$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/49c270b0-baa4-3e3b-a458-af9f8000780f.roa File: 49c270b0-baa4-3e3b-a458-af9f8000780f.roa (raw, json) Hash identifier: 3mCMSR1UEWxFuOklJXFX9d33y2DX/5OTiZ1Kkx8nreE= Subject key identifier: 9A:4B:7C:82:5D:2B:4A:6D:A2:D6:C5:F1:E6:A3:99:05:A4:4C:A0:68 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784E7947F650E848D4A5080 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/49c270b0-baa4-3e3b-a458-af9f8000780f.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.142.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e7:94:7f:65:0e:84:8d:4a:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=3ae14102-3572-469f-83a4-55067a3fd155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:57:0c:d5:9b:f3:5d:f7:2f:97:3c:de:38:fa: ee:67:03:e6:89:b9:31:b2:6d:97:ea:1e:22:84:a7: d9:37:f4:5c:5b:5d:f9:31:7c:06:cb:04:fd:46:60: fd:55:a2:30:de:43:7e:4e:4d:1a:4b:5b:91:cc:27: d3:d7:8d:9a:fe:b0:63:b5:9d:de:a8:aa:59:e6:d9: 0b:59:ac:7f:01:2d:f1:4d:4b:9a:7d:48:42:7f:d4: d1:00:7a:db:81:dd:71:dd:09:f6:c0:d5:f0:92:66: e5:ea:ca:b7:bd:03:68:85:25:02:1b:a3:c7:36:51: b0:54:6b:f8:b4:39:ec:81:6f:69:1c:47:38:27:0b: e3:f9:78:2d:5c:66:f8:00:55:fd:5f:4b:d5:43:ca: 84:12:7f:6e:69:0c:36:23:31:77:72:97:83:be:e8: 70:ed:96:30:1a:61:78:00:1f:36:83:d2:c6:c4:22: 95:e1:3e:1c:36:33:6c:ac:b5:6e:82:ce:76:54:94: 13:a0:a5:e5:ad:f9:4e:59:ad:04:de:05:40:df:60: 3c:db:b4:4d:ca:71:79:cd:65:d1:15:47:b4:1c:5a: 3b:a1:dc:19:e5:53:cc:3d:c1:20:e1:01:07:55:bd: 1b:a6:55:86:ca:52:7e:aa:bc:91:ee:2e:23:45:22: d6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:4B:7C:82:5D:2B:4A:6D:A2:D6:C5:F1:E6:A3:99:05:A4:4C:A0:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/49c270b0-baa4-3e3b-a458-af9f8000780f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.142.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:44:cf:8f:6f:33:e9:68:42:1b:53:af:00:20:b6:b1:61:d1: b5:f2:51:4c:d6:32:59:65:84:df:a2:60:7f:a1:92:8d:36:1f: 38:0e:bb:a3:e8:aa:0e:8b:b0:52:64:e1:94:a5:41:7a:e4:3a: ff:ea:df:96:f6:74:57:09:9b:f2:9a:6a:1b:69:94:61:67:85: be:d1:4e:3a:63:72:a5:75:2e:e5:4c:34:9d:58:a8:1b:fd:cb: d3:32:ef:a6:75:e3:7d:6d:0a:8e:a2:54:26:9e:26:91:30:c4: 19:f6:0a:ea:68:57:4d:ea:83:e2:91:13:a0:c9:bf:96:4e:34: 11:d2:4b:f2:3c:46:84:95:d1:24:30:33:58:18:76:3a:dd:bb: 39:2d:09:5c:02:39:a8:ca:b0:b1:0c:39:aa:84:86:d3:f3:bf: cb:72:35:24:b2:33:d2:ea:c7:a5:20:14:21:ae:52:ee:96:57: 5a:ec:45:f4:98:4c:58:a2:fc:fb:70:a3:16:21:13:d0:5e:59: 4c:82:2d:49:12:f4:08:87:95:83:bd:28:18:74:0b:af:df:a2: 1b:a7:32:72:99:b4:eb:03:43:90:bf:c8:b3:3e:65:64:67:2a: 58:cb:1c:12:4a:59:f3:e1:48:46:e7:19:21:95:0b:85:18:c0: 81:ba:72:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOeUf2UOhI1KUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk M2FlMTQxMDItMzU3Mi00NjlmLTgzYTQtNTUwNjdhM2ZkMTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1cM1ZvzXfcvlzzeOPruZwPmibkxsm2X6h4i hKfZN/RcW135MXwGywT9RmD9VaIw3kN+Tk0aS1uRzCfT142a/rBjtZ3eqKpZ5tkL Wax/AS3xTUuafUhCf9TRAHrbgd1x3Qn2wNXwkmbl6sq3vQNohSUCG6PHNlGwVGv4 tDnsgW9pHEc4Jwvj+XgtXGb4AFX9X0vVQ8qEEn9uaQw2IzF3cpeDvuhw7ZYwGmF4 AB82g9LGxCKV4T4cNjNsrLVugs52VJQToKXlrflOWa0E3gVA32A827RNynF5zWXR FUe0HFo7odwZ5VPMPcEg4QEHVb0bplWGylJ+qryR7i4jRSLWfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpLfIJdK0ptotbF8eajmQWkTKBoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDljMjcwYjAtYmFhNC0z ZTNiLWE0NTgtYWY5ZjgwMDA3ODBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIo5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhEz49vM+loQhtTrwAgtrFh0bXyUUzWMlllhN+iYH+hko02HzgOu6Po qg6LsFJk4ZSlQXrkOv/q35b2dFcJm/KaahtplGFnhb7RTjpjcqV1LuVMNJ1YqBv9 y9My76Z1431tCo6iVCaeJpEwxBn2CupoV03qg+KRE6DJv5ZONBHSS/I8RoSV0SQw M1gYdjrduzktCVwCOajKsLEMOaqEhtPzv8tyNSSyM9Lqx6UgFCGuUu6WV1rsRfSY TFii/PtwoxYhE9BeWUyCLUkS9AiHlYO9KBh0C6/fohunMnKZtOsDQ5C/yLM+ZWRn KljLHBJKWfPhSEbnGSGVC4UYwIG6cto= -----END CERTIFICATE-----Generated at Sat Apr 26 14:58:39 2025 by rpki-client