$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/27200ef5-9ac9-35ef-8634-1925d504116e.roa File: 27200ef5-9ac9-35ef-8634-1925d504116e.roa (raw, json) Hash identifier: G7UNH2n5JFCeUg8xjITZwaa2+7p8bfmkcA6H8AGmrtc= Subject key identifier: 91:56:E6:C6:D5:B4:E7:BB:EB:8D:83:F9:C1:57:F5:C3:C3:8C:09:19 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784E2FFE9EC267100203400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/27200ef5-9ac9-35ef-8634-1925d504116e.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.228.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e2:ff:e9:ec:26:71:00:20:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=7b61be7f-9a14-4f47-917f-eaeda69ffb2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e8:5a:10:f8:ed:c2:43:b7:b1:3f:9a:ef:89: cd:d2:ac:47:ce:54:6a:23:41:2d:1c:3b:81:1f:4d: 8a:cd:e1:3e:30:9c:e9:d9:25:5f:87:3a:70:9f:ab: 60:f7:5d:05:ae:3e:ab:f0:7c:23:c4:5d:32:8a:10: 2e:2c:ac:21:5c:dc:74:37:fa:2d:3c:ef:05:a0:be: 68:cb:33:87:b7:5f:dd:4d:18:f0:99:fb:cf:bb:39: 6a:2b:3b:b3:34:d0:f5:09:ad:88:3e:c0:38:7b:8e: b1:9f:b9:c0:68:ce:df:84:52:ec:84:19:99:6b:47: 77:29:ed:1c:eb:8f:ed:97:d5:d9:c7:f7:05:fa:ff: 4f:42:eb:46:a0:f6:57:b4:1a:fe:5b:22:cb:32:ba: f0:e2:04:7e:d3:5f:d9:c5:92:9a:1d:90:d4:74:8e: aa:36:66:8d:1d:45:bc:a6:38:26:e4:3b:18:5b:34: f7:34:1a:37:81:10:4a:70:f6:4b:1a:c7:62:bc:4b: 73:0d:df:af:f5:53:11:09:2b:08:9e:17:97:46:55: 0a:90:f1:79:f5:bc:d2:88:67:6f:4c:32:7f:d0:8a: 01:eb:b6:6e:76:ff:3f:94:03:5f:c8:c2:ed:e5:58: 5f:44:85:47:1c:10:8c:1e:98:26:c8:d2:bc:d6:b1: ad:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:56:E6:C6:D5:B4:E7:BB:EB:8D:83:F9:C1:57:F5:C3:C3:8C:09:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/27200ef5-9ac9-35ef-8634-1925d504116e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.228.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:85:d5:7f:20:55:e3:55:d8:c9:2f:ab:cc:59:ee:d2:98:5a: 86:a6:95:dc:84:46:7a:82:db:17:ae:71:8f:81:c6:95:d4:32: 90:32:51:70:6d:0f:f6:3c:bd:7a:55:35:49:1d:72:ee:68:89: b8:18:08:d5:78:df:68:3a:c9:25:e3:66:08:4b:dc:25:c0:01: bc:56:8d:d2:7f:60:80:ce:10:fa:5f:e7:d9:6e:11:2e:b2:6c: 50:49:77:a2:bb:e1:1d:81:79:ac:17:e1:eb:b3:79:2e:ed:d9: 1d:f0:2c:b6:18:d7:91:61:11:57:b3:3c:b4:39:85:90:b0:13: 27:14:ee:12:5c:f0:f7:1c:28:c8:ba:cf:70:7d:48:36:d3:b0: 4d:65:33:58:d8:5a:9d:e8:a2:d0:60:28:da:9d:40:17:11:76: ed:2e:63:33:0e:21:7b:9e:0a:69:ba:0e:94:93:72:44:13:97: 8d:3a:ff:b4:b6:d8:01:81:4c:05:22:3d:22:dc:d7:ba:eb:f5: e3:be:18:a5:53:ed:49:86:cd:11:5c:b6:7b:2f:2d:61:d5:8f: 16:1f:99:41:e0:6b:a8:1c:01:2f:d0:cd:1e:34:c6:72:f0:72: a3:fa:8f:b5:7d:82:4f:ce:90:7b:d2:ee:3c:e6:73:d4:ae:d0: c8:4c:59:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOL/6ewmcQAgNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk N2I2MWJlN2YtOWExNC00ZjQ3LTkxN2YtZWFlZGE2OWZmYjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOhaEPjtwkO3sT+a74nN0qxHzlRqI0EtHDuB H02KzeE+MJzp2SVfhzpwn6tg910Frj6r8HwjxF0yihAuLKwhXNx0N/otPO8FoL5o yzOHt1/dTRjwmfvPuzlqKzuzNND1Ca2IPsA4e46xn7nAaM7fhFLshBmZa0d3Ke0c 64/tl9XZx/cF+v9PQutGoPZXtBr+WyLLMrrw4gR+01/ZxZKaHZDUdI6qNmaNHUW8 pjgm5DsYWzT3NBo3gRBKcPZLGsdivEtzDd+v9VMRCSsInheXRlUKkPF59bzSiGdv TDJ/0IoB67Zudv8/lANfyMLt5VhfRIVHHBCMHpgmyNK81rGtcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFW5sbVtOe7642D+cFX9cPDjAkZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjcyMDBlZjUtOWFjOS0z NWVmLTg2MzQtMTkyNWQ1MDQxMTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+RwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWF1X8gVeNV2Mkvq8xZ7tKYWoamldyERnqC2xeucY+BxpXUMpAyUXBt D/Y8vXpVNUkdcu5oibgYCNV432g6ySXjZghL3CXAAbxWjdJ/YIDOEPpf59luES6y bFBJd6K74R2BeawX4euzeS7t2R3wLLYY15FhEVezPLQ5hZCwEycU7hJc8PccKMi6 z3B9SDbTsE1lM1jYWp3ootBgKNqdQBcRdu0uYzMOIXueCmm6DpSTckQTl406/7S2 2AGBTAUiPSLc17rr9eO+GKVT7UmGzRFctnsvLWHVjxYfmUHga6gcAS/QzR40xnLw cqP6j7V9gk/OkHvS7jzmc9Su0MhMWSg= -----END CERTIFICATE-----Generated at Sat Apr 26 14:59:13 2025 by rpki-client