$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c3e0c34a-e7f6-3d98-a20d-341412a703ee.roa File: c3e0c34a-e7f6-3d98-a20d-341412a703ee.roa (raw, json) Hash identifier: NUDYngD+IHV0w/HUrs5Xn+dQqlzphGG/5fFH3iPvxJQ= Subject key identifier: 19:76:2F:85:2F:FF:C7:12:7B:FC:D3:F5:83:BE:F1:7B:45:54:DF:58 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784F5B89C9A5BE989373340 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c3e0c34a-e7f6-3d98-a20d-341412a703ee.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.74.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:f5:b8:9c:9a:5b:e9:89:37:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=d7c1ef03-0604-48b6-82e1-2914cd25fffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:14:ee:05:7d:31:4f:54:46:d9:13:a9:f3:b9: f9:42:a9:fb:b8:b2:3b:3f:61:e4:0d:68:98:dc:1c: 1c:4f:dd:9f:4b:c3:06:4c:8c:f7:eb:75:53:b2:ad: 99:6a:d2:f1:ef:a3:64:ed:7a:0a:77:ef:5b:95:bf: 03:eb:b8:06:b2:ec:57:68:07:90:e4:47:ce:0a:40: 19:62:d1:68:92:6f:6d:f9:2e:fd:3e:8a:56:f5:b1: 96:af:fd:dc:26:50:9a:e6:3a:6c:95:5c:61:af:9e: a7:75:d5:75:aa:f1:51:c7:5a:ac:7e:42:f0:52:2e: 55:a6:77:02:c2:68:e7:c5:88:78:7a:b3:d5:38:4a: 82:e8:86:51:c8:f0:23:f6:5a:cc:cc:7c:d5:ac:d9: 59:ec:82:4c:b8:75:00:25:92:d2:37:5e:25:fa:e6: f0:29:e3:92:5a:01:a8:ff:cb:60:09:e9:e2:4f:5f: 28:bf:8b:de:38:8f:cf:3b:d2:02:58:7e:18:a5:ac: e1:8a:08:be:c1:d5:4f:10:1b:d3:4f:b0:38:4d:f2: 80:c4:a5:f6:78:67:10:fa:68:21:48:1f:b4:35:cc: eb:23:f5:e9:e0:54:ec:38:7e:69:94:27:b4:63:8d: 12:16:e9:39:76:f2:c3:df:03:f1:e2:c5:93:a6:ca: 7b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:76:2F:85:2F:FF:C7:12:7B:FC:D3:F5:83:BE:F1:7B:45:54:DF:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c3e0c34a-e7f6-3d98-a20d-341412a703ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.74.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:59:c1:0b:7a:5d:7a:22:f4:2d:02:fc:93:be:cb:a8:e3:af: 11:3f:1b:07:e3:52:72:01:c5:62:99:e2:a2:aa:26:08:40:69: 9f:a1:d0:e4:5d:16:07:65:66:5a:99:47:10:2c:6a:24:46:5c: 74:cb:aa:01:2c:80:e0:21:16:10:13:59:41:68:6f:bd:ac:84: 0d:b6:8a:92:1a:e2:ef:81:b4:a4:8b:61:18:a3:c0:ac:ea:5b: a0:a3:b1:5e:c1:6f:47:4e:d0:c9:00:c1:67:ff:4a:a8:ea:7a: 7e:a7:94:4d:27:68:15:3a:d7:e3:de:23:4b:68:7f:52:c0:67: 27:6b:4d:84:5d:f2:8e:3a:85:c1:07:50:97:52:2b:c0:cb:00: fe:06:b7:c1:38:af:ae:64:a4:93:b6:84:bd:49:98:88:05:c7: f1:a9:ef:ff:e5:e0:f1:00:bf:76:18:cb:01:8a:17:a1:39:c5: 96:13:84:c6:62:ee:a6:b5:04:71:8a:90:88:6e:c6:78:ae:d0: 12:1b:ed:c2:95:a7:95:9e:5d:87:89:cf:0c:e2:92:3f:2f:f7: 97:ad:c0:0a:23:9c:89:7f:b9:79:52:09:4b:17:3f:64:77:b3: f9:8f:63:e9:c5:b5:06:9a:b2:46:85:7a:97:95:37:99:de:d8: 8e:b5:e3:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPW4nJpb6Yk3M0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZDdjMWVmMDMtMDYwNC00OGI2LTgyZTEtMjkxNGNkMjVmZmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRTuBX0xT1RG2ROp87n5Qqn7uLI7P2HkDWiY 3BwcT92fS8MGTIz363VTsq2ZatLx76Nk7XoKd+9blb8D67gGsuxXaAeQ5EfOCkAZ YtFokm9t+S79PopW9bGWr/3cJlCa5jpslVxhr56nddV1qvFRx1qsfkLwUi5VpncC wmjnxYh4erPVOEqC6IZRyPAj9lrMzHzVrNlZ7IJMuHUAJZLSN14l+ubwKeOSWgGo /8tgCeniT18ov4veOI/PO9ICWH4Ypazhigi+wdVPEBvTT7A4TfKAxKX2eGcQ+mgh SB+0NczrI/Xp4FTsOH5plCe0Y40SFuk5dvLD3wPx4sWTpsp7SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBl2L4Uv/8cSe/zT9YO+8XtFVN9YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzNlMGMzNGEtZTdmNi0z ZDk4LWEyMGQtMzQxNDEyYTcwM2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkqgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5ZwQt6XXoi9C0C/JO+y6jjrxE/GwfjUnIBxWKZ4qKqJghAaZ+h0ORd FgdlZlqZRxAsaiRGXHTLqgEsgOAhFhATWUFob72shA22ipIa4u+BtKSLYRijwKzq W6CjsV7Bb0dO0MkAwWf/Sqjqen6nlE0naBU61+PeI0tof1LAZydrTYRd8o46hcEH UJdSK8DLAP4Gt8E4r65kpJO2hL1JmIgFx/Gp7//l4PEAv3YYywGKF6E5xZYThMZi 7qa1BHGKkIhuxniu0BIb7cKVp5WeXYeJzwzikj8v95etwAojnIl/uXlSCUsXP2R3 s/mPY+nFtQaaskaFepeVN5ne2I614y8= -----END CERTIFICATE-----Generated at Sat Apr 26 16:10:53 2025 by rpki-client