$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/486a4a4f-780a-3903-99e6-34c67a2b95d6.roa File: 486a4a4f-780a-3903-99e6-34c67a2b95d6.roa (raw, json) Hash identifier: dpEm6v2QmcBye6bf9PA0v7MJDS5YWyOPup/eCoTNMrg= Subject key identifier: 4F:E0:1F:D4:29:E8:9F:47:29:9A:33:EF:4F:94:1C:BD:50:B6:7C:AF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784C98A3E31DA1532B31A80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/486a4a4f-780a-3903-99e6-34c67a2b95d6.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.75.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:c9:8a:3e:31:da:15:32:b3:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=3bbb9214-da80-491c-af41-da41300daf60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2d:7c:66:2d:99:e7:4e:7f:aa:60:9c:b3:25: 47:de:1b:e9:c2:20:ad:3b:b0:ca:93:96:98:0b:76: 66:5b:80:1b:69:57:f1:d4:5d:09:75:74:71:c2:d2: 71:48:ec:a4:8e:f2:7a:32:f0:7f:a5:be:a3:d3:b5: 29:63:88:2b:28:d2:c6:5e:19:06:73:59:1c:2b:54: ad:e5:14:f5:b3:70:af:b8:2f:de:d1:ab:18:8c:7b: bd:cb:ae:5f:d0:69:e9:c0:10:cd:33:4f:52:2e:54: bb:0b:24:13:85:dd:f4:16:62:1d:e6:be:d9:bf:a9: a6:2c:bb:5b:15:96:a1:c8:18:dd:59:9b:81:71:a5: 01:2f:82:c1:bb:65:4c:68:50:71:f4:13:90:cb:d4: 3b:c8:94:97:a2:d7:1d:0c:a2:b5:0a:75:2c:25:1f: 0d:68:f8:fb:97:3a:f8:d4:1a:59:c6:13:8b:1a:59: b8:cb:76:e7:35:03:07:f1:a7:ec:b5:17:ab:cf:d4: 81:e5:e0:28:a0:77:3b:a3:ed:0b:81:13:a9:92:0b: 94:9a:81:09:0e:72:10:12:c1:e9:61:2e:e8:49:1a: f8:14:88:1d:f1:d9:0e:10:db:5a:d9:be:85:9a:2f: c3:d3:c8:ae:05:b2:2b:92:17:4c:da:07:eb:02:87: 8d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E0:1F:D4:29:E8:9F:47:29:9A:33:EF:4F:94:1C:BD:50:B6:7C:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/486a4a4f-780a-3903-99e6-34c67a2b95d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.75.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:69:27:c1:e1:0e:76:ec:bf:7a:ad:01:7e:eb:59:01:f3:99: 67:5c:e5:13:fb:e2:ef:5a:2c:6f:d8:43:ba:eb:f6:a5:4a:17: f2:cc:29:ae:ec:bd:47:a7:7e:07:cd:29:ca:49:00:0f:1a:67: 4d:e5:2d:d6:8b:1f:67:cf:b6:fb:6c:5b:a8:f0:1f:cd:f5:1e: ab:2c:2d:3f:4e:12:2d:36:dd:1e:c9:c9:46:7e:bd:90:6d:3e: 46:fc:7f:58:11:06:d7:43:80:36:e8:2b:5f:7a:c7:f3:dc:f1: 79:3e:bc:e4:17:8a:92:0f:f4:a4:72:82:6a:56:58:0c:97:76: 72:5d:47:74:ec:02:45:6a:ad:0e:7d:a4:6d:1e:78:67:6f:17: d2:15:3c:8b:75:42:02:67:18:36:ed:72:56:e0:91:7f:06:92: 67:eb:b5:ec:f3:08:c9:d7:24:a4:3d:3d:2a:8f:9c:00:69:81: 65:2f:d2:eb:80:40:e0:26:c7:de:90:dd:07:a8:f3:c6:ad:ab: 81:94:a1:7c:92:11:41:27:a1:dc:f7:90:4d:3b:a3:a0:79:b0: 9d:06:8b:aa:8a:4f:87:35:93:36:ad:2d:b5:8e:73:c9:81:92: 07:a1:59:9c:e8:9e:4c:71:dd:b1:34:a0:16:f6:73:d4:ce:2e: 16:2b:5d:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMmKPjHaFTKzGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk M2JiYjkyMTQtZGE4MC00OTFjLWFmNDEtZGE0MTMwMGRhZjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxS18Zi2Z505/qmCcsyVH3hvpwiCtO7DKk5aY C3ZmW4AbaVfx1F0JdXRxwtJxSOykjvJ6MvB/pb6j07UpY4grKNLGXhkGc1kcK1St 5RT1s3CvuC/e0asYjHu9y65f0GnpwBDNM09SLlS7CyQThd30FmId5r7Zv6mmLLtb FZahyBjdWZuBcaUBL4LBu2VMaFBx9BOQy9Q7yJSXotcdDKK1CnUsJR8NaPj7lzr4 1BpZxhOLGlm4y3bnNQMH8afstRerz9SB5eAooHc7o+0LgROpkguUmoEJDnIQEsHp YS7oSRr4FIgd8dkOENta2b6Fmi/D08iuBbIrkhdM2gfrAoeNGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/gH9Qp6J9HKZoz70+UHL1QtnyvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDg2YTRhNGYtNzgwYS0z OTAzLTk5ZTYtMzRjNjdhMmI5NWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIppJ8HhDnbsv3qtAX7rWQHzmWdc5RP74u9aLG/YQ7rr9qVKF/LMKa7s vUenfgfNKcpJAA8aZ03lLdaLH2fPtvtsW6jwH831HqssLT9OEi023R7JyUZ+vZBt Pkb8f1gRBtdDgDboK196x/Pc8Xk+vOQXipIP9KRygmpWWAyXdnJdR3TsAkVqrQ59 pG0eeGdvF9IVPIt1QgJnGDbtclbgkX8GkmfrtezzCMnXJKQ9PSqPnABpgWUv0uuA QOAmx96Q3Qeo88atq4GUoXySEUEnodz3kE07o6B5sJ0Gi6qKT4c1kzatLbWOc8mB kgehWZzonkxx3bE0oBb2c9TOLhYrXfI= -----END CERTIFICATE-----Generated at Sun May 4 18:53:29 2025 by rpki-client