$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/af7d40b1-0ac9-3a31-8b2b-35d87e72494b.roa File: af7d40b1-0ac9-3a31-8b2b-35d87e72494b.roa (raw, json) Hash identifier: 3JMmywZ1VrWqekGHV98/Oqx0JMMo5X8hy0HcgPs6gtQ= Subject key identifier: 4E:55:33:11:A4:3A:8E:F5:5B:F1:D4:AC:47:B7:0F:96:4D:B3:F9:4B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784E5B650B0EB38F5720940 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/af7d40b1-0ac9-3a31-8b2b-35d87e72494b.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.73.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e5:b6:50:b0:eb:38:f5:72:09:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=bb357a8e-4495-47c3-b63b-fdc540c887e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c4:fa:9a:a3:1d:36:6e:c0:1b:47:36:21:10: a0:bc:8b:57:50:6e:b4:50:ee:dc:2d:64:fb:cd:f9: d6:6b:35:ab:36:38:33:1d:fd:0f:45:6a:8e:eb:09: 63:8b:3d:c8:66:3a:3b:6c:33:e2:2f:be:87:a8:11: 3f:ec:92:26:ce:fe:7c:e9:d3:1b:83:74:2e:00:3c: 89:86:fc:98:a1:68:aa:ce:61:31:d9:39:da:56:0d: 5d:18:ad:3b:10:97:44:c6:98:3b:86:0e:e1:5c:9b: da:35:cd:fb:72:3b:36:f2:7f:56:bb:ac:3a:2b:b6: ca:8c:15:8e:c5:66:eb:7c:a0:cc:b5:bf:8a:58:e2: c9:d2:ab:4e:35:b7:1a:e3:d9:ee:e5:3b:fb:a7:a0: e6:8c:10:56:a9:45:b4:fe:69:89:ce:5d:16:27:a6: ee:a5:1c:55:c6:d7:d9:ae:8f:43:29:90:ca:2a:8a: 03:33:3d:eb:0f:c4:7a:7b:b9:4d:84:9b:a6:0c:81: 2a:9b:79:4a:a9:40:60:c9:e6:f4:a6:ba:9f:62:15: 02:09:a4:25:da:10:c9:9e:87:37:0e:89:8b:67:30: 22:80:0f:2a:95:64:2d:56:c6:34:94:1b:29:c3:e8: 3c:86:7a:8a:42:a1:2c:ff:9f:2c:70:08:bc:91:15: fa:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:55:33:11:A4:3A:8E:F5:5B:F1:D4:AC:47:B7:0F:96:4D:B3:F9:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/af7d40b1-0ac9-3a31-8b2b-35d87e72494b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.73.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:41:45:da:bc:c2:c1:46:59:fc:76:8d:3a:ba:d0:bc:b9:74: f0:de:86:72:2a:0f:39:fd:5a:4e:ac:82:d6:b6:42:ec:57:84: 31:e8:a9:69:3d:89:c4:98:93:e5:ad:62:aa:62:08:54:8d:9e: 73:db:94:15:ca:3f:5e:ad:ee:eb:0d:f3:aa:ab:f3:dc:cc:fb: c1:2f:c2:47:b3:5e:01:61:8c:6e:90:04:94:7b:17:b9:0f:0f: b1:1c:c7:55:0b:e2:0f:5f:58:34:91:ab:c6:87:c4:42:ed:0e: 84:a0:aa:c2:05:fe:9a:87:e8:be:91:fb:97:2b:49:97:33:08: bf:1a:ee:f3:30:a1:1a:5c:15:54:bf:64:ff:ef:2f:ce:a8:85: 51:13:90:1e:23:52:b0:e9:49:24:bb:7f:25:13:7f:26:c1:a0: c8:75:a2:b3:ba:ee:2a:85:b7:45:a2:84:55:fc:0a:25:ec:12: 75:54:b0:73:94:67:b4:a3:68:cf:5a:d9:06:8b:e4:55:52:cf: 19:15:fd:01:4f:52:21:6d:15:4b:fb:6b:69:9a:61:34:65:79: bf:45:cd:6c:84:d3:2b:fb:7a:c0:45:57:48:8c:fa:28:0c:cc: d1:1a:bb:3d:07:18:52:06:dc:5d:1c:87:f6:a9:a7:8f:b8:55: 5b:6f:ff:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOW2ULDrOPVyCUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YmIzNTdhOGUtNDQ5NS00N2MzLWI2M2ItZmRjNTQwYzg4N2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMT6mqMdNm7AG0c2IRCgvItXUG60UO7cLWT7 zfnWazWrNjgzHf0PRWqO6wljiz3IZjo7bDPiL76HqBE/7JImzv586dMbg3QuADyJ hvyYoWiqzmEx2TnaVg1dGK07EJdExpg7hg7hXJvaNc37cjs28n9Wu6w6K7bKjBWO xWbrfKDMtb+KWOLJ0qtONbca49nu5Tv7p6DmjBBWqUW0/mmJzl0WJ6bupRxVxtfZ ro9DKZDKKooDMz3rD8R6e7lNhJumDIEqm3lKqUBgyeb0prqfYhUCCaQl2hDJnoc3 DomLZzAigA8qlWQtVsY0lBspw+g8hnqKQqEs/58scAi8kRX61QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5VMxGkOo71W/HUrEe3D5ZNs/lLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWY3ZDQwYjEtMGFjOS0z YTMxLThiMmItMzVkODdlNzI0OTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5BRdq8wsFGWfx2jTq60Ly5dPDehnIqDzn9Wk6sgta2QuxXhDHoqWk9 icSYk+WtYqpiCFSNnnPblBXKP16t7usN86qr89zM+8EvwkezXgFhjG6QBJR7F7kP D7Ecx1UL4g9fWDSRq8aHxELtDoSgqsIF/pqH6L6R+5crSZczCL8a7vMwoRpcFVS/ ZP/vL86ohVETkB4jUrDpSSS7fyUTfybBoMh1orO67iqFt0WihFX8CiXsEnVUsHOU Z7SjaM9a2QaL5FVSzxkV/QFPUiFtFUv7a2maYTRleb9FzWyE0yv7esBFV0iM+igM zNEauz0HGFIG3F0ch/app4+4VVtv/5Q= -----END CERTIFICATE-----Generated at Sat Apr 26 16:05:13 2025 by rpki-client