$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/e43a7c9e-6e48-36b0-8209-aa1e9e68f275.roa File: e43a7c9e-6e48-36b0-8209-aa1e9e68f275.roa (raw, json) Hash identifier: NMj4/PUFLZV6onkE/c2r9GSH3VJMp/EzORWe7zKFaWk= Subject key identifier: B5:AB:68:FC:35:C5:09:EA:A0:5F:5A:32:67:0D:E1:74:87:2C:4B:0C Certificate issuer: /CN=8ed3050a-4605-4094-b331-bb0f8758defe Certificate serial: 010D0C9F432858498E647E72E411FE5EE124BB80 Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/e43a7c9e-6e48-36b0-8209-aa1e9e68f275.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 400066 IP address blocks: 35.11.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:7e:72:e4:11:fe:5e:e1:24:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=a10f3dd0-c432-497a-9664-818569307c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3d:9a:7f:c1:80:08:37:28:19:92:9c:ec:9e: 95:25:74:c2:a3:92:87:6e:98:eb:82:68:e6:79:ed: 8b:d3:40:53:f9:f1:39:71:7c:68:c3:63:0f:ba:1d: 34:9b:8c:61:4b:11:4b:64:b1:23:f9:fb:ea:ea:26: 69:25:f6:bf:8c:20:39:4f:84:12:82:3e:29:c9:18: 01:54:63:f2:b3:69:ed:42:27:da:ac:21:19:3a:f5: e5:fe:72:84:e4:b9:c1:19:ea:e3:61:cc:6c:c4:68: 2f:97:36:6c:e8:69:1a:8e:7b:94:69:1a:da:2f:ef: 2d:a4:8b:86:d4:d9:78:6e:e3:70:27:9f:6e:0d:19: 05:6b:61:9d:e8:f4:63:dd:d3:a1:7f:00:52:6b:10: 6a:f3:2d:97:47:49:02:79:67:17:0c:e9:89:65:48: 81:ef:d3:50:9c:8f:0b:a7:bd:88:d4:cc:58:09:fe: 75:d3:41:97:40:8c:d0:69:74:7b:58:ba:87:53:ea: db:bd:4a:e4:77:73:cb:d4:50:30:5d:70:43:37:52: fa:46:52:a1:32:21:31:f8:65:bc:50:4f:65:9d:7c: f0:5f:88:a3:de:5e:9d:66:e2:4c:ba:1c:5a:b8:cf: 8c:f7:b3:14:4d:4b:7e:68:b5:6b:c1:a3:1a:de:8e: 98:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AB:68:FC:35:C5:09:EA:A0:5F:5A:32:67:0D:E1:74:87:2C:4B:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/e43a7c9e-6e48-36b0-8209-aa1e9e68f275.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl X509v3 Authority Key Identifier: keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer sbgp-ipAddrBlock: critical IPv4: 35.11.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:e2:eb:21:58:b2:c4:34:2a:f3:4e:ea:f4:5d:26:e4:c8:dc: b9:7c:5c:eb:6d:d0:e7:9b:fa:13:65:86:3e:55:22:af:44:48: 54:5c:0d:05:3f:f2:49:b7:3a:c9:06:3a:d6:88:cb:9d:1e:ab: 26:72:19:a1:d6:2c:87:de:dd:11:de:ba:55:60:ed:95:fc:93: cc:9c:3c:f5:78:38:16:e9:c3:09:1e:66:cd:c6:b6:7f:83:e7: ee:0a:39:07:df:a9:9d:1a:74:18:fc:35:28:87:12:c5:19:82: f9:41:d4:54:04:bd:33:cc:0a:86:68:24:39:56:a1:24:68:0a: a5:85:1b:d2:06:d7:c9:a1:7f:ed:cc:77:af:72:cc:aa:79:f5: 36:81:36:bb:f8:02:3b:7b:ba:77:7d:19:43:53:8d:01:92:57: d2:fa:79:a9:df:ae:05:b9:51:a6:0a:38:a3:c2:3f:57:ae:30: 46:87:ef:36:c7:61:58:52:a9:2e:a4:43:6f:7b:0e:c0:07:43: c0:d5:39:9e:85:05:3e:8a:63:e2:66:ec:83:04:a1:cc:6c:3f: 92:4a:21:84:ca:80:12:28:b8:66:dc:13:05:75:e3:a2:e2:78: 58:bc:9a:09:5c:4a:af:f2:a7:5a:b7:24:94:c2:6c:7e:cd:81: b3:3f:69:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZH5y5BH+XuEku4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVkMzA1MGEtNDYwNS00MDk0LWIzMzEtYmIwZjg3NThk ZWZlMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk YTEwZjNkZDAtYzQzMi00OTdhLTk2NjQtODE4NTY5MzA3YzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj2af8GACDcoGZKc7J6VJXTCo5KHbpjrgmjm ee2L00BT+fE5cXxow2MPuh00m4xhSxFLZLEj+fvq6iZpJfa/jCA5T4QSgj4pyRgB VGPys2ntQifarCEZOvXl/nKE5LnBGerjYcxsxGgvlzZs6GkajnuUaRraL+8tpIuG 1Nl4buNwJ59uDRkFa2Gd6PRj3dOhfwBSaxBq8y2XR0kCeWcXDOmJZUiB79NQnI8L p72I1MxYCf5100GXQIzQaXR7WLqHU+rbvUrkd3PL1FAwXXBDN1L6RlKhMiEx+GW8 UE9lnXzwX4ij3l6dZuJMuhxauM+M97MUTUt+aLVrwaMa3o6YvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWraPw1xQnqoF9aMmcN4XSHLEsMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQz MDUwYS00NjA1LTQwOTQtYjMzMS1iYjBmODc1OGRlZmUvZTQzYTdjOWUtNmU0OC0z NmIwLTgyMDktYWExZTllNjhmMjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkMzA1MGEtNDYwNS00MDk0LWIz MzEtYmIwZjg3NThkZWZlLzhlZDMwNTBhLTQ2MDUtNDA5NC1iMzMxLWJiMGY4NzU4 ZGVmZS5jcmwwHwYDVR0jBBgwFoAUcZ91nrny/TeyT/mL72NxjsBOTA8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQzMDUwYS00NjA1LTQwOTQtYjMzMS1iYjBm ODc1OGRlZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIwtQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEri6yFYssQ0KvNO6vRdJuTI3Ll8XOtt0Oeb+hNlhj5VIq9ESFRcDQU/ 8km3OskGOtaIy50eqyZyGaHWLIfe3RHeulVg7ZX8k8ycPPV4OBbpwwkeZs3Gtn+D 5+4KOQffqZ0adBj8NSiHEsUZgvlB1FQEvTPMCoZoJDlWoSRoCqWFG9IG18mhf+3M d69yzKp59TaBNrv4Ajt7und9GUNTjQGSV9L6eanfrgW5UaYKOKPCP1euMEaH7zbH YVhSqS6kQ297DsAHQ8DVOZ6FBT6KY+Jm7IMEocxsP5JKIYTKgBIouGbcEwV146Li eFi8mglcSq/yp1q3JJTCbH7NgbM/aes= -----END CERTIFICATE-----Generated at Tue Apr 29 19:56:20 2025 by rpki-client