$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0485f8d6-ac02-37f3-87dc-32765524c75b.roa File: 0485f8d6-ac02-37f3-87dc-32765524c75b.roa (raw, json) Hash identifier: C6OdgHvQKdGY44m/6RkCPMS3rK4pmJR6+/yov2rcDxg= Subject key identifier: FD:53:04:0C:FD:5C:91:EB:02:BA:B9:5A:0B:AC:C1:D4:3E:65:1C:68 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7850B354BEB65372172B040 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0485f8d6-ac02-37f3-87dc-32765524c75b.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.73.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:0b:35:4b:eb:65:37:21:72:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=4f3f60fd-d0e5-4170-9bb4-a3e3e3292441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:00:c1:07:d4:b7:71:d3:5d:c3:42:73:12:83: 9f:a2:59:82:97:9e:12:ee:7a:ef:d5:b4:d6:37:f3: 04:b0:71:8e:0b:bb:8c:98:2b:62:07:5d:03:c3:1a: 0f:34:34:84:57:72:49:c8:df:a9:3b:fd:fe:01:90: 90:48:52:81:02:c3:7e:83:87:c7:54:44:4a:ee:a8: 2f:57:5b:20:97:e3:97:92:61:63:ac:78:98:13:de: 0e:c7:4d:82:d9:9f:f9:d3:36:af:01:e2:b0:fc:20: 7c:f3:f7:4e:07:90:fd:d0:7c:00:27:c6:4e:45:68: aa:c6:13:97:c3:54:3c:03:48:22:64:90:eb:d9:75: f6:dd:f6:d1:81:34:e8:b2:00:f4:46:d4:bb:0a:24: f2:3b:28:36:5f:0b:34:90:b3:ba:b3:e8:e4:8f:df: 30:6e:14:63:18:09:4d:dd:13:5f:e5:83:9f:cc:2b: 34:6e:67:6a:c6:f0:b9:29:99:09:c9:9f:a5:82:ca: 6d:e7:5e:30:07:8e:ad:59:64:28:77:e0:2f:26:c7: 02:26:b5:e3:19:0c:d7:20:ba:d4:82:6a:7c:57:f1: 1f:95:c5:98:80:b5:d1:7a:d1:66:29:b0:8f:62:3e: 1e:c4:a5:6e:1b:a3:a7:09:62:59:9a:ee:66:a4:f4: 41:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:53:04:0C:FD:5C:91:EB:02:BA:B9:5A:0B:AC:C1:D4:3E:65:1C:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0485f8d6-ac02-37f3-87dc-32765524c75b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.73.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:e7:0e:c0:57:43:b1:fb:a5:a0:c2:df:94:41:32:61:05:68: e5:1d:6b:8c:bc:30:5a:92:71:f8:df:75:ff:bc:8e:ae:cf:13: 6e:20:22:2e:8f:ba:54:db:8f:a5:db:19:70:b7:78:0e:07:62: ab:1f:d1:02:68:dd:42:f6:8e:70:fb:b9:9b:09:95:ee:f4:71: 7b:13:54:5b:01:0a:dd:cc:c9:d5:93:7d:49:2f:b2:51:10:af: a6:2f:72:75:81:b9:2d:a8:ab:3f:5b:c2:a7:86:73:68:a3:0d: af:5f:b6:db:16:58:9b:01:aa:9a:58:75:aa:9f:98:4a:29:ba: c9:56:49:1a:c8:04:4d:63:50:3f:47:ba:76:c0:b1:ea:3f:59: 2d:06:e0:7e:1d:8f:a6:67:64:c5:d3:7b:27:6c:16:26:72:2d: 0f:8b:2b:92:1f:ed:0b:ac:2d:d1:21:45:d7:63:58:aa:31:7f: b9:be:ea:4f:c6:85:89:78:fe:e5:83:71:e5:22:f9:ac:30:e9: 68:a3:0c:81:c9:84:81:f2:90:db:1f:bb:a9:e1:d6:3b:0e:e6: 2b:8a:20:b9:aa:ad:e7:81:98:a3:09:6e:34:fe:e5:23:88:35: c2:53:69:ab:ee:37:d1:d2:6e:57:32:b1:1a:34:aa:e7:96:48: d7:fb:23:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQs1S+tlNyFysEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NGYzZjYwZmQtZDBlNS00MTcwLTliYjQtYTNlM2UzMjkyNDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQDBB9S3cdNdw0JzEoOfolmCl54S7nrv1bTW N/MEsHGOC7uMmCtiB10DwxoPNDSEV3JJyN+pO/3+AZCQSFKBAsN+g4fHVERK7qgv V1sgl+OXkmFjrHiYE94Ox02C2Z/50zavAeKw/CB88/dOB5D90HwAJ8ZORWiqxhOX w1Q8A0giZJDr2XX23fbRgTTosgD0RtS7CiTyOyg2Xws0kLO6s+jkj98wbhRjGAlN 3RNf5YOfzCs0bmdqxvC5KZkJyZ+lgspt514wB46tWWQod+AvJscCJrXjGQzXILrU gmp8V/EflcWYgLXRetFmKbCPYj4exKVuG6OnCWJZmu5mpPRBiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1TBAz9XJHrArq5WguswdQ+ZRxoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDQ4NWY4ZDYtYWMwMi0z N2YzLTg3ZGMtMzI3NjU1MjRjNzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIknAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHnDsBXQ7H7paDC35RBMmEFaOUda4y8MFqScfjfdf+8jq7PE24gIi6P ulTbj6XbGXC3eA4HYqsf0QJo3UL2jnD7uZsJle70cXsTVFsBCt3MydWTfUkvslEQ r6YvcnWBuS2oqz9bwqeGc2ijDa9fttsWWJsBqppYdaqfmEopuslWSRrIBE1jUD9H unbAseo/WS0G4H4dj6ZnZMXTeydsFiZyLQ+LK5If7QusLdEhRddjWKoxf7m+6k/G hYl4/uWDceUi+aww6WijDIHJhIHykNsfu6nh1jsO5iuKILmqreeBmKMJbjT+5SOI NcJTaavuN9HSblcysRo0queWSNf7I1Y= -----END CERTIFICATE-----Generated at Sat Apr 26 20:22:57 2025 by rpki-client