:2f:02: 87:f1:04:03:99:39:85:78:22:99:e4:ef:f9:ab:f6:45:8c:d3: c1:58:1a:c7:12:8d:90:ab:2c:e8:d0:dd:9c:0f:05:70:73:9d: 8c:2a:0a:94:16:23:ff:c5:48:0d:73:86:40:2b:a7:73:6d:a5: f9:9c:7d:7a:9e:3e:0f:ab:c1:91:1a:4e:70:fd:a1:30:dd:37: 77:00:57:59:28:bf:a1:cb:fd:c6:3f:11:0e:7c:29:3c:a0:4c: 46:e5:17:87:06:c0:7b:88:fc:7a:cb:06:98:92:71:31:7d:ba: fb:cd:1f:96:df:13:c1:17:93:64:e6:b7:b7:f8:20:d0:fd:5e: a9:a7:f2:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOtrT5lITXXNM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NmY2MTRiMWEtY2FmZC00NWYyLWFlNzgtYjgyZDZiY2EwOTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqccfZ3WNQbEpdCbuSvwJmVJj7Fkm1b1FUct osfVc2S9cJkSzRGNhbRAWWwyR0ndvyLmcpKZ8GL2M4UWH4d00ci22fKh+B4xFLUB CL1t3fPW7SJlrXlEdtaWJsabhjAKQSqBUIFAA0FYFTCumhRXddqIoKRUklQ/o67A Sz1xULzoueVLKVcx8vPQQxyu0Ud2JmNEmPZbgNfbZ/Pal7hecqSo28BAxy+jB0oh Roa7haiThKVoJc5HfI3ae+1dCN9tzK1h8dBVWQmTAGmwVPic8SJlt+VTOed91HXW KiBcZP9/b+3YplgAM0EbAKdBqObG8QZ9c7KDpBRBGq/1a6oKEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCClj1ygGODaPGUYIPln6B39LqmoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDZkNmMzODMtYjZjYy0z MTFiLTllY2UtOWJhY2ZjZDAzYjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIoGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFwxn3nQb3HZdn7WycX7gTdSXsn1VWU6Ay8FfVMfuXSIoxSJ5Grxmvb 3KjBf8nqy5/Ud1fTkSu1kpxfgIcrVpSVLSB+zWvujxfbkjVFf1pi6BlBUZIaT3rf /YXzFCuH0kaCcC8srY4zWure9JZCWBiLZSuSc3f/pXfj3I0vAofxBAOZOYV4Ipnk 7/mr9kWM08FYGscSjZCrLOjQ3ZwPBXBznYwqCpQWI//FSA1zhkArp3NtpfmcfXqe Pg+rwZEaTnD9oTDdN3cAV1kov6HL/cY/EQ58KTygTEblF4cGwHuI/HrLBpiScTF9 uvvNH5bfE8EXk2Tmt7f4IND9Xqmn8l8= -----END CERTIFICATE-----Generated at Sun May 4 19:26:46 2025 by rpki-client