$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/319493ca-fa32-37d3-9616-0af2c399a14c.roa File: 319493ca-fa32-37d3-9616-0af2c399a14c.roa (raw, json) Hash identifier: k5/UFl7EGWhOjz3zcGFBKIWmOw30tMt1JbKk5cHgAFo= Subject key identifier: 12:7B:67:35:E8:97:F4:B5:CE:D1:9D:C5:5B:DB:54:AA:9C:06:A2:69 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784D0D395B199C33D0959C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/319493ca-fa32-37d3-9616-0af2c399a14c.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.239.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:d0:d3:95:b1:99:c3:3d:09:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=caefcc2e-9910-4229-bb5a-fe3fe91cebb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:23:23:1d:90:63:2a:79:ca:fb:7a:a3:9a:a8: ab:b1:09:fe:d0:17:7c:d9:dc:eb:8b:c8:97:a0:56: a8:39:b6:86:25:39:19:2b:d3:b1:d2:5c:a3:0d:f0: 80:bd:a0:9c:19:89:47:24:22:a8:48:c5:84:82:04: 1e:7a:1a:86:b0:1e:cb:38:13:fd:ce:55:ef:6b:a0: d3:2b:a0:b5:60:49:f9:24:40:3b:a1:3a:a6:78:4d: 9a:ae:d9:5d:79:cc:a0:f8:74:93:ad:20:67:f9:47: 61:a4:2b:c4:26:77:8e:70:bf:67:1a:97:90:a7:36: 28:e3:1f:8f:67:6e:8d:1e:51:09:71:25:a4:ba:e1: 09:a4:27:a6:3b:90:de:1e:36:b6:45:78:52:a3:83: ba:43:6c:aa:b3:b8:a4:35:03:13:cf:0f:8d:b5:5f: dc:5d:70:b8:4f:0a:33:93:27:1f:30:f2:72:cb:62: 31:7f:df:fb:97:a9:d0:99:62:0c:fb:ee:bb:c9:47: 3d:c3:ae:ec:de:06:84:85:98:53:e0:b0:6c:e3:31: 67:bc:d2:f9:79:1e:2a:2e:50:a7:a5:14:6b:27:2f: 01:05:73:d6:68:10:b9:7d:69:ae:01:e8:52:f3:3e: 87:2f:12:c3:5d:cc:8d:68:c3:30:b8:40:96:56:f6: fb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:7B:67:35:E8:97:F4:B5:CE:D1:9D:C5:5B:DB:54:AA:9C:06:A2:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/319493ca-fa32-37d3-9616-0af2c399a14c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.239.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:a6:ad:1a:e4:50:17:7d:a9:ba:2e:60:a0:ea:34:98:f7:2a: 9c:44:9c:c8:29:50:2a:30:dd:be:79:20:9c:97:ea:4d:4a:9a: 82:59:38:4c:7f:74:59:be:27:b3:14:ec:37:f7:1a:43:83:44: 64:6d:f4:47:3c:6f:32:67:3c:84:11:f5:3f:52:92:51:8f:48: a7:c7:87:94:4c:b0:26:56:7c:cc:e9:07:17:c9:a6:14:4f:c5: 42:ca:f5:28:06:58:43:50:48:f0:35:d7:97:bd:00:d7:7d:19: 99:d2:47:a6:c4:ff:4b:96:36:61:44:9f:d8:3f:7d:d4:56:0a: 60:c4:3f:72:7d:e7:18:36:c7:7b:a1:6a:a5:ed:bc:75:b9:0e: 68:85:0b:68:37:6f:ad:e8:5e:f9:cc:24:50:99:99:f5:34:fd: 7c:6c:bc:d6:c7:9c:c5:c3:dc:3b:c5:df:80:4b:76:17:17:b1: 20:89:16:c8:19:6b:52:31:64:a2:07:94:c2:37:e0:61:77:b4: a0:3c:7d:df:f0:4b:40:0e:2f:b2:90:b1:08:f8:84:53:ee:17: b9:f7:75:a6:1c:ae:1c:05:26:4c:50:76:0c:ae:34:c1:e9:61: 5c:4f:de:b2:7e:88:26:b2:d0:e3:04:5b:fd:45:1c:0f:ad:32: f2:7a:69:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNDTlbGZwz0JWcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk Y2FlZmNjMmUtOTkxMC00MjI5LWJiNWEtZmUzZmU5MWNlYmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniMjHZBjKnnK+3qjmqirsQn+0Bd82dzri8iX oFaoObaGJTkZK9Ox0lyjDfCAvaCcGYlHJCKoSMWEggQeehqGsB7LOBP9zlXva6DT K6C1YEn5JEA7oTqmeE2artldecyg+HSTrSBn+UdhpCvEJneOcL9nGpeQpzYo4x+P Z26NHlEJcSWkuuEJpCemO5DeHja2RXhSo4O6Q2yqs7ikNQMTzw+NtV/cXXC4Twoz kycfMPJyy2Ixf9/7l6nQmWIM++67yUc9w67s3gaEhZhT4LBs4zFnvNL5eR4qLlCn pRRrJy8BBXPWaBC5fWmuAehS8z6HLxLDXcyNaMMwuECWVvb7RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJ7ZzXol/S1ztGdxVvbVKqcBqJpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzE5NDkzY2EtZmEzMi0z N2QzLTk2MTYtMGFmMmMzOTlhMTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI++wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACimrRrkUBd9qbouYKDqNJj3KpxEnMgpUCow3b55IJyX6k1KmoJZOEx/ dFm+J7MU7Df3GkODRGRt9Ec8bzJnPIQR9T9SklGPSKfHh5RMsCZWfMzpBxfJphRP xULK9SgGWENQSPA115e9ANd9GZnSR6bE/0uWNmFEn9g/fdRWCmDEP3J95xg2x3uh aqXtvHW5DmiFC2g3b63oXvnMJFCZmfU0/XxsvNbHnMXD3DvF34BLdhcXsSCJFsgZ a1IxZKIHlMI34GF3tKA8fd/wS0AOL7KQsQj4hFPuF7n3daYcrhwFJkxQdgyuNMHp YVxP3rJ+iCay0OMEW/1FHA+tMvJ6ae8= -----END CERTIFICATE-----Generated at Sat Apr 26 14:59:38 2025 by rpki-client