$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d7afd3b-6b77-3b2b-8517-169206df0eb2.roa File: 0d7afd3b-6b77-3b2b-8517-169206df0eb2.roa (raw, json) Hash identifier: 7tYkC+tV9oZfhUBVsV80gHXjBmr2S7PwecBJKskHNiE= Subject key identifier: AA:01:62:8E:34:9A:2E:20:C1:CA:7A:31:76:68:7E:2A:DC:DB:72:F3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78517D78086BB4DCBE92F80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d7afd3b-6b77-3b2b-8517-169206df0eb2.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.198.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:17:d7:80:86:bb:4d:cb:e9:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=e3a2e67a-f6f6-4f1d-b4d7-0094b76d36ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ef:da:49:53:f2:ec:51:ec:bd:46:e6:9c:ab: 60:22:e9:46:dd:4d:20:0a:11:22:26:b2:93:64:89: e1:f6:95:43:c7:15:36:93:54:c3:d6:7c:50:73:fe: 65:83:6f:3e:e2:a7:79:24:8c:6d:de:bf:e9:11:40: 36:fe:09:08:5a:a5:37:d7:2c:fc:e6:41:26:89:b5: 29:d2:f5:7e:e3:d7:d1:27:35:fb:0d:c3:6d:68:7c: 0d:d8:13:77:d5:6b:fa:00:64:1a:ad:52:23:8f:d3: 4c:04:de:cf:34:4a:bf:63:9b:06:e2:a1:ab:dd:4b: 4a:0d:b4:4d:39:ff:18:93:81:a3:71:41:d7:ac:d3: d5:2b:d0:97:63:4d:a6:26:3d:70:a4:5e:d0:bd:e9: e7:10:b0:6d:2f:dc:0b:89:d2:93:50:74:8c:cd:99: 5c:38:0c:cb:ff:e3:bd:fb:91:9f:f7:2c:04:66:69: e9:10:a7:04:e9:57:db:d3:93:6a:4c:35:04:43:04: bc:d6:4b:ff:9d:68:72:39:1d:f7:40:17:f2:82:35: 79:0d:3d:b1:c0:57:9e:57:73:48:6c:da:4a:05:6a: 73:78:a2:b8:32:b0:8b:cf:9d:3a:18:f9:ef:9b:7d: 9b:9a:e9:50:82:d1:31:82:23:ae:80:40:16:7e:e2: 21:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:01:62:8E:34:9A:2E:20:C1:CA:7A:31:76:68:7E:2A:DC:DB:72:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d7afd3b-6b77-3b2b-8517-169206df0eb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.198.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:b3:e3:59:32:5c:63:19:67:2e:95:64:b7:5d:7e:16:08:5a: 15:11:06:6d:5e:55:ce:3f:03:e4:2a:0a:79:4d:0a:08:a7:26: 75:5e:91:1c:54:3e:38:fe:49:32:4e:65:58:ff:55:af:d1:c7: 0b:7e:2f:ea:84:1b:41:7f:37:c6:01:0b:88:16:aa:78:22:48: 67:1c:1e:a5:ee:b9:36:8f:2e:7e:4b:36:10:00:32:c0:0f:54: 08:8f:40:d3:26:9b:08:0b:bb:81:97:df:31:54:2c:33:ec:74: 40:57:8c:33:f5:b6:92:ae:c7:3e:cb:57:dc:ca:ef:54:0f:e8: 3e:d9:d4:d7:82:be:48:b3:d5:e5:e7:75:5a:f1:0a:2b:84:b0: 97:b8:c4:54:9c:58:d1:2f:6d:f8:c2:8e:a7:54:ec:af:04:4e: 0a:9d:b7:dd:5c:f7:0d:93:f4:73:d6:de:72:07:ed:0a:fd:1d: 9e:8b:0a:01:7d:a4:92:af:80:a0:6f:a0:60:a7:3c:28:e3:2e: 23:5b:4e:29:54:89:be:ee:9a:36:25:f6:cb:70:11:07:e4:2f: 9e:65:84:9a:f2:94:eb:ba:a3:2b:21:3f:e5:e2:48:05:ff:3e: b9:ef:52:d7:e6:35:7f:c8:24:df:35:4d:a4:4c:b7:b2:3e:b2: 23:bc:2b:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRfXgIa7TcvpL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZTNhMmU2N2EtZjZmNi00ZjFkLWI0ZDctMDA5NGI3NmQzNmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu/aSVPy7FHsvUbmnKtgIulG3U0gChEiJrKT ZInh9pVDxxU2k1TD1nxQc/5lg28+4qd5JIxt3r/pEUA2/gkIWqU31yz85kEmibUp 0vV+49fRJzX7DcNtaHwN2BN31Wv6AGQarVIjj9NMBN7PNEq/Y5sG4qGr3UtKDbRN Of8Yk4GjcUHXrNPVK9CXY02mJj1wpF7QvennELBtL9wLidKTUHSMzZlcOAzL/+O9 +5Gf9ywEZmnpEKcE6Vfb05NqTDUEQwS81kv/nWhyOR33QBfygjV5DT2xwFeeV3NI bNpKBWpzeKK4MrCLz506GPnvm32bmulQgtExgiOugEAWfuIh+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKoBYo40mi4gwcp6MXZofirc23LzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGQ3YWZkM2ItNmI3Ny0z YjJiLTg1MTctMTY5MjA2ZGYwZWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8ZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCz41kyXGMZZy6VZLddfhYIWhURBm1eVc4/A+QqCnlNCginJnVekRxU Pjj+STJOZVj/Va/Rxwt+L+qEG0F/N8YBC4gWqngiSGccHqXuuTaPLn5LNhAAMsAP VAiPQNMmmwgLu4GX3zFULDPsdEBXjDP1tpKuxz7LV9zK71QP6D7Z1NeCvkiz1eXn dVrxCiuEsJe4xFScWNEvbfjCjqdU7K8ETgqdt91c9w2T9HPW3nIH7Qr9HZ6LCgF9 pJKvgKBvoGCnPCjjLiNbTilUib7umjYl9stwEQfkL55lhJrylOu6oyshP+XiSAX/ PrnvUtfmNX/IJN81TaRMt7I+siO8Kyg= -----END CERTIFICATE-----Generated at Sat Apr 26 16:15:01 2025 by rpki-client