$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6ed8daff-3557-3591-a8f1-4787e6be1fe3.roa File: 6ed8daff-3557-3591-a8f1-4787e6be1fe3.roa (raw, json) Hash identifier: QO2rywQYtDRfEPCNs0IuQCRDRc7hTV0y4RqpwzX4XpA= Subject key identifier: 19:6E:0B:5B:61:F2:56:6F:BD:E9:B5:3D:54:A1:A0:09:EE:76:8F:76 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784C90D8A3BD88E4E518480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6ed8daff-3557-3591-a8f1-4787e6be1fe3.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.73.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:c9:0d:8a:3b:d8:8e:4e:51:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=95a3012a-9171-4a2f-b8a5-205d87a06d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e9:da:69:cb:74:a3:45:de:90:70:f2:fc:5b: 41:c0:80:05:07:d1:f0:36:8f:54:77:77:b5:d9:6a: be:a6:70:29:53:54:74:88:03:52:00:5b:b8:5a:80: 6e:6e:b8:24:20:3b:c1:d6:fd:c3:01:bb:84:95:11: b9:6b:eb:8c:d1:5f:51:8d:ee:92:30:7c:8e:d4:63: 37:86:5b:9f:9d:ac:08:e4:cc:7e:83:d0:6d:d0:5e: 6a:1f:c0:02:ab:be:9e:1a:3d:d9:9c:c5:d3:f3:ec: f6:79:6b:50:b6:a8:53:6c:4f:0b:a1:12:2f:80:46: 35:98:f7:d1:3a:65:3a:51:0b:7b:2e:be:11:c7:50: da:60:28:ef:43:77:73:74:5f:5f:2c:9a:4b:4f:21: d1:2a:e1:a6:aa:93:20:52:5c:50:73:6b:1a:ec:ef: 37:ef:b2:94:e4:4a:fc:bd:37:4b:69:56:ed:75:2c: 43:81:55:eb:64:a4:d3:31:2e:c2:0d:6a:f7:7d:f7: c7:2f:0e:8c:6c:42:a2:c2:85:aa:c8:f5:de:8c:ca: 75:57:01:7d:07:ea:74:54:80:a4:3e:e9:07:fd:ad: ed:78:64:bc:6a:4a:54:cd:90:c2:af:ae:4c:45:9e: 18:f9:18:96:4b:6f:2a:93:25:95:1f:bf:5e:3d:cd: 46:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:6E:0B:5B:61:F2:56:6F:BD:E9:B5:3D:54:A1:A0:09:EE:76:8F:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6ed8daff-3557-3591-a8f1-4787e6be1fe3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.73.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:82:ae:31:16:9d:4a:d0:ac:b5:ed:6e:de:bb:76:67:0f:cc: 7b:1e:38:36:93:fa:c5:d1:07:29:2f:a2:4a:0b:79:f0:d4:2d: 0e:b3:61:2a:17:16:8a:ad:34:f9:de:3e:3a:b1:c2:ad:0e:96: 4f:1f:a1:0f:3c:35:11:8b:13:a0:42:1e:3e:eb:16:99:2e:9e: 18:be:3a:17:64:c4:d3:74:6f:37:3b:8a:7c:79:b8:f2:7c:ec: cd:40:9c:bc:2f:17:bc:cf:d9:52:d7:32:fe:53:b7:08:0c:3c: 54:43:92:8f:68:d9:17:fb:b0:d6:fd:e5:29:88:05:b0:e0:4f: 5d:9a:cf:6f:e6:be:f6:0e:8a:ae:91:16:84:22:4e:5b:1f:b3: c7:99:11:2c:34:7a:8b:3d:14:b3:68:7d:aa:67:70:32:63:0c: 56:c5:b9:13:76:b8:ab:b8:20:87:42:05:d8:39:c0:7b:e8:d1: d1:df:a1:64:69:04:b9:06:8d:2d:23:41:59:70:11:bd:89:66: ef:0f:e5:68:04:94:2d:da:35:88:96:17:e0:a8:0a:25:40:c0: 1c:2c:db:c0:d1:45:de:3f:13:0f:24:b7:2e:38:a2:2f:c4:f5: f5:ec:94:a1:eb:17:b5:31:fe:9e:fd:06:1d:7f:e1:c7:d1:c1: 75:62:6d:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMkNijvYjk5RhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OTVhMzAxMmEtOTE3MS00YTJmLWI4YTUtMjA1ZDg3YTA2ZDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOnaact0o0XekHDy/FtBwIAFB9HwNo9Ud3e1 2Wq+pnApU1R0iANSAFu4WoBubrgkIDvB1v3DAbuElRG5a+uM0V9Rje6SMHyO1GM3 hlufnawI5Mx+g9Bt0F5qH8ACq76eGj3ZnMXT8+z2eWtQtqhTbE8LoRIvgEY1mPfR OmU6UQt7Lr4Rx1DaYCjvQ3dzdF9fLJpLTyHRKuGmqpMgUlxQc2sa7O8377KU5Er8 vTdLaVbtdSxDgVXrZKTTMS7CDWr3fffHLw6MbEKiwoWqyPXejMp1VwF9B+p0VICk PukH/a3teGS8akpUzZDCr65MRZ4Y+RiWS28qkyWVH79ePc1GrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBluC1th8lZvvem1PVShoAnudo92MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNmVkOGRhZmYtMzU1Ny0z NTkxLWE4ZjEtNDc4N2U2YmUxZmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIknwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+CrjEWnUrQrLXtbt67dmcPzHseODaT+sXRBykvokoLefDULQ6zYSoX FoqtNPnePjqxwq0Olk8foQ88NRGLE6BCHj7rFpkunhi+OhdkxNN0bzc7inx5uPJ8 7M1AnLwvF7zP2VLXMv5TtwgMPFRDko9o2Rf7sNb95SmIBbDgT12az2/mvvYOiq6R FoQiTlsfs8eZESw0eos9FLNofapncDJjDFbFuRN2uKu4IIdCBdg5wHvo0dHfoWRp BLkGjS0jQVlwEb2JZu8P5WgElC3aNYiWF+CoCiVAwBws28DRRd4/Ew8kty44oi/E 9fXslKHrF7Ux/p79Bh1/4cfRwXVibVg= -----END CERTIFICATE-----Generated at Sat Apr 26 16:18:00 2025 by rpki-client