$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c0e822d-fb46-370b-ab65-3c2e28430add.roa File: 3c0e822d-fb46-370b-ab65-3c2e28430add.roa (raw, json) Hash identifier: 8f1CSuInVR1GESZY12ZCcgztGllmJwQPRooDsw7vVJk= Subject key identifier: 51:7A:F7:AA:94:74:2B:6E:D4:0D:17:CC:98:B8:3C:07:AE:BD:32:64 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7853DAEDA90FA0DFD5EF480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c0e822d-fb46-370b-ab65-3c2e28430add.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.79.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:3d:ae:da:90:fa:0d:fd:5e:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=4e7e8599-053d-4c54-bc67-2951cd2d20b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:51:16:94:4b:d7:e4:9f:1b:96:de:ed:ee:56: ac:37:30:85:89:6b:25:8e:08:f1:05:af:5b:59:16: 21:e0:68:07:a3:75:97:2e:38:2c:6f:8d:ad:26:a5: 45:0a:88:23:11:62:73:d0:49:4c:31:18:01:6d:b9: 70:13:ee:e7:ca:90:ad:80:95:72:5a:bf:12:0a:03: 13:29:73:59:77:75:6b:2d:45:86:63:65:78:d7:16: e4:97:83:37:45:de:fd:7f:c5:08:8c:25:f2:b3:9d: a7:47:79:4e:ff:65:a0:c0:40:d4:9f:9a:38:04:ab: 40:b7:bd:0c:c5:22:c6:1c:6d:08:7f:1d:35:e3:88: 87:05:2b:9a:e0:4e:14:27:88:5e:d0:66:4f:b0:69: 18:b3:c7:f6:f3:83:21:36:77:c4:83:61:b2:b1:28: 28:40:a0:59:d4:5b:a3:a0:b3:bc:3e:15:3d:2f:a6: ec:b4:82:6d:71:7e:c3:c6:4c:a2:cc:13:1b:86:8f: 10:80:a5:9b:88:c5:ee:1e:37:81:85:b1:fb:94:59: df:f1:f1:ad:e9:62:84:80:0f:6e:7f:e5:67:b2:fc: 17:9d:96:e8:98:0a:a6:e3:09:25:18:ff:7b:a3:a8: 61:00:9e:6e:3a:14:d7:a3:26:eb:34:c8:e4:3c:6e: ef:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:7A:F7:AA:94:74:2B:6E:D4:0D:17:CC:98:B8:3C:07:AE:BD:32:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c0e822d-fb46-370b-ab65-3c2e28430add.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.79.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:09:a8:e1:d0:98:35:98:5a:f8:dc:da:08:9e:8b:c3:c6:e5: 91:29:b4:c6:d7:37:9a:27:99:9d:b8:7b:c2:57:ff:b6:4e:8e: d0:95:a2:74:fe:52:69:03:4b:76:9d:8c:40:5f:19:2a:ee:20: eb:e5:17:73:9c:e8:f8:8e:2c:9b:53:55:4a:f8:d3:bc:e1:62: cd:4b:e1:c6:a4:8e:80:51:c0:a0:5c:55:18:bb:52:f5:14:f6: b5:60:75:f2:9f:48:e7:73:f9:72:b6:7e:d2:6f:1e:b0:85:83: 67:c4:2c:1a:2c:92:ef:98:28:9f:bc:c5:4f:77:83:e1:db:a9: d1:a6:7b:21:73:71:92:04:3e:52:25:d5:0b:c6:48:53:cf:9e: 0f:3a:72:4e:bc:0a:16:22:fd:5f:d3:32:c8:19:85:80:4e:8f: a9:dd:1f:92:dd:f8:fa:1a:f6:fa:26:ec:9f:eb:ab:e5:80:68: c5:ee:4d:6c:79:07:8b:7a:0d:3c:45:f7:95:74:2f:a7:a9:64: 82:b1:98:8a:7c:b4:aa:56:5f:8c:6d:e4:29:b3:f2:3e:3c:f4: a5:3d:d5:c9:2a:93:d1:54:f7:77:f0:8e:f1:dc:3b:91:5c:db: 22:64:92:e1:b0:e6:ec:c6:d0:ae:cb:37:46:d7:18:e1:25:25: b3:f0:3f:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhT2u2pD6Df1e9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NGU3ZTg1OTktMDUzZC00YzU0LWJjNjctMjk1MWNkMmQyMGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVEWlEvX5J8blt7t7lasNzCFiWsljgjxBa9b WRYh4GgHo3WXLjgsb42tJqVFCogjEWJz0ElMMRgBbblwE+7nypCtgJVyWr8SCgMT KXNZd3VrLUWGY2V41xbkl4M3Rd79f8UIjCXys52nR3lO/2WgwEDUn5o4BKtAt70M xSLGHG0Ifx0144iHBSua4E4UJ4he0GZPsGkYs8f284MhNnfEg2GysSgoQKBZ1Fuj oLO8PhU9L6bstIJtcX7DxkyizBMbho8QgKWbiMXuHjeBhbH7lFnf8fGt6WKEgA9u f+VnsvwXnZbomAqm4wklGP97o6hhAJ5uOhTXoybrNMjkPG7vvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFF696qUdCtu1A0XzJi4PAeuvTJkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2MwZTgyMmQtZmI0Ni0z NzBiLWFiNjUtM2MyZTI4NDMwYWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIk/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8JqOHQmDWYWvjc2giei8PG5ZEptMbXN5onmZ24e8JX/7ZOjtCVonT+ UmkDS3adjEBfGSruIOvlF3Oc6PiOLJtTVUr407zhYs1L4cakjoBRwKBcVRi7UvUU 9rVgdfKfSOdz+XK2ftJvHrCFg2fELBosku+YKJ+8xU93g+HbqdGmeyFzcZIEPlIl 1QvGSFPPng86ck68ChYi/V/TMsgZhYBOj6ndH5Ld+Poa9vom7J/rq+WAaMXuTWx5 B4t6DTxF95V0L6epZIKxmIp8tKpWX4xt5Cmz8j489KU91ckqk9FU93fwjvHcO5Fc 2yJkkuGw5uzG0K7LN0bXGOElJbPwP/k= -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:51 2025 by rpki-client