$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/659bb02e-ced3-3ed7-abb0-7bddac9ac0af.roa File: 659bb02e-ced3-3ed7-abb0-7bddac9ac0af.roa (raw, json) Hash identifier: 6YuR+2yl2q7rknuN6AUbWFCn34VSoTvwN5MEE8dFnb0= Subject key identifier: 92:8A:10:D9:88:C1:16:EB:77:F8:11:27:C7:09:F6:C1:47:57:21:F8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785118185CA3F30A94EF9C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/659bb02e-ced3-3ed7-abb0-7bddac9ac0af.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.74.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:11:81:85:ca:3f:30:a9:4e:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=2ef04f4f-53fc-4a7a-b7b9-1112367ac224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:38:fb:ee:62:d5:74:48:9c:5a:a5:fc:55:3a: b3:d7:98:1d:24:1d:9b:56:34:84:cb:86:1c:fb:19: 64:6c:af:fd:84:1c:4a:16:79:13:cb:34:16:26:90: 86:45:8a:25:8c:64:08:3c:ab:cc:93:a5:38:5f:0b: 35:d8:2d:db:ac:b4:90:ea:8a:52:41:99:41:51:ac: fb:3d:eb:42:8a:ea:ff:8e:92:78:dd:dd:71:b7:f5: b0:77:c3:e3:09:33:ee:ca:2c:0b:3e:93:24:56:25: 0d:4e:06:31:79:c2:6f:62:9e:f7:86:fb:69:8b:4e: 72:76:10:f3:3e:6e:ee:53:55:c7:ec:49:02:75:8b: fd:fb:99:24:ae:6b:cd:aa:d7:47:f8:39:82:7f:85: ca:b3:cd:b6:09:fb:d2:3b:78:92:e0:74:8e:97:59: d7:c5:4b:70:19:50:de:d3:c3:e1:aa:6f:0b:7e:a6: 77:29:90:73:32:09:22:1b:54:ec:0c:cc:56:a8:f1: 93:12:b0:a5:e7:68:fc:cf:0e:92:f5:46:e3:66:b4: 64:ed:d0:a8:1d:77:7d:24:d3:22:83:83:71:2f:c5: 9c:5c:21:9e:8e:b4:7a:7d:ed:00:95:39:98:db:87: 95:d1:33:d8:dd:65:a0:00:fb:df:b2:c1:3c:73:70: 47:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8A:10:D9:88:C1:16:EB:77:F8:11:27:C7:09:F6:C1:47:57:21:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/659bb02e-ced3-3ed7-abb0-7bddac9ac0af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.74.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:a7:fd:31:20:7c:76:81:0d:a0:33:9e:80:94:96:86:0e:31: c6:1f:ae:c5:44:76:bf:e0:1a:b2:48:0d:08:b3:c1:88:3b:eb: f6:28:b1:fb:62:ed:80:d8:bf:42:aa:3b:20:c8:e4:35:20:83: 25:58:2e:e1:df:be:b3:8f:f9:b0:25:39:14:88:c0:99:a6:f8: 4b:96:0e:58:cb:11:ac:ae:a1:2f:5e:b5:db:ef:0c:55:06:27: 67:1c:d5:e3:ae:21:db:cc:1b:b2:a9:3b:8d:75:40:01:8b:16: ee:1e:09:ad:30:8a:41:f5:36:a2:58:b2:d4:da:95:3b:c0:dc: 46:27:bb:25:b0:b7:ef:9e:9b:fa:65:cb:ee:de:97:4c:b5:3e: 95:1e:ce:c1:bd:0f:d3:94:55:78:c9:6b:ab:28:4f:12:93:29: 6d:f5:92:6c:65:23:63:4a:b1:9b:5e:61:2d:5b:95:a6:51:ff: b6:e6:bd:60:36:cd:e2:77:04:3b:99:9f:d7:bc:86:7c:a1:97: a6:0f:2d:e4:c4:6e:ef:ce:20:12:3e:eb:19:ae:0c:2e:79:9a: 0c:14:2c:68:c3:0c:40:5e:d8:36:6f:a0:68:f2:10:d1:dd:32: 7c:98:61:93:80:99:4b:dc:c0:1e:52:2c:5e:15:a6:aa:99:c1: 42:5b:15:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRGBhco/MKlO+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MmVmMDRmNGYtNTNmYy00YTdhLWI3YjktMTExMjM2N2FjMjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujj77mLVdEicWqX8VTqz15gdJB2bVjSEy4Yc +xlkbK/9hBxKFnkTyzQWJpCGRYoljGQIPKvMk6U4Xws12C3brLSQ6opSQZlBUaz7 PetCiur/jpJ43d1xt/Wwd8PjCTPuyiwLPpMkViUNTgYxecJvYp73hvtpi05ydhDz Pm7uU1XH7EkCdYv9+5kkrmvNqtdH+DmCf4XKs822CfvSO3iS4HSOl1nXxUtwGVDe 08Phqm8LfqZ3KZBzMgkiG1TsDMxWqPGTErCl52j8zw6S9UbjZrRk7dCoHXd9JNMi g4NxL8WcXCGejrR6fe0AlTmY24eV0TPY3WWgAPvfssE8c3BHHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKKENmIwRbrd/gRJ8cJ9sFHVyH4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjU5YmIwMmUtY2VkMy0z ZWQ3LWFiYjAtN2JkZGFjOWFjMGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByn/TEgfHaBDaAznoCUloYOMcYfrsVEdr/gGrJIDQizwYg76/Yosfti 7YDYv0KqOyDI5DUggyVYLuHfvrOP+bAlORSIwJmm+EuWDljLEayuoS9etdvvDFUG J2cc1eOuIdvMG7KpO411QAGLFu4eCa0wikH1NqJYstTalTvA3EYnuyWwt++em/pl y+7el0y1PpUezsG9D9OUVXjJa6soTxKTKW31kmxlI2NKsZteYS1blaZR/7bmvWA2 zeJ3BDuZn9e8hnyhl6YPLeTEbu/OIBI+6xmuDC55mgwULGjDDEBe2DZvoGjyENHd MnyYYZOAmUvcwB5SLF4VpqqZwUJbFVA= -----END CERTIFICATE-----Generated at Sun May 4 19:11:43 2025 by rpki-client