$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/139dfd56-ae68-327a-b11e-00a97fe9a2ec.roa File: 139dfd56-ae68-327a-b11e-00a97fe9a2ec.roa (raw, json) Hash identifier: SKgvUl8qwwRrEINyoY6zJEu5zh8KhKeCJQNmwUdmpk0= Subject key identifier: 22:0A:BF:80:49:DE:91:0C:7D:9E:DA:F5:B2:8F:45:C8:6F:A9:8B:E3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78509B7AA2E39B1C6743D40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/139dfd56-ae68-327a-b11e-00a97fe9a2ec.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.238.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:09:b7:aa:2e:39:b1:c6:74:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=df50bc02-efa7-49c9-8540-905d3cc404fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6d:9b:29:30:7a:a6:08:f9:8d:d5:6e:e7:22: a9:02:bf:de:4f:5a:b3:cd:ad:89:7c:65:f6:e0:9a: 27:bc:fe:ef:1e:12:ab:ff:30:79:64:68:e9:60:67: 4a:c9:4b:b3:59:47:f3:fa:36:c4:82:85:34:24:a7: 13:9e:91:55:ff:d6:fb:c2:fb:dd:49:50:ab:a6:c0: 12:6d:53:54:3b:a8:97:01:4a:11:4a:8e:69:6b:a7: ac:a5:28:b0:99:37:86:94:5a:80:c6:56:86:d5:41: fe:44:0c:63:c0:3c:a0:77:53:f9:2b:38:0f:3b:64: 4d:67:ae:00:6e:b4:e8:0c:52:cf:bc:39:8f:24:84: 66:a0:78:a6:61:63:cd:fe:61:91:1d:f5:61:15:c1: a1:5c:05:d2:07:44:a3:71:08:8f:1b:b4:7b:36:f7: 46:3d:6c:2e:74:e5:b8:a2:2c:b8:48:96:e1:f5:c9: c5:a3:c4:d0:b6:37:0b:16:9d:73:42:7e:8c:87:c1: 67:32:67:f3:d3:07:d7:eb:5e:c1:38:43:8a:91:40: e0:52:2c:10:a9:92:49:66:8a:a3:a5:b9:69:d8:a4: 41:4e:76:26:ad:e9:75:5a:5d:20:fc:43:25:b2:40: bd:31:44:69:63:f5:3a:97:99:99:69:b9:c6:a5:98: 35:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0A:BF:80:49:DE:91:0C:7D:9E:DA:F5:B2:8F:45:C8:6F:A9:8B:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/139dfd56-ae68-327a-b11e-00a97fe9a2ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:4c:dd:32:b5:bd:01:6b:45:f4:8e:e0:e2:1b:50:26:b2:7d: f3:5b:24:49:16:c7:9d:66:ea:a2:a5:35:06:82:06:e7:c1:ae: 18:be:67:bf:4b:60:28:50:33:61:bb:69:f2:81:e9:b6:59:28: 20:90:35:6f:e7:78:ed:96:49:4c:d6:f9:eb:2d:cf:c7:d2:87: 3f:67:29:3f:60:c2:f9:d4:9d:ab:b8:c0:0b:2e:f9:7e:76:2b: 58:a4:77:e9:7e:1a:3b:9a:07:a3:06:60:a9:74:3b:53:eb:ea: 59:fc:72:9e:1d:35:3e:c3:b0:87:47:32:f8:7b:43:66:3c:d6: db:cf:56:e1:d8:6c:aa:f9:55:e9:cf:9e:6b:7b:96:e6:56:74: f7:e5:82:6e:2b:c8:71:71:b6:0b:2e:48:06:ff:b9:2d:c4:b1: a9:6c:67:14:43:44:53:35:8e:b0:36:29:d2:d4:b2:e4:a6:ba: 30:58:b7:72:06:cf:24:2b:70:c4:46:bd:02:13:7f:d0:eb:5a: 80:7f:0f:34:f4:59:cb:3d:73:e8:7a:84:d7:d1:93:b6:7a:4d: 7b:7b:0d:7c:77:2c:a1:51:20:5f:ba:2c:5b:0d:04:11:21:e2: c4:6e:b1:c4:d6:ea:49:92:8a:86:96:a9:4b:01:9f:0c:9e:3d: 79:70:28:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQm3qi45scZ0PUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZGY1MGJjMDItZWZhNy00OWM5LTg1NDAtOTA1ZDNjYzQwNGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom2bKTB6pgj5jdVu5yKpAr/eT1qzza2JfGX2 4JonvP7vHhKr/zB5ZGjpYGdKyUuzWUfz+jbEgoU0JKcTnpFV/9b7wvvdSVCrpsAS bVNUO6iXAUoRSo5pa6espSiwmTeGlFqAxlaG1UH+RAxjwDygd1P5KzgPO2RNZ64A brToDFLPvDmPJIRmoHimYWPN/mGRHfVhFcGhXAXSB0SjcQiPG7R7NvdGPWwudOW4 oiy4SJbh9cnFo8TQtjcLFp1zQn6Mh8FnMmfz0wfX617BOEOKkUDgUiwQqZJJZoqj pblp2KRBTnYmrel1Wl0g/EMlskC9MURpY/U6l5mZabnGpZg1zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIKv4BJ3pEMfZ7a9bKPRchvqYvjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTM5ZGZkNTYtYWU2OC0z MjdhLWIxMWUtMDBhOTdmZTlhMmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClM3TK1vQFrRfSO4OIbUCayffNbJEkWx51m6qKlNQaCBufBrhi+Z79L YChQM2G7afKB6bZZKCCQNW/neO2WSUzW+estz8fShz9nKT9gwvnUnau4wAsu+X52 K1ikd+l+GjuaB6MGYKl0O1Pr6ln8cp4dNT7DsIdHMvh7Q2Y81tvPVuHYbKr5VenP nmt7luZWdPflgm4ryHFxtgsuSAb/uS3EsalsZxRDRFM1jrA2KdLUsuSmujBYt3IG zyQrcMRGvQITf9DrWoB/DzT0Wcs9c+h6hNfRk7Z6TXt7DXx3LKFRIF+6LFsNBBEh 4sRuscTW6kmSioaWqUsBnwyePXlwKFo= -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:41 2025 by rpki-client