$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c3b9d08-1f2f-3444-92fb-bccd1e76e1a9.roa File: 2c3b9d08-1f2f-3444-92fb-bccd1e76e1a9.roa (raw, json) Hash identifier: JpJlHyS6Q4pVZhk7h5lZ9OrfGJ84+btnMgxRkd5fo44= Subject key identifier: A1:E3:E0:FA:AF:EE:DA:99:E3:11:22:01:BA:BF:B9:F0:A1:6E:4F:50 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784E4182BC9A5CF8A5DD9C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c3b9d08-1f2f-3444-92fb-bccd1e76e1a9.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.204.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e4:18:2b:c9:a5:cf:8a:5d:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=47310e62-012f-4a39-a33f-0ca188c9ce77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e8:af:a3:3e:c6:69:1b:53:5d:c0:93:68:ac: 0e:66:b6:0e:b7:a0:59:d9:33:2a:d5:e9:9e:87:76: 09:61:da:21:80:5d:a7:6e:de:0d:c2:c7:23:3d:17: 2d:92:8b:27:86:5d:8f:48:50:5a:41:bf:ce:fd:79: 83:a8:e5:5b:29:8c:33:2b:3f:d3:ab:be:3c:12:ef: e9:db:56:03:5c:a2:3d:90:40:94:93:cb:67:2a:92: 6a:e4:3b:19:e0:82:04:41:82:36:3e:af:72:76:8b: b1:ce:fa:51:ab:68:00:6f:fa:f9:21:39:ad:40:a0: ea:f2:5d:ec:fc:88:05:52:e8:fc:6d:30:ff:41:2f: 6d:76:c0:a3:dd:ca:dd:5a:b9:5a:61:b0:b8:f5:72: 35:d2:31:55:9b:58:8a:84:06:a0:0f:ca:f7:85:97: f5:35:be:5e:9f:7b:09:ad:cc:18:04:55:8c:8a:e1: f4:ca:5d:7d:c4:e6:e2:96:91:2c:e5:4c:57:ce:f5: 05:f3:f0:c4:05:11:de:0f:8e:25:ba:0f:df:fa:a2: 32:68:d6:ed:3a:5e:3e:e0:2a:81:68:bc:46:1f:a0: aa:e4:f7:37:09:44:8b:1f:f7:fd:81:2c:0a:90:80: 5c:41:3c:bd:0a:27:42:f9:47:bd:b8:f9:57:59:21: 60:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E3:E0:FA:AF:EE:DA:99:E3:11:22:01:BA:BF:B9:F0:A1:6E:4F:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2c3b9d08-1f2f-3444-92fb-bccd1e76e1a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.204.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:2f:9c:8a:3e:fb:02:c2:fb:28:e6:45:c8:90:e9:2a:2c:c3: da:98:76:82:0c:b1:30:80:42:7e:e2:a4:3f:8b:8a:6c:c7:03: 86:1a:ac:d9:ee:d2:cc:e9:ed:c2:5e:46:51:1c:94:54:b9:d0: 54:7f:fd:c2:17:00:d4:70:05:fd:81:53:99:b5:79:da:ba:52: fa:4b:fe:97:b2:79:b9:6c:58:03:85:25:2e:e6:14:68:6e:fb: 28:bd:9a:bb:9c:e2:ee:54:9b:dd:5c:fb:a4:7a:e1:7d:e8:07: 59:38:00:bc:fa:9f:7d:7f:cd:95:e4:42:39:03:58:de:3f:0a: e7:1d:db:a6:95:99:03:ba:98:ae:37:b5:8e:a9:b8:ea:47:52: 29:67:02:44:f1:6a:6a:51:6a:91:92:3c:da:d8:2e:73:bb:c0: 58:a4:76:81:43:0f:2b:90:37:ed:a2:53:94:da:bb:13:b2:fe: d4:68:53:70:da:3c:36:79:6e:52:34:9f:d0:01:0e:27:37:52: 68:49:e5:52:b5:92:e7:3f:6f:74:78:f6:b7:2d:27:99:c9:41: 33:b0:c4:fa:0d:a3:97:f4:d5:9f:41:ae:49:0b:14:c3:7c:f5: 53:f9:c2:3e:73:f8:c2:35:7b:92:33:ad:15:36:77:3d:93:8c: 2c:1d:55:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOQYK8mlz4pd2cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NDczMTBlNjItMDEyZi00YTM5LWEzM2YtMGNhMTg4YzljZTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+ivoz7GaRtTXcCTaKwOZrYOt6BZ2TMq1eme h3YJYdohgF2nbt4NwscjPRctkosnhl2PSFBaQb/O/XmDqOVbKYwzKz/Tq748Eu/p 21YDXKI9kECUk8tnKpJq5DsZ4IIEQYI2Pq9ydouxzvpRq2gAb/r5ITmtQKDq8l3s /IgFUuj8bTD/QS9tdsCj3crdWrlaYbC49XI10jFVm1iKhAagD8r3hZf1Nb5en3sJ rcwYBFWMiuH0yl19xObilpEs5UxXzvUF8/DEBRHeD44lug/f+qIyaNbtOl4+4CqB aLxGH6Cq5Pc3CUSLH/f9gSwKkIBcQTy9CidC+Ue9uPlXWSFg+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHj4Pqv7tqZ4xEiAbq/ufChbk9QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmMzYjlkMDgtMWYyZi0z NDQ0LTkyZmItYmNjZDFlNzZlMWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8wgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwvnIo++wLC+yjmRciQ6Sosw9qYdoIMsTCAQn7ipD+LimzHA4YarNnu 0szp7cJeRlEclFS50FR//cIXANRwBf2BU5m1edq6UvpL/peyeblsWAOFJS7mFGhu +yi9mruc4u5Um91c+6R64X3oB1k4ALz6n31/zZXkQjkDWN4/Cucd26aVmQO6mK43 tY6puOpHUilnAkTxampRapGSPNrYLnO7wFikdoFDDyuQN+2iU5TauxOy/tRoU3Da PDZ5blI0n9ABDic3UmhJ5VK1kuc/b3R49rctJ5nJQTOwxPoNo5f01Z9BrkkLFMN8 9VP5wj5z+MI1e5IzrRU2dz2TjCwdVXU= -----END CERTIFICATE-----Generated at Sat Apr 26 15:52:22 2025 by rpki-client