$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0743da72-c936-34f9-8a59-6f8935a06d92.roa File: 0743da72-c936-34f9-8a59-6f8935a06d92.roa (raw, json) Hash identifier: XNj1uwMOmS+0sJ4nHYg5kMFuoFDmfMu1Vf6UM1h1ILk= Subject key identifier: F3:6C:F7:28:39:50:0B:FF:7E:18:A7:85:0F:AF:C1:60:81:49:77:5E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7853C217EB2101B1F82A400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0743da72-c936-34f9-8a59-6f8935a06d92.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.74.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:3c:21:7e:b2:10:1b:1f:82:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=ba0ead78-8722-4d5b-834a-253a57255a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:dc:a7:2a:ad:f9:29:50:8c:e2:68:a7:0a:aa: 14:36:c5:66:9f:60:1f:96:c7:d6:07:03:4e:d9:b9: a6:41:3b:f7:44:e1:34:39:3a:37:70:d6:2e:9f:22: 56:d3:af:3e:de:be:0d:9b:e8:4d:14:af:fd:20:87: 38:34:2f:b3:af:c6:ef:9f:d5:d1:9d:4d:03:86:2e: 8c:f1:34:35:6b:9e:0c:7e:13:c5:dc:6e:24:d3:75: 57:78:16:c0:7b:56:82:1f:97:30:f4:07:b8:52:ed: a3:31:9f:2e:6c:f3:b5:d6:c3:d6:6a:45:51:c3:99: 65:bd:95:e1:0d:00:20:e5:83:cc:f2:7d:80:61:09: f3:a8:14:b6:e4:27:ed:f7:3c:46:a2:45:76:12:d3: df:3a:fe:89:5e:67:35:61:0f:bd:78:67:b7:1f:4b: 0e:af:e6:db:31:a8:2a:cf:3e:d6:17:5e:cf:ce:01: 91:75:1b:af:0c:9f:7e:6e:47:59:20:84:d0:78:ef: 1b:21:be:81:d9:67:88:81:cb:42:f4:14:55:9b:62: 42:d6:22:c5:dc:e5:9f:02:fd:f5:29:91:b4:dd:e0: 6a:12:1c:4f:cf:2f:e6:15:33:99:95:f9:b5:9a:7f: c7:fb:c3:62:4b:1a:a0:5b:59:ad:70:ba:3b:30:80: 20:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:6C:F7:28:39:50:0B:FF:7E:18:A7:85:0F:AF:C1:60:81:49:77:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0743da72-c936-34f9-8a59-6f8935a06d92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.74.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:b8:2b:11:06:c2:6a:6e:0c:38:9b:e9:d2:76:a1:4b:40:7c: 97:76:d1:6c:1e:5b:69:39:25:7f:05:7f:53:c1:f8:f3:9f:84: 24:cd:01:7a:a2:17:e8:07:3c:1f:06:94:c7:73:38:0e:a2:c5: b9:5b:49:4a:1d:2c:9f:48:36:f4:5d:22:66:c9:6e:09:cf:da: 38:3c:5c:ed:74:0f:73:5f:9f:dc:32:5a:6f:c2:49:f0:cd:36: 76:fd:87:85:65:22:fd:50:b8:21:a1:72:3e:30:8e:90:52:75: 8a:0b:78:43:4a:f3:be:aa:88:03:09:d5:c3:c0:ae:78:3f:41: 69:09:8f:80:88:42:60:ce:24:18:9d:59:56:e3:93:92:cd:3d: cd:93:23:e7:8f:3a:23:7e:cf:aa:26:c9:df:ab:87:08:fd:67: b8:c4:b9:64:f3:70:a5:81:bc:71:e3:77:a2:50:8b:01:fb:66: d2:e8:05:25:f4:dd:22:dc:ee:50:3d:70:98:7a:35:9c:72:65: 27:c6:4b:95:2e:85:a5:fe:98:71:b6:19:f5:93:0e:62:b9:31: 2d:c5:34:95:c8:0c:d3:89:5b:83:5f:28:cb:f6:bf:fd:07:33: 90:35:b4:45:8d:23:c4:7d:19:e4:12:aa:8a:87:55:d0:e5:3e: f0:2d:33:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTwhfrIQGx+CpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YmEwZWFkNzgtODcyMi00ZDViLTgzNGEtMjUzYTU3MjU1YThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdynKq35KVCM4minCqoUNsVmn2AflsfWBwNO 2bmmQTv3ROE0OTo3cNYunyJW068+3r4Nm+hNFK/9IIc4NC+zr8bvn9XRnU0Dhi6M 8TQ1a54MfhPF3G4k03VXeBbAe1aCH5cw9Ae4Uu2jMZ8ubPO11sPWakVRw5llvZXh DQAg5YPM8n2AYQnzqBS25Cft9zxGokV2EtPfOv6JXmc1YQ+9eGe3H0sOr+bbMagq zz7WF17PzgGRdRuvDJ9+bkdZIITQeO8bIb6B2WeIgctC9BRVm2JC1iLF3OWfAv31 KZG03eBqEhxPzy/mFTOZlfm1mn/H+8NiSxqgW1mtcLo7MIAgrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNs9yg5UAv/fhinhQ+vwWCBSXdeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDc0M2RhNzItYzkzNi0z NGY5LThhNTktNmY4OTM1YTA2ZDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHC4KxEGwmpuDDib6dJ2oUtAfJd20WweW2k5JX8Ff1PB+POfhCTNAXqi F+gHPB8GlMdzOA6ixblbSUodLJ9INvRdImbJbgnP2jg8XO10D3Nfn9wyWm/CSfDN Nnb9h4VlIv1QuCGhcj4wjpBSdYoLeENK876qiAMJ1cPArng/QWkJj4CIQmDOJBid WVbjk5LNPc2TI+ePOiN+z6omyd+rhwj9Z7jEuWTzcKWBvHHjd6JQiwH7ZtLoBSX0 3SLc7lA9cJh6NZxyZSfGS5UuhaX+mHG2GfWTDmK5MS3FNJXIDNOJW4NfKMv2v/0H M5A1tEWNI8R9GeQSqoqHVdDlPvAtM40= -----END CERTIFICATE-----Generated at Sun May 4 19:26:15 2025 by rpki-client