$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/047b4ce5-821a-3341-a4cf-e032e2d4d899.roa File: 047b4ce5-821a-3341-a4cf-e032e2d4d899.roa (raw, json) Hash identifier: xgyCVWVWBpFgw7JPNNwE1RnKCYKWrXIa9KE+3q/4sdQ= Subject key identifier: 52:5C:9E:57:71:9C:94:90:A8:7C:AB:59:CE:98:FA:46:2A:D0:B0:7A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784E3E75F8E03B5431AF9C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/047b4ce5-821a-3341-a4cf-e032e2d4d899.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.236.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e3:e7:5f:8e:03:b5:43:1a:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=695987a0-c703-4ec7-aba5-46cd67bd58e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7d:2f:e5:87:9b:14:20:9c:53:f5:93:59:64: 42:02:a8:81:0d:c4:cb:c9:7f:05:07:c8:eb:5a:21: ac:f4:8f:5d:e0:c4:7d:89:4e:17:31:63:61:5c:2d: d5:fb:ed:11:e3:11:17:89:d1:7e:27:4c:67:d9:43: 7e:6e:7e:16:72:a6:89:58:8b:0c:5f:bd:ab:6f:74: 2f:07:82:1a:82:3a:8c:40:3f:07:3b:65:e8:b6:1c: 9f:3c:21:de:90:50:84:ac:b5:18:2a:8e:ca:18:a5: 15:91:15:53:62:86:af:43:79:bd:f3:20:91:fa:f9: 88:ce:aa:65:03:10:a7:f0:1d:90:66:0b:51:b4:7e: 14:ad:8b:4b:c4:27:88:e0:be:b7:af:1f:d8:33:53: bb:7a:83:08:18:61:5d:02:d2:68:b0:86:ec:b9:ed: 26:c1:f8:77:d8:92:d2:34:e0:52:61:19:55:1f:65: 64:18:f5:17:c6:7f:d8:26:69:77:5c:8d:2a:77:f6: a6:1a:4a:33:a6:62:5a:50:b9:d5:af:73:cf:32:8c: 34:0c:90:a4:cd:8c:57:e7:d5:9c:48:bc:47:2f:74: 14:7d:be:7d:63:fd:cb:8c:7d:db:88:09:20:b7:85: 36:cc:8f:b6:df:61:71:3c:f2:aa:c7:bd:f1:92:15: 87:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5C:9E:57:71:9C:94:90:A8:7C:AB:59:CE:98:FA:46:2A:D0:B0:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/047b4ce5-821a-3341-a4cf-e032e2d4d899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.236.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:03:2d:39:1e:bf:0b:54:ba:1b:b0:29:a8:a0:fd:f8:4b:85: dc:a6:ae:34:8f:51:49:5c:97:f5:3a:b3:8b:d8:df:4f:85:8b: 86:d5:4a:f7:e1:e9:60:87:96:2d:50:66:6b:17:4c:0a:91:c0: f0:46:ee:61:41:28:5d:5c:84:37:c9:bc:14:b8:9d:aa:64:38: 3a:cd:ad:26:b1:1f:8b:99:a4:75:a2:49:c8:fd:18:0d:be:db: be:cc:0b:5e:85:c3:6a:4e:89:fb:49:71:14:1b:f6:18:c0:34: f6:aa:9d:59:aa:87:ae:65:cd:c6:d7:6a:a1:f2:c4:7a:bd:92: 5e:df:cc:63:99:fd:3f:7d:a4:71:d8:50:8b:52:9b:19:71:1c: 50:36:49:02:02:00:19:1d:f5:8b:04:99:f0:56:70:e3:6e:5f: ae:ac:6a:a0:b9:79:8d:b2:cc:6f:d2:e6:b2:47:69:63:b3:d1: 6e:98:8e:50:8a:f7:60:cb:79:ce:87:27:ca:de:fe:b5:5c:50: 5e:ed:61:38:4e:aa:7a:f7:1b:78:aa:4c:69:89:5b:f9:e6:6c: 0e:0e:6b:d0:24:5a:12:d1:e0:aa:10:b8:73:2b:4d:8b:4d:25: 42:20:a8:7d:77:b1:e2:e0:27:7f:3b:4d:0a:d1:3b:d7:65:5f: c3:b6:84:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOPnX44DtUMa+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk Njk1OTg3YTAtYzcwMy00ZWM3LWFiYTUtNDZjZDY3YmQ1OGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm30v5YebFCCcU/WTWWRCAqiBDcTLyX8FB8jr WiGs9I9d4MR9iU4XMWNhXC3V++0R4xEXidF+J0xn2UN+bn4WcqaJWIsMX72rb3Qv B4IagjqMQD8HO2XothyfPCHekFCErLUYKo7KGKUVkRVTYoavQ3m98yCR+vmIzqpl AxCn8B2QZgtRtH4UrYtLxCeI4L63rx/YM1O7eoMIGGFdAtJosIbsue0mwfh32JLS NOBSYRlVH2VkGPUXxn/YJml3XI0qd/amGkozpmJaULnVr3PPMow0DJCkzYxX59Wc SLxHL3QUfb59Y/3LjH3biAkgt4U2zI+232FxPPKqx73xkhWHUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJcnldxnJSQqHyrWc6Y+kYq0LB6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDQ3YjRjZTUtODIxYS0z MzQxLWE0Y2YtZTAzMmUyZDRkODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+zgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8DLTkevwtUuhuwKaig/fhLhdymrjSPUUlcl/U6s4vY30+Fi4bVSvfh 6WCHli1QZmsXTAqRwPBG7mFBKF1chDfJvBS4napkODrNrSaxH4uZpHWiScj9GA2+ 277MC16Fw2pOiftJcRQb9hjANPaqnVmqh65lzcbXaqHyxHq9kl7fzGOZ/T99pHHY UItSmxlxHFA2SQICABkd9YsEmfBWcONuX66saqC5eY2yzG/S5rJHaWOz0W6YjlCK 92DLec6HJ8re/rVcUF7tYThOqnr3G3iqTGmJW/nmbA4Oa9AkWhLR4KoQuHMrTYtN JUIgqH13seLgJ387TQrRO9dlX8O2hMQ= -----END CERTIFICATE-----Generated at Sat Apr 26 19:19:48 2025 by rpki-client