$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9688f62a-00e2-3cb7-992c-d61d7f347b95.roa File: 9688f62a-00e2-3cb7-992c-d61d7f347b95.roa (raw, json) Hash identifier: YVJkru8ECwhd+2rLzG6811/TltRGF3CDanMptNVYUX8= Subject key identifier: C5:3B:B1:BE:AC:5D:EB:E0:94:9C:AA:22:32:16:05:50:81:49:1C:17 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784FDFFB02151FBF6738240 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9688f62a-00e2-3cb7-992c-d61d7f347b95.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.74.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:fd:ff:b0:21:51:fb:f6:73:82:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=4b072be1-dd31-4fb8-86e8-4e65850ac617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:39:d9:0b:94:f7:c1:fd:78:16:c3:22:8c:80: eb:8b:5a:0a:8c:5b:35:95:e2:ef:82:c0:3d:22:6f: 44:ab:bf:c8:c1:e9:64:21:73:a7:59:cb:70:2c:01: 1d:0f:8c:4e:06:f5:e6:53:b1:8f:67:73:f8:40:78: 37:f9:be:b8:3b:4f:0e:1c:3f:a2:ca:4d:af:cb:42: 4b:b2:1b:0d:30:b4:74:74:db:af:76:07:16:2b:c1: 8d:c6:e4:2f:c9:90:b0:60:fb:b1:54:30:91:92:1b: 8b:6f:43:ed:bf:d3:5e:2f:b6:30:f5:ad:62:2b:47: c7:a8:98:07:99:69:c7:d0:a7:35:26:09:81:bf:b4: 3e:d4:d6:99:f7:85:33:92:08:88:7a:82:a3:f3:f7: e7:d3:6c:1d:db:a5:7f:ac:18:0d:67:15:60:42:a2: 9e:34:ac:11:31:9d:c8:df:ab:b2:b9:cb:8a:99:ad: b3:4c:8f:c1:e6:3f:c7:b5:8e:a3:b9:a0:71:ac:5d: 6d:ba:59:83:60:2d:98:6d:7f:9f:ae:d4:de:36:3c: 75:ce:f5:71:8c:01:2e:22:a3:4b:8e:7f:a3:76:61: 68:40:89:c6:3f:8f:41:74:dc:c4:a5:ac:09:74:c7: 90:80:5e:e8:f8:f3:62:38:d6:82:cc:d7:1d:35:1e: 0d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3B:B1:BE:AC:5D:EB:E0:94:9C:AA:22:32:16:05:50:81:49:1C:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9688f62a-00e2-3cb7-992c-d61d7f347b95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.74.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:54:b6:cb:97:36:5c:6a:2c:a7:1d:99:a1:0e:94:d2:11:c0: 13:62:d7:fb:68:5f:4e:7d:ac:80:e4:52:11:e7:a5:19:2e:84: 02:18:01:7b:73:da:07:92:29:79:39:1b:56:9b:bb:35:26:69: fd:b0:0c:dc:52:db:1f:44:47:26:3b:45:0a:57:b4:a8:6f:1f: a0:97:a1:cb:55:a3:d5:48:92:32:1d:d3:f9:0a:11:d4:9c:9e: ae:a4:2b:02:3a:1a:a7:ec:cd:c8:7d:bb:dc:87:01:ef:1a:72: ad:fc:64:5e:0b:8d:6c:c7:51:23:49:f4:75:34:b3:a6:7a:6a: 7c:3f:09:aa:4b:34:5c:a1:3a:c1:4b:20:95:53:0c:38:a4:70: b4:bb:8b:19:ec:cf:dd:85:79:7b:10:63:00:f2:6f:be:e6:dd: ae:ce:2d:b6:b5:82:8f:ad:0b:3f:28:55:50:c9:0d:20:67:57: 85:b9:bb:d5:8e:13:f8:b9:78:40:3c:04:e1:2f:99:ff:8e:c8: 76:3c:f7:82:1c:8c:83:d9:ac:98:4e:5a:0d:cf:78:ec:4a:7f: 32:09:5f:c0:03:71:f8:fe:a2:d4:7a:e0:dd:53:d4:8b:ac:c3: 52:c7:6d:be:18:41:1b:b8:95:82:04:01:23:e9:a7:5d:6c:19: e2:ad:64:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhP3/sCFR+/ZzgkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NGIwNzJiZTEtZGQzMS00ZmI4LTg2ZTgtNGU2NTg1MGFjNjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsznZC5T3wf14FsMijIDri1oKjFs1leLvgsA9 Im9Eq7/IwelkIXOnWctwLAEdD4xOBvXmU7GPZ3P4QHg3+b64O08OHD+iyk2vy0JL shsNMLR0dNuvdgcWK8GNxuQvyZCwYPuxVDCRkhuLb0Ptv9NeL7Yw9a1iK0fHqJgH mWnH0Kc1JgmBv7Q+1NaZ94UzkgiIeoKj8/fn02wd26V/rBgNZxVgQqKeNKwRMZ3I 36uyucuKma2zTI/B5j/HtY6juaBxrF1tulmDYC2YbX+frtTeNjx1zvVxjAEuIqNL jn+jdmFoQInGP49BdNzEpawJdMeQgF7o+PNiONaCzNcdNR4NgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMU7sb6sXevglJyqIjIWBVCBSRwXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTY4OGY2MmEtMDBlMi0z Y2I3LTk5MmMtZDYxZDdmMzQ3Yjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVUtsuXNlxqLKcdmaEOlNIRwBNi1/toX059rIDkUhHnpRkuhAIYAXtz 2geSKXk5G1abuzUmaf2wDNxS2x9ERyY7RQpXtKhvH6CXoctVo9VIkjId0/kKEdSc nq6kKwI6Gqfszch9u9yHAe8acq38ZF4LjWzHUSNJ9HU0s6Z6anw/CapLNFyhOsFL IJVTDDikcLS7ixnsz92FeXsQYwDyb77m3a7OLba1go+tCz8oVVDJDSBnV4W5u9WO E/i5eEA8BOEvmf+OyHY894IcjIPZrJhOWg3PeOxKfzIJX8ADcfj+otR64N1T1Ius w1LHbb4YQRu4lYIEASPpp11sGeKtZPA= -----END CERTIFICATE-----Generated at Sun May 4 18:45:34 2025 by rpki-client