$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21d6567e-9476-36af-9bb9-68d7159db176.roa File: 21d6567e-9476-36af-9bb9-68d7159db176.roa (raw, json) Hash identifier: lKrH4bXPLmmIkhOo2tWkSXTL8OGj49kgP3yBn29oITA= Subject key identifier: D9:B5:11:38:F3:DB:BD:E7:18:C0:98:1C:96:F0:A1:D5:D0:47:E6:E8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784D53DDDE0E8C46E5DE280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21d6567e-9476-36af-9bb9-68d7159db176.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.193.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:d5:3d:dd:e0:e8:c4:6e:5d:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=12a21efd-bc4c-422b-a3f6-2a09463eaad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:36:0c:af:78:ea:44:e8:ec:7e:e5:4b:b0:60: 2b:7d:5d:e9:72:c2:64:c7:45:06:2e:1e:48:75:f6: 1c:03:18:bc:3e:6d:71:9c:13:a5:cc:00:19:bf:4f: 49:b7:f3:ed:55:25:8a:f2:22:0e:a0:8c:32:af:04: e2:a9:92:37:17:47:ef:ea:f2:60:58:cc:c3:19:87: b5:2c:5b:ea:cb:40:f8:12:9d:68:94:d0:0f:36:a0: 5a:45:fd:92:5e:86:74:ea:ab:fc:f4:0f:cf:33:c5: bb:52:38:5b:e6:82:45:98:ce:9d:7b:84:25:3b:e2: fc:79:74:0a:97:5d:d9:79:7f:f9:ea:e9:aa:27:fa: 4b:0c:7b:43:5d:60:6d:c4:6c:11:df:c8:09:37:23: c0:61:0f:54:0e:c4:25:31:27:81:cc:9d:1a:23:32: 2e:43:ba:b0:d2:83:26:10:de:6f:c0:2c:42:3a:c1: 57:75:9a:0a:72:ff:bd:72:29:49:57:71:e3:1e:63: a3:0a:9d:4a:72:50:95:fc:a9:26:ec:b4:d1:72:49: c1:d7:ac:b5:92:2e:d8:8d:c2:fe:d0:63:3f:c8:9d: 3c:56:fb:24:84:f4:4c:46:f4:55:0a:45:5d:fe:ed: b7:63:d4:f9:5b:5e:f7:40:ef:09:12:6b:2b:af:d3: 3c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B5:11:38:F3:DB:BD:E7:18:C0:98:1C:96:F0:A1:D5:D0:47:E6:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21d6567e-9476-36af-9bb9-68d7159db176.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.193.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:e1:b1:cd:b8:3f:5e:3e:a5:27:71:92:98:53:91:4b:0e:20: a5:39:cd:f8:4c:0e:8f:39:6c:47:06:ef:f1:c0:02:cf:e4:f4: ea:7a:86:24:71:d2:e6:e3:03:34:6a:77:4b:e5:05:ab:32:65: 3d:76:bf:78:06:06:cb:ba:2b:71:01:4a:45:67:8d:14:76:dd: 0d:f7:5c:12:68:a6:4d:85:7b:d5:d8:ef:0e:75:9c:e4:bb:2d: e0:4e:5c:7a:ae:dd:87:47:e4:9e:60:27:ff:cb:94:dc:8f:dd: a7:38:64:f7:e0:69:ab:32:96:32:29:1b:ca:74:83:6e:91:af: 49:0d:f6:03:6f:0f:3d:0f:dd:c3:c7:15:14:ad:c6:e1:9c:20: 85:1e:fa:f1:38:8e:31:bf:24:3d:09:64:8f:5c:54:bd:1e:24: 2b:5e:64:09:b4:85:28:00:a7:a3:40:b5:ed:19:7c:a6:10:19: a8:58:52:64:bc:7e:52:04:6f:25:b2:de:55:bc:55:94:9d:51: 2b:09:1f:03:6b:7d:c6:4b:27:f3:27:48:27:9e:90:15:52:4a: d6:d8:67:88:d2:c1:b5:9c:77:1e:6b:de:e7:c2:25:e9:21:0f: c7:96:95:54:bd:5e:7f:eb:5f:0d:cc:4d:b3:6c:3e:6b:87:c2: f7:18:f0:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNU93eDoxG5d4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MTJhMjFlZmQtYmM0Yy00MjJiLWEzZjYtMmEwOTQ2M2VhYWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDYMr3jqROjsfuVLsGArfV3pcsJkx0UGLh5I dfYcAxi8Pm1xnBOlzAAZv09Jt/PtVSWK8iIOoIwyrwTiqZI3F0fv6vJgWMzDGYe1 LFvqy0D4Ep1olNAPNqBaRf2SXoZ06qv89A/PM8W7Ujhb5oJFmM6de4QlO+L8eXQK l13ZeX/56umqJ/pLDHtDXWBtxGwR38gJNyPAYQ9UDsQlMSeBzJ0aIzIuQ7qw0oMm EN5vwCxCOsFXdZoKcv+9cilJV3HjHmOjCp1KclCV/Kkm7LTRcknB16y1ki7YjcL+ 0GM/yJ08VvskhPRMRvRVCkVd/u23Y9T5W173QO8JEmsrr9M8JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNm1ETjz273nGMCYHJbwodXQR+boMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjFkNjU2N2UtOTQ3Ni0z NmFmLTliYjktNjhkNzE1OWRiMTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8EQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXhsc24P14+pSdxkphTkUsOIKU5zfhMDo85bEcG7/HAAs/k9Op6hiRx 0ubjAzRqd0vlBasyZT12v3gGBsu6K3EBSkVnjRR23Q33XBJopk2Fe9XY7w51nOS7 LeBOXHqu3YdH5J5gJ//LlNyP3ac4ZPfgaasyljIpG8p0g26Rr0kN9gNvDz0P3cPH FRStxuGcIIUe+vE4jjG/JD0JZI9cVL0eJCteZAm0hSgAp6NAte0ZfKYQGahYUmS8 flIEbyWy3lW8VZSdUSsJHwNrfcZLJ/MnSCeekBVSStbYZ4jSwbWcdx5r3ufCJekh D8eWlVS9Xn/rXw3MTbNsPmuHwvcY8EQ= -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:42 2025 by rpki-client