$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b53e69e8-2636-3ca1-acc6-5f593eae9340.roa File: b53e69e8-2636-3ca1-acc6-5f593eae9340.roa (raw, json) Hash identifier: DhYeUAF1PeDtAQ2NyhKmXf/v3ypzwWLglO6cA5o/uMw= Subject key identifier: B4:74:B9:B0:D6:1F:29:2D:F4:F4:DE:0C:28:EA:03:15:56:B7:8C:93 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784EB47811F3213374E2DA0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b53e69e8-2636-3ca1-acc6-5f593eae9340.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.75.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:eb:47:81:1f:32:13:37:4e:2d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=4bb61806-667e-4c13-8c49-2251983585c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:30:d1:5b:67:c1:47:d3:c6:2f:06:19:cf:89: eb:44:fa:a8:95:31:97:b1:ab:7a:40:cd:f1:c3:00: d9:d4:b0:10:5b:46:4a:ae:56:d2:e5:3f:ec:a4:e0: d3:c4:54:9b:b7:3a:cf:fa:e9:11:99:dd:8e:79:87: 59:10:58:3b:04:f3:81:fd:2d:32:b5:94:23:fe:9e: 35:b8:fb:d8:5e:3e:d6:bc:c8:73:d9:b0:d0:64:dc: 08:44:09:58:90:7e:6b:f9:04:e5:eb:17:c8:a2:d6: e5:f2:7b:3d:e3:70:1f:3f:2b:e7:29:46:b7:61:e4: 1e:b2:88:11:75:f5:a2:8d:2c:5f:75:28:52:9d:22: 36:8b:ea:86:99:63:63:00:3c:e3:92:92:ea:38:25: 70:22:a2:93:6f:33:45:1f:09:9b:78:fd:87:e9:c2: 13:6f:df:b4:60:07:71:2b:e8:cc:30:71:23:e0:fa: 03:9a:45:c2:95:f4:57:60:ea:50:ae:f4:41:7c:be: e3:39:f7:e0:1d:2c:bd:4c:60:e2:16:b3:cd:52:73: 84:6d:58:8c:72:3f:3c:10:d7:31:87:71:d7:aa:95: 5f:cf:fd:ce:33:18:0c:c3:d8:d2:02:26:0f:c3:95: 6f:41:08:63:a8:54:ea:f5:85:9b:c9:ad:50:5d:54: c3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:74:B9:B0:D6:1F:29:2D:F4:F4:DE:0C:28:EA:03:15:56:B7:8C:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b53e69e8-2636-3ca1-acc6-5f593eae9340.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.75.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:55:22:8e:1d:4f:17:a8:a2:22:78:2d:17:86:73:f9:08:ba: e6:21:6a:7e:1f:34:78:c4:99:ca:01:21:1a:0b:92:c4:7b:47: 67:ed:c1:d5:c9:f8:3d:d4:cc:1d:8e:d9:85:8c:1f:90:1f:f1: 53:54:a6:2d:99:ab:57:3e:9a:a4:31:20:cc:94:5d:cd:8f:02: 08:45:52:3d:9a:ba:49:48:58:4c:fa:53:be:4a:df:79:95:94: ca:41:40:e8:46:ed:c1:d1:b4:6c:08:3a:92:ea:42:89:fa:ce: a0:00:52:55:e4:a2:bd:ea:86:61:d5:79:12:94:23:a5:b6:87: 8b:c6:2d:7d:be:90:91:68:6c:93:7b:a6:d6:2a:ff:08:a7:7b: b1:ad:ca:dd:42:d8:9e:a8:e6:e5:26:d5:27:1a:43:9b:9e:32: 0f:b2:03:cc:d2:18:96:14:34:87:d0:d6:63:e6:2e:b0:c7:fb: 0e:63:d2:c7:6b:c8:db:40:42:53:86:32:24:ce:f9:85:a3:18: ea:94:ee:48:44:ae:fd:0f:e3:6a:66:99:6f:ea:06:44:84:95: b9:27:70:75:e4:cc:96:12:40:f8:66:26:5e:46:00:97:8e:4b: 8c:cf:19:36:94:5e:d9:2f:8f:af:cd:d5:e3:1b:48:e1:6f:7c: e5:77:fb:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOtHgR8yEzdOLaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NGJiNjE4MDYtNjY3ZS00YzEzLThjNDktMjI1MTk4MzU4NWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizDRW2fBR9PGLwYZz4nrRPqolTGXsat6QM3x wwDZ1LAQW0ZKrlbS5T/spODTxFSbtzrP+ukRmd2OeYdZEFg7BPOB/S0ytZQj/p41 uPvYXj7WvMhz2bDQZNwIRAlYkH5r+QTl6xfIotbl8ns943AfPyvnKUa3YeQesogR dfWijSxfdShSnSI2i+qGmWNjADzjkpLqOCVwIqKTbzNFHwmbeP2H6cITb9+0YAdx K+jMMHEj4PoDmkXClfRXYOpQrvRBfL7jOffgHSy9TGDiFrPNUnOEbViMcj88ENcx h3HXqpVfz/3OMxgMw9jSAiYPw5VvQQhjqFTq9YWbya1QXVTDYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLR0ubDWHykt9PTeDCjqAxVWt4yTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjUzZTY5ZTgtMjYzNi0z Y2ExLWFjYzYtNWY1OTNlYWU5MzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkuQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxVIo4dTxeooiJ4LReGc/kIuuYhan4fNHjEmcoBIRoLksR7R2ftwdXJ +D3UzB2O2YWMH5Af8VNUpi2Zq1c+mqQxIMyUXc2PAghFUj2auklIWEz6U75K33mV lMpBQOhG7cHRtGwIOpLqQon6zqAAUlXkor3qhmHVeRKUI6W2h4vGLX2+kJFobJN7 ptYq/wine7Gtyt1C2J6o5uUm1ScaQ5ueMg+yA8zSGJYUNIfQ1mPmLrDH+w5j0sdr yNtAQlOGMiTO+YWjGOqU7khErv0P42pmmW/qBkSElbkncHXkzJYSQPhmJl5GAJeO S4zPGTaUXtkvj6/N1eMbSOFvfOV3+8U= -----END CERTIFICATE-----Generated at Sun May 4 19:31:05 2025 by rpki-client