$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a87ca4f-800c-36ee-87ba-31a2d4ac99d2.roa File: 1a87ca4f-800c-36ee-87ba-31a2d4ac99d2.roa (raw, json) Hash identifier: xCCbHBDH9k6tRURCqvBak1KKC+1wix7UhmWgVgBHO9o= Subject key identifier: DD:E1:73:8E:46:1B:38:C8:90:A7:BF:D4:72:52:F8:3F:BE:20:DB:0A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784DF57B90C1444512B6480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a87ca4f-800c-36ee-87ba-31a2d4ac99d2.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.199.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:df:57:b9:0c:14:44:51:2b:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=cb97c030-f937-4cde-a327-43869b7655bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:83:06:af:d5:30:f9:8b:a1:c7:99:ba:b4:c0: 93:66:27:3c:dd:1a:cd:4f:fa:d5:af:1d:47:9b:12: 15:6a:86:a2:ee:99:fc:cb:9e:c1:80:fd:d0:87:9c: 8b:46:88:4a:48:eb:a1:57:10:70:49:63:2e:3a:d5: ca:7b:e2:4b:53:39:c3:d9:ca:0c:9a:73:5c:16:ff: f0:d2:86:a1:16:eb:04:d8:8a:cc:3b:94:6f:ad:5b: a7:6c:ba:8c:58:46:5b:da:db:bf:54:26:c7:58:5f: 76:9e:52:4c:72:88:c7:d5:f4:f2:a7:38:8c:04:64: 92:b2:92:0e:43:3e:a1:ea:b9:e2:c6:5a:ed:6f:69: 2b:b2:16:b2:e8:67:bf:97:c5:a2:7f:63:1d:8d:f3: 17:90:61:0b:5d:f2:a7:be:b9:c1:3b:53:77:6d:ee: 04:06:6f:3a:53:e4:27:42:b2:c0:7d:d9:9d:08:7c: 26:90:82:66:e5:cb:8b:38:c1:cf:63:73:59:3d:e0: 4a:cd:f7:81:bd:b4:a0:67:a1:2a:5b:3b:4d:ad:a7: 34:74:30:02:42:ba:b0:e7:6d:cf:95:36:3b:94:38: fe:e8:38:54:76:b1:ac:98:30:3b:cb:c2:4c:97:53: 7e:38:d5:88:2f:81:2e:53:f9:c9:2e:4c:82:9b:ef: 50:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E1:73:8E:46:1B:38:C8:90:A7:BF:D4:72:52:F8:3F:BE:20:DB:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a87ca4f-800c-36ee-87ba-31a2d4ac99d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.199.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:17:17:70:39:93:cb:9e:fe:fd:06:82:c7:9a:79:8b:37:f7: 6b:1a:9b:b2:e4:ec:a0:e3:0c:d5:33:7e:58:6a:95:c7:b1:27: c4:b5:89:a2:54:61:a3:c3:74:bb:06:dd:8a:62:0e:c1:21:71: c4:ed:9d:33:fc:5d:23:a9:ea:dd:11:7f:6f:54:07:09:9a:fd: 62:55:52:4b:56:3e:68:7e:da:58:62:85:03:0f:34:60:53:e2: 25:76:1a:90:21:6e:60:80:99:57:a5:52:71:b6:b9:1f:3a:9c: 2f:88:eb:62:58:22:5f:57:7f:fa:4e:cf:55:8a:21:f7:e9:2d: 32:35:38:30:57:76:91:b2:82:6e:2f:03:1e:7d:cc:84:67:82: 22:d4:23:ae:a1:f9:51:49:f8:bb:13:37:f6:19:5c:4b:7a:e4: b1:4a:25:4b:45:13:6c:b1:b3:27:e0:d5:02:13:1b:96:79:f5: f8:bd:e5:04:5f:08:d4:92:f9:88:b3:99:0c:fe:dd:24:3f:73: 8c:ef:56:04:af:0a:7d:b0:f2:f9:e8:54:78:4f:dc:99:1e:11: c0:b8:45:8a:b4:dc:f3:dc:35:1b:ad:66:c4:ab:60:dc:b7:b6: 36:f6:28:3a:66:09:8b:0b:67:9f:d8:bd:a2:22:13:74:ca:80: fb:0a:01:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhN9XuQwURFErZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk Y2I5N2MwMzAtZjkzNy00Y2RlLWEzMjctNDM4NjliNzY1NWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIMGr9Uw+Yuhx5m6tMCTZic83RrNT/rVrx1H mxIVaoai7pn8y57BgP3Qh5yLRohKSOuhVxBwSWMuOtXKe+JLUznD2coMmnNcFv/w 0oahFusE2IrMO5RvrVunbLqMWEZb2tu/VCbHWF92nlJMcojH1fTypziMBGSSspIO Qz6h6rnixlrtb2krshay6Ge/l8Wif2MdjfMXkGELXfKnvrnBO1N3be4EBm86U+Qn QrLAfdmdCHwmkIJm5cuLOMHPY3NZPeBKzfeBvbSgZ6EqWztNrac0dDACQrqw523P lTY7lDj+6DhUdrGsmDA7y8JMl1N+ONWIL4EuU/nJLkyCm+9QwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3hc45GGzjIkKe/1HJS+D++INsKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWE4N2NhNGYtODAwYy0z NmVlLTg3YmEtMzFhMmQ0YWM5OWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8cgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwXF3A5k8ue/v0GgseaeYs392sam7Lk7KDjDNUzflhqlcexJ8S1iaJU YaPDdLsG3YpiDsEhccTtnTP8XSOp6t0Rf29UBwma/WJVUktWPmh+2lhihQMPNGBT 4iV2GpAhbmCAmVelUnG2uR86nC+I62JYIl9Xf/pOz1WKIffpLTI1ODBXdpGygm4v Ax59zIRngiLUI66h+VFJ+LsTN/YZXEt65LFKJUtFE2yxsyfg1QITG5Z59fi95QRf CNSS+YizmQz+3SQ/c4zvVgSvCn2w8vnoVHhP3JkeEcC4RYq03PPcNRutZsSrYNy3 tjb2KDpmCYsLZ5/YvaIiE3TKgPsKAT0= -----END CERTIFICATE-----Generated at Sat Apr 26 19:07:54 2025 by rpki-client