$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/12c52561-a470-3c72-b6ab-a7363cbacf79.roa File: 12c52561-a470-3c72-b6ab-a7363cbacf79.roa (raw, json) Hash identifier: 1Pi7U1v4aeYTnAwPN2soVkgJuE1TVd83M4J+AaYomLg= Subject key identifier: 07:0D:39:B6:D1:0B:DC:31:A3:B2:D6:EA:13:62:B8:CA:E6:5D:38:FA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784F23319CDFD1BD9AF2040 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/12c52561-a470-3c72-b6ab-a7363cbacf79.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.222.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:f2:33:19:cd:fd:1b:d9:af:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=b1a69477-0849-43a9-a485-05dd9b8c930d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3d:62:3f:81:ed:a5:e2:0d:ee:06:9b:7a:5d: 07:cb:66:c4:4b:42:01:5c:41:2d:7c:43:0f:a2:ac: 24:d0:26:e8:99:2c:d1:8e:fa:e0:76:4f:7f:67:34: f2:9c:8d:25:fa:cc:ac:de:8c:40:a5:35:15:dc:37: c3:98:d0:d9:6d:f4:c0:7f:5a:83:cb:40:0b:5c:82: 36:e6:a1:a0:b9:c1:d3:df:3d:d7:dd:c4:86:02:dd: 7b:e7:6f:4d:e9:02:c8:36:9d:6b:c1:8f:e5:d3:10: f1:f1:94:23:19:85:65:d6:7b:13:a9:66:64:76:b7: 0d:da:ab:41:f0:06:90:48:54:d3:ec:6a:ef:9e:2b: 0d:88:9c:2f:57:1b:17:08:3e:88:f7:dc:c8:54:ea: 02:49:5b:8d:80:8c:c8:d7:c1:2b:b2:1b:bd:65:93: 64:56:d7:29:60:70:49:ee:ab:51:be:f1:e2:54:d3: 1e:12:ce:6f:89:17:8a:a7:c8:9d:60:1d:12:75:88: 7a:6f:fe:98:57:47:5c:0b:f4:0e:df:93:1d:2c:11: 2f:1c:62:fa:ae:30:61:20:41:3a:b7:f1:77:91:51: 88:61:56:0d:b1:5d:be:df:e6:fd:e4:5c:0c:20:7f: 7f:ec:a4:d0:1d:65:6f:b6:f2:76:0c:21:b7:96:6e: a8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:0D:39:B6:D1:0B:DC:31:A3:B2:D6:EA:13:62:B8:CA:E6:5D:38:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/12c52561-a470-3c72-b6ab-a7363cbacf79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.222.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:2c:36:a2:c1:c8:c7:7c:7b:7e:53:c8:7e:79:b7:b6:54:28: cc:fb:2a:30:d9:ca:95:b8:1c:72:59:17:c5:24:22:2d:fb:1f: 0f:8b:cc:ce:87:4a:1a:42:ff:ae:53:2c:8f:38:5b:51:32:d2: ea:96:9b:88:aa:49:ce:4f:c2:4e:f9:99:56:be:50:6a:13:2a: 71:89:56:b4:aa:84:2e:3b:e9:67:49:c3:3a:24:9f:13:cb:d4: 96:00:61:ca:23:a5:e7:24:1f:b2:be:e2:ee:fe:42:ca:20:c6: c8:0b:85:a5:9e:51:9f:cb:ff:b0:55:ec:9c:bb:11:43:4c:10: 0a:a8:4b:fb:0d:1f:14:76:d1:65:4d:f7:45:03:49:07:b9:d4: 50:e0:b6:ec:e2:98:f6:14:97:08:99:0c:3d:a2:b1:32:d6:1a: 09:98:a3:59:c4:dd:52:00:46:15:93:20:12:22:20:59:f6:65: b0:08:dc:59:ce:38:39:ac:a3:ed:aa:94:50:80:bb:73:e4:09: f4:f4:68:34:5e:21:dd:f5:06:f0:50:3f:d6:99:69:7a:8c:16: d9:95:42:24:1e:a2:a5:98:13:89:01:46:c3:28:46:37:6a:ea: 94:75:d3:19:49:8a:02:a2:74:5a:e6:fd:75:96:1c:6c:ba:53: 50:a9:7f:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPIzGc39G9mvIEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YjFhNjk0NzctMDg0OS00M2E5LWE0ODUtMDVkZDliOGM5MzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz1iP4HtpeIN7gabel0Hy2bES0IBXEEtfEMP oqwk0CbomSzRjvrgdk9/ZzTynI0l+sys3oxApTUV3DfDmNDZbfTAf1qDy0ALXII2 5qGgucHT3z3X3cSGAt17529N6QLINp1rwY/l0xDx8ZQjGYVl1nsTqWZkdrcN2qtB 8AaQSFTT7GrvnisNiJwvVxsXCD6I99zIVOoCSVuNgIzI18Ershu9ZZNkVtcpYHBJ 7qtRvvHiVNMeEs5viReKp8idYB0SdYh6b/6YV0dcC/QO35MdLBEvHGL6rjBhIEE6 t/F3kVGIYVYNsV2+3+b95FwMIH9/7KTQHWVvtvJ2DCG3lm6oXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAcNObbRC9wxo7LW6hNiuMrmXTj6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTJjNTI1NjEtYTQ3MC0z YzcyLWI2YWItYTczNjNjYmFjZjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI97gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIsNqLByMd8e35TyH55t7ZUKMz7KjDZypW4HHJZF8UkIi37Hw+LzM6H ShpC/65TLI84W1Ey0uqWm4iqSc5Pwk75mVa+UGoTKnGJVrSqhC476WdJwzoknxPL 1JYAYcojpeckH7K+4u7+QsogxsgLhaWeUZ/L/7BV7Jy7EUNMEAqoS/sNHxR20WVN 90UDSQe51FDgtuzimPYUlwiZDD2isTLWGgmYo1nE3VIARhWTIBIiIFn2ZbAI3FnO ODmso+2qlFCAu3PkCfT0aDReId31BvBQP9aZaXqMFtmVQiQeoqWYE4kBRsMoRjdq 6pR10xlJigKidFrm/XWWHGy6U1Cpf4g= -----END CERTIFICATE-----Generated at Sat Apr 26 16:11:52 2025 by rpki-client