$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/792b187a-e7c8-3215-a046-f697fd3e010e.roa File: 792b187a-e7c8-3215-a046-f697fd3e010e.roa (raw, json) Hash identifier: WTsBJ9vvPmIJw9Wnfj75gN4Dg+ofuIFlp+M10BYkBi4= Subject key identifier: 57:46:7A:27:93:7E:D9:C5:63:60:C7:69:00:47:D7:E7:27:E2:B5:BD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584968E597E56F662C8E2DA67600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/792b187a-e7c8-3215-a046-f697fd3e010e.roa Signing time: Fri 04 Apr 2025 02:40:30 +0000 ROA not before: Fri 04 Apr 2025 02:40:30 +0000 ROA not after: Thu 03 Jul 2025 02:40:30 +0000 asID: 15169 IP address blocks: 34.3.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:e5:97:e5:6f:66:2c:8e:2d:a6:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 4 02:40:30 2025 GMT Not After : Jul 3 02:40:30 2025 GMT Subject: CN=290faa12-a7b6-4e09-a01b-d099c97e0e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:52:49:9e:95:67:f6:03:23:ce:2e:39:b9:1e: 55:3e:31:26:d8:a3:b3:37:7c:d9:6f:fe:45:fe:4c: 0f:09:24:27:8b:d2:78:54:1a:bc:c1:5a:53:ec:a8: 81:9e:53:63:7f:7c:5c:0e:77:d3:30:7c:46:a3:ab: 49:dc:40:9d:af:4f:20:40:93:70:4b:e3:7b:9b:15: c2:b7:4b:d0:49:ad:77:a7:d4:86:c8:f2:c0:6b:ea: 16:7f:97:c3:39:dc:d3:fe:28:30:a4:d3:4c:60:80: 01:8a:7b:f3:9e:7d:13:96:84:d4:19:33:a7:00:30: 7b:9d:b2:4a:7c:34:55:f0:72:cc:e9:af:2a:16:69: ee:ef:ba:10:0c:4d:ed:fd:a1:e0:1a:9d:fb:37:79: 04:12:1a:ba:9c:99:c5:25:19:f5:b8:95:76:77:2b: 5b:3b:dd:51:05:e6:a7:22:f9:3a:c3:4d:f8:f6:de: b2:16:0c:02:fa:04:f7:bb:0a:93:ba:ff:6e:ca:a6: 3d:e4:71:76:2a:27:b0:97:bf:d3:1d:3e:74:39:9d: 02:ba:e6:97:18:52:ea:d8:83:12:74:f5:52:5e:30: 0c:38:76:db:84:f5:f7:f6:e7:3d:48:3f:00:28:75: 80:78:18:39:a2:6f:97:90:a4:bd:5d:f8:38:88:7d: c6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:46:7A:27:93:7E:D9:C5:63:60:C7:69:00:47:D7:E7:27:E2:B5:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/792b187a-e7c8-3215-a046-f697fd3e010e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.3.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:91:52:c7:f3:f1:9a:e3:2c:ba:a4:36:05:f6:2c:0e:36:63: a4:85:a8:d2:d4:a2:4f:f4:09:37:e8:db:fa:1f:37:ee:de:84: e0:e4:ff:f5:ec:8a:88:f9:95:63:1f:68:41:62:6d:0d:91:99: d3:0d:cd:35:bd:61:b5:bd:e3:6a:77:b3:56:25:f7:d1:a1:07: c8:43:bd:24:69:d0:81:82:1c:a3:04:e9:4e:79:5c:d2:75:15: c7:aa:dc:a9:6b:61:59:8f:7c:c4:64:99:1c:fa:b8:fa:78:99: 38:2b:cc:7f:19:78:7a:dc:f5:24:1c:2a:2e:c3:d3:af:db:19: 5a:c1:09:86:43:71:08:6d:e5:24:55:59:d2:fe:26:77:bf:06: 20:f8:e7:82:78:fb:37:8f:cc:71:0d:45:c7:3f:cd:d1:4d:64: 72:26:e3:6d:57:dd:fc:d8:49:41:e9:8b:b3:58:0c:53:44:36: 36:b6:ce:d0:a0:5d:53:4f:dc:77:56:41:3f:3d:fe:32:a5:ac: ee:53:c6:2f:cf:6d:42:2a:9e:e1:b5:3a:8f:ca:91:c0:07:08: 12:ac:e0:d0:4b:8d:4a:5e:93:f4:26:58:43:bd:03:8a:60:34: c8:f1:7c:82:e4:f7:0a:d9:ee:a3:6f:e2:7d:ca:b3:98:77:1c: ca:7f:cf:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElo5Zflb2Ysji2mdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQwNDAyNDAzMFoXDTI1MDcwMzAyNDAzMFowLzEtMCsGA1UEAxMk MjkwZmFhMTItYTdiNi00ZTA5LWEwMWItZDA5OWM5N2UwZTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFJJnpVn9gMjzi45uR5VPjEm2KOzN3zZb/5F /kwPCSQni9J4VBq8wVpT7KiBnlNjf3xcDnfTMHxGo6tJ3ECdr08gQJNwS+N7mxXC t0vQSa13p9SGyPLAa+oWf5fDOdzT/igwpNNMYIABinvznn0TloTUGTOnADB7nbJK fDRV8HLM6a8qFmnu77oQDE3t/aHgGp37N3kEEhq6nJnFJRn1uJV2dytbO91RBean Ivk6w0349t6yFgwC+gT3uwqTuv9uyqY95HF2Kiewl7/THT50OZ0CuuaXGFLq2IMS dPVSXjAMOHbbhPX39uc9SD8AKHWAeBg5om+XkKS9Xfg4iH3G0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdGeieTftnFY2DHaQBH1+cn4rW9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzkyYjE4N2EtZTdjOC0z MjE1LWEwNDYtZjY5N2ZkM2UwMTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCIgMUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqRUsfz8ZrjLLqkNgX2LA42Y6SFqNLUok/0CTfo2/ofN+7ehODk//Xs ioj5lWMfaEFibQ2RmdMNzTW9YbW942p3s1Yl99GhB8hDvSRp0IGCHKME6U55XNJ1 Fceq3KlrYVmPfMRkmRz6uPp4mTgrzH8ZeHrc9SQcKi7D06/bGVrBCYZDcQht5SRV WdL+Jne/BiD454J4+zePzHENRcc/zdFNZHIm421X3fzYSUHpi7NYDFNENja2ztCg XVNP3HdWQT89/jKlrO5Txi/PbUIqnuG1Oo/KkcAHCBKs4NBLjUpek/QmWEO9A4pg NMjxfILk9wrZ7qNv4n3Ks5h3HMp/z2Q= -----END CERTIFICATE-----Generated at Thu Apr 10 09:56:28 2025 by rpki-client