$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/323e8458-838a-3426-aaa9-3ba60b74fe5e.roa File: 323e8458-838a-3426-aaa9-3ba60b74fe5e.roa (raw, json) Hash identifier: xuzo1NxRejCQ4Ms8M6UuPc+CdT+u8bvyOWBQV8uIjiI= Subject key identifier: C0:D3:07:6F:A9:B8:2E:18:ED:E4:CE:0E:6D:2A:EA:FB:B3:5E:A0:C6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78518CF37C1EA348872DC80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/323e8458-838a-3426-aaa9-3ba60b74fe5e.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.247.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:18:cf:37:c1:ea:34:88:72:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=6e199483-0ac2-44f3-b388-7354f8e0e922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:19:1c:17:63:61:95:2a:1d:6c:70:89:ff:f2: 8b:cc:0a:0a:a1:7e:04:94:63:bc:ad:3b:28:18:15: 7c:c2:8d:9e:de:47:70:51:e7:78:e1:42:11:aa:a1: e9:8b:92:2e:57:6d:54:9b:77:92:77:72:83:7b:9b: 66:ad:2e:be:4f:89:5f:9a:ae:8f:b6:b0:f8:d8:42: e4:83:f6:eb:aa:fa:a0:d2:c9:74:f6:0c:be:b6:91: f7:83:38:b8:ab:e5:23:ad:c6:eb:35:66:e0:e3:d3: 5b:8e:2e:56:b9:f6:26:4c:f8:1a:a2:39:3d:6f:1e: 06:74:63:6e:19:92:d6:a0:58:b3:8f:2c:cb:b9:4f: e0:9e:48:bf:b7:09:65:fe:a2:bf:81:40:db:d0:85: 09:c9:39:fd:11:ef:8b:d1:19:f2:49:fa:9d:32:57: df:7f:16:a2:68:f5:c2:da:da:20:70:be:2a:c1:ab: ba:22:db:ac:ee:a6:7d:29:38:47:ee:dd:2e:60:80: 1a:65:07:43:f4:01:28:26:1a:70:ae:b1:0c:27:ba: 52:79:2e:9c:4e:82:0b:28:e2:4e:c0:ca:c1:c8:d0: 32:84:35:13:46:42:67:10:9f:d4:25:5f:11:a9:f9: 51:0e:39:eb:c4:34:d5:4c:3d:84:15:52:9b:7f:fe: 90:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D3:07:6F:A9:B8:2E:18:ED:E4:CE:0E:6D:2A:EA:FB:B3:5E:A0:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/323e8458-838a-3426-aaa9-3ba60b74fe5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.247.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:e2:b7:f8:b3:49:76:9b:a2:dd:16:30:0f:30:25:8a:ad:10: 89:a6:36:fb:57:f5:78:23:ac:22:4f:a3:09:d5:10:ff:09:2c: 43:7b:21:ee:a7:45:5b:2d:39:18:93:24:38:1c:4a:68:e4:49: 0c:89:32:09:68:b3:97:34:8e:96:12:1d:20:92:a6:da:8e:a8: da:eb:f3:18:56:56:6f:92:74:8b:68:52:ad:77:99:e0:0e:9b: 26:18:5f:e1:c8:bc:0a:aa:4e:96:58:75:ef:ae:c3:76:57:f8: c2:a2:2e:1a:28:3e:30:bc:ee:f9:f4:03:ce:ff:3c:b2:85:c9: b5:f2:45:69:d3:7d:f6:0f:de:04:19:ae:10:60:50:f7:64:2e: 06:32:4b:8d:24:f1:65:ce:4c:ba:09:62:01:aa:7b:e8:95:59: 29:a1:e5:06:ff:ab:25:9e:9e:8c:ca:58:9b:49:c7:d0:ae:6e: 30:59:f3:88:1a:b1:04:6c:16:ef:f9:fb:8c:08:07:c7:45:3d: b1:89:78:ba:22:8a:27:88:de:0e:5c:ad:77:86:18:fb:91:3d: 5f:1e:dc:75:d3:cd:5e:12:d3:32:d3:13:64:59:dc:bf:a0:1e: db:88:b8:21:fe:e2:8a:ac:ac:e9:58:bd:c4:bd:e9:07:19:3c: 9d:c8:8b:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRjPN8HqNIhy3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NmUxOTk0ODMtMGFjMi00NGYzLWIzODgtNzM1NGY4ZTBlOTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BkcF2NhlSodbHCJ//KLzAoKoX4ElGO8rTso GBV8wo2e3kdwUed44UIRqqHpi5IuV21Um3eSd3KDe5tmrS6+T4lfmq6PtrD42ELk g/brqvqg0sl09gy+tpH3gzi4q+UjrcbrNWbg49Nbji5WufYmTPgaojk9bx4GdGNu GZLWoFizjyzLuU/gnki/twll/qK/gUDb0IUJyTn9Ee+L0RnySfqdMlfffxaiaPXC 2togcL4qwau6Itus7qZ9KThH7t0uYIAaZQdD9AEoJhpwrrEMJ7pSeS6cToILKOJO wMrByNAyhDUTRkJnEJ/UJV8RqflRDjnrxDTVTD2EFVKbf/6QlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDTB2+puC4Y7eTODm0q6vuzXqDGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzIzZTg0NTgtODM4YS0z NDI2LWFhYTktM2JhNjBiNzRmZTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/egMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHit/izSXabot0WMA8wJYqtEImmNvtX9XgjrCJPownVEP8JLEN7Ie6n RVstORiTJDgcSmjkSQyJMglos5c0jpYSHSCSptqOqNrr8xhWVm+SdItoUq13meAO myYYX+HIvAqqTpZYde+uw3ZX+MKiLhooPjC87vn0A87/PLKFybXyRWnTffYP3gQZ rhBgUPdkLgYyS40k8WXOTLoJYgGqe+iVWSmh5Qb/qyWenozKWJtJx9CubjBZ84ga sQRsFu/5+4wIB8dFPbGJeLoiiieI3g5crXeGGPuRPV8e3HXTzV4S0zLTE2RZ3L+g HtuIuCH+4oqsrOlYvcS96QcZPJ3Ii9s= -----END CERTIFICATE-----Generated at Sat Apr 26 19:20:01 2025 by rpki-client