$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfeff7c2-1571-3de1-9bc8-5b243fb23c75.roa File: cfeff7c2-1571-3de1-9bc8-5b243fb23c75.roa (raw, json) Hash identifier: HV9axV5BvFmbPQ9NIw1l48gjX1ZKNjUDUC8OliVA5wI= Subject key identifier: 16:60:06:F5:82:79:23:67:77:D7:AB:FC:99:04:2E:ED:49:DC:79:EE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7853F5F6FCD1B73730EA340 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfeff7c2-1571-3de1-9bc8-5b243fb23c75.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 34.74.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:3f:5f:6f:cd:1b:73:73:0e:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=3be4b8b9-c3ca-4962-b835-334172fddedf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:68:4c:3a:70:57:19:9f:28:78:86:cd:d2:55: 8a:15:a0:52:fe:cf:19:10:13:d8:18:92:f7:35:d2: 3f:6c:1a:3b:59:c5:b5:f9:21:85:18:5c:23:3d:b1: 6e:cc:be:9a:7a:e9:56:f8:01:c5:d8:0f:76:36:f4: a0:f3:25:0a:e5:b1:0a:76:de:fc:df:38:0c:a7:25: 25:21:87:10:82:94:e6:a0:9b:fd:18:77:33:20:2d: e2:4b:fe:a9:c7:f0:29:be:ef:17:62:fd:e0:5c:6b: ed:06:94:61:d9:12:b3:52:80:88:97:db:df:d0:3f: 52:87:7b:cb:75:ff:b9:c7:2c:d3:58:39:8f:76:b8: 8a:01:64:c0:95:51:0f:80:fc:ee:ea:da:b0:e5:13: 14:b1:f7:8b:f3:52:4f:72:47:5e:d4:ec:32:91:0e: f3:0e:30:c8:2a:37:b6:1f:fb:8d:3b:3a:6d:67:6e: b4:82:07:c5:1f:5d:2e:b7:9c:92:60:ae:18:de:10: a2:82:70:83:d6:02:ab:22:a1:f1:ec:62:49:99:b7: 50:48:84:1e:17:fe:0b:65:48:cd:67:74:b8:aa:e9: d7:1e:35:f3:51:be:bb:3e:f4:a3:3a:41:81:37:50: 0b:ba:87:eb:24:6c:b3:b2:55:21:d8:a5:80:82:f9: 86:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:60:06:F5:82:79:23:67:77:D7:AB:FC:99:04:2E:ED:49:DC:79:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfeff7c2-1571-3de1-9bc8-5b243fb23c75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.74.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:ed:8b:ee:2a:41:b2:33:62:4b:c2:42:24:af:8d:60:08:9e: 67:1f:67:7c:c2:5b:eb:7c:6b:4c:a1:20:b1:6c:44:84:66:53: d2:71:0b:6b:ff:31:e7:33:f7:bd:e4:dd:38:1f:a2:8f:0d:84: c0:58:fa:1e:7d:cf:5c:c8:b1:78:dc:68:77:a0:f8:a4:ea:44: c1:d4:6c:0b:d0:32:c4:be:53:45:f3:9a:10:cc:0e:bd:2a:5f: f7:a7:2f:57:fe:59:63:a2:d3:f2:b9:38:b3:e8:7a:7a:fc:a5: fb:2e:99:c5:e4:a8:5c:cb:b6:3f:7f:e0:13:1a:a9:e8:96:6e: 09:ef:36:17:1e:00:42:29:bc:74:76:1e:69:14:41:1d:7c:e7: a5:d2:e1:12:f2:33:fe:e5:7e:0d:aa:fa:1f:4f:91:a8:b2:ce: f2:e1:8f:c3:ce:63:1d:62:50:77:1c:35:a1:b9:82:75:03:5a: 85:49:d3:df:a0:13:5a:3b:c2:75:f0:60:b3:9c:3b:67:e9:1d: 10:64:dd:ad:d7:b4:89:a5:11:34:5a:78:9a:44:00:69:77:bc: cc:4d:e0:9f:29:1f:fc:d8:17:ff:0a:9e:68:a4:49:05:d5:bc: 25:c1:76:a3:c8:45:9f:9f:7c:ae:1d:02:77:96:3b:c4:10:57: 44:13:85:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhT9fb80bc3MOo0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk M2JlNGI4YjktYzNjYS00OTYyLWI4MzUtMzM0MTcyZmRkZWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWhMOnBXGZ8oeIbN0lWKFaBS/s8ZEBPYGJL3 NdI/bBo7WcW1+SGFGFwjPbFuzL6aeulW+AHF2A92NvSg8yUK5bEKdt783zgMpyUl IYcQgpTmoJv9GHczIC3iS/6px/Apvu8XYv3gXGvtBpRh2RKzUoCIl9vf0D9Sh3vL df+5xyzTWDmPdriKAWTAlVEPgPzu6tqw5RMUsfeL81JPckde1OwykQ7zDjDIKje2 H/uNOzptZ260ggfFH10ut5ySYK4Y3hCignCD1gKrIqHx7GJJmbdQSIQeF/4LZUjN Z3S4qunXHjXzUb67PvSjOkGBN1ALuofrJGyzslUh2KWAgvmG2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZgBvWCeSNnd9er/JkELu1J3HnuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2ZlZmY3YzItMTU3MS0z ZGUxLTliYzgtNWIyNDNmYjIzYzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvti+4qQbIzYkvCQiSvjWAInmcfZ3zCW+t8a0yhILFsRIRmU9JxC2v/ Mecz973k3Tgfoo8NhMBY+h59z1zIsXjcaHeg+KTqRMHUbAvQMsS+U0XzmhDMDr0q X/enL1f+WWOi0/K5OLPoenr8pfsumcXkqFzLtj9/4BMaqeiWbgnvNhceAEIpvHR2 HmkUQR1856XS4RLyM/7lfg2q+h9PkaiyzvLhj8POYx1iUHccNaG5gnUDWoVJ09+g E1o7wnXwYLOcO2fpHRBk3a3XtImlETRaeJpEAGl3vMxN4J8pH/zYF/8KnmikSQXV vCXBdqPIRZ+ffK4dAneWO8QQV0QThW4= -----END CERTIFICATE-----Generated at Sat Apr 26 19:12:48 2025 by rpki-client