$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fdce603-0479-32ce-8cb5-0cf024468bc2.roa File: 3fdce603-0479-32ce-8cb5-0cf024468bc2.roa (raw, json) Hash identifier: TDxHj2VNxlJz+qzMG+NG+hHv6z6tGK8h3vuMl/RTMDY= Subject key identifier: B8:DF:C6:22:16:5F:E2:C9:BE:0C:58:95:6F:6B:F7:E7:A9:2D:3F:CF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784E507C36A0167C96F5220 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fdce603-0479-32ce-8cb5-0cf024468bc2.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.74.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e5:07:c3:6a:01:67:c9:6f:52:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=7a7f9aa6-cbbe-47b9-bafe-e31ac2b75e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7e:d6:13:8d:50:76:d8:74:86:c4:3a:a7:28: 75:6d:0c:24:5a:f7:ef:b6:ee:bc:ce:0f:5f:39:23: b0:34:ee:36:c9:11:69:5b:b5:24:59:11:e9:c8:5c: 49:79:2b:85:29:be:73:18:91:66:64:7d:fd:01:3f: 51:30:e1:9e:5a:e4:3b:92:e6:6f:e4:dc:5a:81:d0: 36:32:af:64:81:4f:98:e1:30:55:0c:35:86:d2:bd: fe:d4:3c:8c:64:91:f0:b6:28:2a:a5:de:5a:bc:25: 00:35:c2:08:76:65:55:3d:4a:6a:8d:09:52:56:65: 5b:e9:30:a4:6e:10:0a:6c:ff:4b:52:b4:56:d7:63: 99:b3:05:3d:ed:51:12:96:70:c4:4b:f7:9e:ef:a8: 1e:15:d3:c9:65:91:37:07:a4:67:f0:e2:a2:41:32: a7:66:43:c5:cf:81:5c:47:f4:ae:80:dd:d3:4b:36: 7e:07:d6:79:41:48:dc:d5:2a:91:7e:09:f1:3a:9d: 72:56:b6:b1:0d:37:19:93:7b:a0:8f:56:49:6c:af: d2:9f:39:fc:00:f5:1f:d9:50:02:f5:f9:06:ec:9b: fb:ed:c5:b8:ae:40:7a:9a:c8:a6:70:32:51:70:c8: 6b:de:0e:7c:df:76:b2:2d:ab:ee:50:4d:63:77:ed: b5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DF:C6:22:16:5F:E2:C9:BE:0C:58:95:6F:6B:F7:E7:A9:2D:3F:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fdce603-0479-32ce-8cb5-0cf024468bc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.74.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:05:3d:69:65:18:18:bd:80:56:f1:56:95:59:08:09:fe:e2: 14:30:b7:51:c9:82:e9:e2:7e:84:02:36:da:eb:8f:9c:38:87: 95:cb:71:ac:c3:8b:53:d2:7e:15:e4:8a:eb:b6:d6:86:14:6e: ca:f8:a9:5d:60:04:8d:a7:c6:c4:4f:a5:7c:8f:b7:87:47:15: 62:70:77:57:49:05:4a:0a:9e:07:a2:1a:ad:5d:bd:2a:fd:e4: be:75:81:ab:bd:b7:e2:52:50:69:83:08:5a:a8:c4:7f:e0:8b: db:4a:20:58:26:b1:09:52:f2:f3:1f:1c:2f:74:a8:e8:46:27: 96:a2:65:3b:64:83:00:85:5b:03:5c:71:f2:73:93:64:cc:74: cc:e0:ec:8e:44:2f:71:11:47:fb:66:d0:7a:eb:1c:89:84:6f: e0:dc:4c:bf:a0:fa:de:6a:98:3e:ec:af:ee:21:0a:10:05:0d: 2d:73:1a:03:04:89:b3:36:62:f7:4d:e7:e9:c9:ec:74:02:c6: e1:8a:31:9b:6b:74:69:e5:72:93:9c:89:c2:c0:52:3b:cf:a5: e1:23:39:94:c5:39:ec:16:78:8d:b6:ee:88:75:d7:52:56:0c: 77:f2:8d:0f:eb:1c:a4:1e:36:54:f7:f0:73:6e:b8:6e:6d:e7: 2d:56:9d:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOUHw2oBZ8lvUiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk N2E3ZjlhYTYtY2JiZS00N2I5LWJhZmUtZTMxYWMyYjc1ZTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjX7WE41Qdth0hsQ6pyh1bQwkWvfvtu68zg9f OSOwNO42yRFpW7UkWRHpyFxJeSuFKb5zGJFmZH39AT9RMOGeWuQ7kuZv5NxagdA2 Mq9kgU+Y4TBVDDWG0r3+1DyMZJHwtigqpd5avCUANcIIdmVVPUpqjQlSVmVb6TCk bhAKbP9LUrRW12OZswU97VESlnDES/ee76geFdPJZZE3B6Rn8OKiQTKnZkPFz4Fc R/SugN3TSzZ+B9Z5QUjc1SqRfgnxOp1yVraxDTcZk3ugj1ZJbK/Snzn8APUf2VAC 9fkG7Jv77cW4rkB6msimcDJRcMhr3g5833ayLavuUE1jd+21UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjfxiIWX+LJvgxYlW9r9+epLT/PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2ZkY2U2MDMtMDQ3OS0z MmNlLThjYjUtMGNmMDI0NDY4YmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4FPWllGBi9gFbxVpVZCAn+4hQwt1HJgunifoQCNtrrj5w4h5XLcazD i1PSfhXkiuu21oYUbsr4qV1gBI2nxsRPpXyPt4dHFWJwd1dJBUoKngeiGq1dvSr9 5L51gau9t+JSUGmDCFqoxH/gi9tKIFgmsQlS8vMfHC90qOhGJ5aiZTtkgwCFWwNc cfJzk2TMdMzg7I5EL3ERR/tm0HrrHImEb+DcTL+g+t5qmD7sr+4hChAFDS1zGgME ibM2YvdN5+nJ7HQCxuGKMZtrdGnlcpOcicLAUjvPpeEjOZTFOewWeI227oh111JW DHfyjQ/rHKQeNlT38HNuuG5t5y1WnWo= -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:28 2025 by rpki-client