$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20ef04f8-af07-30e0-98d3-0f5600820e98.roa File: 20ef04f8-af07-30e0-98d3-0f5600820e98.roa (raw, json) Hash identifier: gSKs9ChjZvYThT1mqW9oTymzvxgpzFpcQ8Fcy73Kttc= Subject key identifier: 44:62:AE:B1:77:FF:1A:35:16:49:39:11:50:36:E9:C4:AC:21:A5:F5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785390D44C12254584D7A80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20ef04f8-af07-30e0-98d3-0f5600820e98.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.200.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:39:0d:44:c1:22:54:58:4d:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=8f575f8b-b14e-4eb8-98aa-ab8ba4c53be9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:84:84:c9:98:86:01:10:93:12:42:92:4e:7d: bb:98:a1:1b:57:a2:e0:2e:85:8e:18:7f:0a:2a:be: af:3b:11:95:03:da:77:ce:ac:7e:93:4e:c6:83:63: 17:61:b8:08:e5:45:29:ae:df:67:c1:40:d6:9b:cf: c4:a3:b1:49:49:6f:00:9a:56:df:51:9f:b0:22:7b: 81:fc:76:ab:83:6f:ad:de:d9:4b:3c:26:12:bc:60: 96:b1:4f:19:37:bb:0c:9f:f9:13:13:3a:aa:41:dd: a1:23:11:47:1d:c7:02:0e:52:36:44:e8:d9:38:d8: dc:8a:35:10:50:b4:38:a5:51:93:fc:82:30:c8:84: 68:09:d6:6e:80:74:41:1f:e6:3a:92:25:4c:9e:9c: 1e:34:e1:cc:45:ea:44:b1:6b:1b:a4:80:ae:f4:71: 54:49:6b:79:dc:f7:d3:d0:12:da:f5:cb:50:f5:f3: b8:de:72:d4:c5:d0:24:e5:b2:df:c2:2b:93:db:e7: 5a:08:8e:c8:3c:c2:8e:f6:a1:ef:50:76:76:71:a4: a7:8b:09:14:e7:6e:cd:57:73:16:3e:35:05:51:70: f9:7c:cb:66:5d:7c:9f:70:03:13:09:78:58:03:b0: 25:35:b8:7a:96:39:ab:cc:c0:cf:61:b0:d6:39:f5: 7d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:62:AE:B1:77:FF:1A:35:16:49:39:11:50:36:E9:C4:AC:21:A5:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20ef04f8-af07-30e0-98d3-0f5600820e98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.200.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:4b:dc:2d:ea:20:5c:90:94:6b:86:45:c1:1d:64:82:18:8c: 5f:ad:06:35:1f:22:83:84:03:72:6f:b8:06:37:4a:bc:56:3b: 03:63:e1:5f:80:4d:c7:3e:84:7f:40:aa:0e:af:7b:6d:7f:dd: 9c:c8:51:1d:39:4a:fc:17:e3:e3:02:69:8e:cd:11:55:96:50: a3:7f:57:02:b9:ac:a9:7a:1e:ee:9d:b8:94:13:3f:c1:41:62: 4f:bf:0c:2a:37:5e:92:dd:c6:1f:6d:ba:16:75:25:11:08:57: 68:c1:13:f2:c8:9b:68:aa:98:36:0a:26:71:62:7a:84:9b:99: 30:18:ac:69:81:ef:fd:49:4e:59:d9:be:e3:43:04:94:59:4e: 93:cb:e6:e8:5d:52:30:74:6d:f0:d9:ac:32:61:e0:1d:71:16: 0a:c3:24:38:e9:a5:eb:03:e5:a9:1c:4c:54:9e:27:0f:64:8c: 39:30:b6:ee:0e:2a:7f:c2:87:f1:6a:eb:f7:6e:af:de:ad:f4: 9b:9a:e6:0b:3f:90:40:2b:f7:a5:27:1a:29:2c:ae:44:cc:78: 41:9b:e8:f7:c5:ce:2d:bb:ab:34:e8:8d:67:bf:b8:d8:5c:e7: 96:48:c2:13:69:5b:4b:c2:f9:e3:43:41:24:99:99:d4:87:9b: 06:9c:58:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTkNRMEiVFhNeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OGY1NzVmOGItYjE0ZS00ZWI4LTk4YWEtYWI4YmE0YzUzYmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuISEyZiGARCTEkKSTn27mKEbV6LgLoWOGH8K Kr6vOxGVA9p3zqx+k07Gg2MXYbgI5UUprt9nwUDWm8/Eo7FJSW8AmlbfUZ+wInuB /Harg2+t3tlLPCYSvGCWsU8ZN7sMn/kTEzqqQd2hIxFHHccCDlI2ROjZONjcijUQ ULQ4pVGT/IIwyIRoCdZugHRBH+Y6kiVMnpweNOHMRepEsWsbpICu9HFUSWt53PfT 0BLa9ctQ9fO43nLUxdAk5bLfwiuT2+daCI7IPMKO9qHvUHZ2caSniwkU527NV3MW PjUFUXD5fMtmXXyfcAMTCXhYA7AlNbh6ljmrzMDPYbDWOfV90QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERirrF3/xo1Fkk5EVA26cSsIaX1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjBlZjA0ZjgtYWYwNy0z MGUwLTk4ZDMtMGY1NjAwODIwZTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8iAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZL3C3qIFyQlGuGRcEdZIIYjF+tBjUfIoOEA3JvuAY3SrxWOwNj4V+A Tcc+hH9Aqg6ve21/3ZzIUR05SvwX4+MCaY7NEVWWUKN/VwK5rKl6Hu6duJQTP8FB Yk+/DCo3XpLdxh9tuhZ1JREIV2jBE/LIm2iqmDYKJnFieoSbmTAYrGmB7/1JTlnZ vuNDBJRZTpPL5uhdUjB0bfDZrDJh4B1xFgrDJDjppesD5akcTFSeJw9kjDkwtu4O Kn/Ch/Fq6/dur96t9Jua5gs/kEAr96UnGiksrkTMeEGb6PfFzi27qzTojWe/uNhc 55ZIwhNpW0vC+eNDQSSZmdSHmwacWH4= -----END CERTIFICATE-----Generated at Sat Apr 26 19:12:40 2025 by rpki-client