$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/471c598b-79c5-39a6-bb6d-435de2f97b10.roa File: 471c598b-79c5-39a6-bb6d-435de2f97b10.roa (raw, json) Hash identifier: nw8ZpbhxEs1SLDoEnrtwlRWNyE9z+VeagLnVO56Xa8Y= Subject key identifier: 94:18:69:4C:8A:0C:83:30:CA:99:18:3D:B6:F4:9E:8A:05:C4:90:40 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784E1E34900A9F6A4202C00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/471c598b-79c5-39a6-bb6d-435de2f97b10.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.73.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e1:e3:49:00:a9:f6:a4:20:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=0b473a26-d57d-4aeb-9a37-35f5d871ca47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ee:55:e8:4b:eb:b2:3d:8c:71:1a:61:ee:81: d4:5b:7d:94:3d:80:4b:cf:cd:be:a3:f7:f1:82:83: 0a:95:34:66:9b:a3:30:5f:be:72:96:ef:e4:d7:7f: 1c:2e:56:55:3a:ec:b8:e5:aa:25:5b:79:50:b8:5d: 9e:0f:d7:c7:76:2b:77:a5:30:32:30:fe:27:25:ef: fe:8f:0f:4d:76:11:2a:e9:1e:64:4d:2e:69:08:df: fa:ea:8e:80:fa:6a:1f:8d:12:95:30:b2:10:63:a1: e6:d0:d1:92:fa:41:d7:50:7c:9b:fc:7d:f8:fa:66: b4:1e:0c:38:f7:5f:89:7d:9d:49:b5:cb:f9:82:62: da:53:40:85:5a:6d:79:23:c6:44:6a:d4:6d:7a:96: 4a:b8:31:ed:0f:87:1c:2b:e0:5f:9a:41:89:10:ec: d4:71:ed:c5:65:4a:8a:d2:cd:9a:1d:7b:7c:be:a3: 03:8b:b2:f9:df:a7:15:26:41:c6:34:f0:fd:f0:a4: 12:73:1e:47:2b:17:70:30:55:c1:5d:20:4a:18:0a: 9d:f9:58:bc:db:4f:2f:58:88:07:de:32:85:23:f5: 0f:f2:34:48:c8:01:bd:89:5d:9f:65:de:65:fa:93: a9:cc:9d:e4:5d:04:f0:7d:dc:c8:ec:9c:f6:72:aa: 9b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:18:69:4C:8A:0C:83:30:CA:99:18:3D:B6:F4:9E:8A:05:C4:90:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/471c598b-79c5-39a6-bb6d-435de2f97b10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.73.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:d0:51:81:53:b8:6a:a7:89:6d:b0:e6:82:bc:89:80:c0:56: 9f:fe:88:52:c2:2a:5c:4b:24:12:44:33:a8:4f:f8:0b:da:a5: c6:5b:e0:80:66:a3:58:28:db:88:4a:49:99:25:54:a1:68:fb: 8e:da:bc:0f:ca:8e:c8:de:cb:95:00:a6:50:27:25:76:4a:87: c8:db:0e:bc:2d:1d:50:10:61:36:cb:ab:4e:9e:ed:80:62:42: 17:96:93:2b:8f:5c:c8:5f:19:c7:1e:18:e3:0b:2d:68:0e:bb: 3a:f2:4d:75:23:3e:fd:90:81:c1:28:77:92:b2:a8:cd:39:c8: 49:56:4d:66:9b:56:50:de:03:e2:f7:8b:4e:f5:1f:33:3b:18: 2c:f3:0c:7b:76:2e:8d:a4:2d:3f:c6:e7:3d:c8:04:00:7b:e2: 4d:b2:f4:d9:ef:02:9f:56:09:c1:af:1b:b6:21:6c:73:37:ab: 3d:af:4e:37:81:4b:50:16:6c:c6:09:69:a1:d5:1b:78:39:dc: f4:be:05:72:86:ac:4d:74:8c:96:78:8e:8c:1e:3d:83:0d:57: 44:b8:8d:89:3b:f0:f3:36:d0:7c:eb:40:19:1e:af:a6:e2:ac: 73:63:58:53:a6:f0:ea:be:20:ed:86:ab:7d:29:cb:01:54:b4: e5:cb:ce:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOHjSQCp9qQgLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MGI0NzNhMjYtZDU3ZC00YWViLTlhMzctMzVmNWQ4NzFjYTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiO5V6Evrsj2McRph7oHUW32UPYBLz82+o/fx goMKlTRmm6MwX75ylu/k138cLlZVOuy45aolW3lQuF2eD9fHdit3pTAyMP4nJe/+ jw9NdhEq6R5kTS5pCN/66o6A+mofjRKVMLIQY6Hm0NGS+kHXUHyb/H34+ma0Hgw4 91+JfZ1Jtcv5gmLaU0CFWm15I8ZEatRtepZKuDHtD4ccK+BfmkGJEOzUce3FZUqK 0s2aHXt8vqMDi7L536cVJkHGNPD98KQScx5HKxdwMFXBXSBKGAqd+Vi8208vWIgH 3jKFI/UP8jRIyAG9iV2fZd5l+pOpzJ3kXQTwfdzI7Jz2cqqbLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQYaUyKDIMwypkYPbb0nooFxJBAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDcxYzU5OGItNzljNS0z OWE2LWJiNmQtNDM1ZGUyZjk3YjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkmwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/QUYFTuGqniW2w5oK8iYDAVp/+iFLCKlxLJBJEM6hP+AvapcZb4IBm o1go24hKSZklVKFo+47avA/Kjsjey5UAplAnJXZKh8jbDrwtHVAQYTbLq06e7YBi QheWkyuPXMhfGcceGOMLLWgOuzryTXUjPv2QgcEod5KyqM05yElWTWabVlDeA+L3 i071HzM7GCzzDHt2Lo2kLT/G5z3IBAB74k2y9NnvAp9WCcGvG7YhbHM3qz2vTjeB S1AWbMYJaaHVG3g53PS+BXKGrE10jJZ4jowePYMNV0S4jYk78PM20HzrQBker6bi rHNjWFOm8Oq+IO2Gq30pywFUtOXLzro= -----END CERTIFICATE-----Generated at Sun May 4 19:51:42 2025 by rpki-client