$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/32d9179b-2fb3-3f7a-a90b-38e8b6c0af20.roa File: 32d9179b-2fb3-3f7a-a90b-38e8b6c0af20.roa (raw, json) Hash identifier: w2m7lUGHqhLYqd+XO28F2q2k+NsE/W521YGRNSnCit0= Subject key identifier: 1A:D3:6F:7D:72:72:21:3D:7A:DC:1D:EA:38:0F:3B:B1:04:1E:71:BC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784D7A30461FB24B38DB280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/32d9179b-2fb3-3f7a-a90b-38e8b6c0af20.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.196.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:d7:a3:04:61:fb:24:b3:8d:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=215a58a9-a7a8-4c7d-a617-4f33baaa330e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8e:c0:73:f9:db:87:32:17:8e:1e:59:78:e6: a9:38:c0:af:e1:75:47:05:b0:85:49:c7:10:36:4f: b3:51:74:ab:d4:3e:2b:13:41:e5:e9:5f:3d:c7:20: 8d:66:fd:f9:6e:8e:6b:b0:62:60:c1:04:e6:8b:c2: ae:9e:28:83:8e:6b:f4:69:fe:17:97:b0:c2:b3:29: 3c:ef:fa:51:cc:97:f9:63:b3:33:a1:49:62:6f:7a: 5c:a4:0d:dd:98:b3:17:fa:cf:fc:c4:8e:c7:5e:b0: 0a:14:4b:82:59:67:8b:9a:f4:a9:06:69:b3:0e:5a: bf:34:71:89:d6:b9:71:53:d6:2a:04:2b:96:89:e3: a5:b2:91:5e:32:44:1e:58:ef:6e:6a:30:e9:d9:03: ae:e3:64:ae:c8:d3:35:d3:5d:0d:16:52:49:86:33: 3e:4b:cc:7b:cf:38:01:19:4a:9e:1e:3e:2e:c3:32: 82:e5:6e:06:ab:84:57:02:13:64:2e:84:a9:a3:a1: 3c:0a:4f:93:fa:32:ee:72:37:a8:90:d0:73:e4:02: 38:9a:9e:fc:3f:30:14:e8:9d:90:e9:52:ad:ae:c8: 06:a0:cd:9e:c6:2a:b0:57:3d:53:ef:e9:19:33:24: be:52:a5:e7:e3:34:10:49:02:7c:dc:1e:c3:1c:71: f6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:D3:6F:7D:72:72:21:3D:7A:DC:1D:EA:38:0F:3B:B1:04:1E:71:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/32d9179b-2fb3-3f7a-a90b-38e8b6c0af20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.196.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:67:07:79:7d:54:7c:d0:a6:7b:8e:79:62:58:e8:b1:7c:f3: bb:6e:b5:0b:77:8b:e8:a9:4b:08:f9:51:36:30:5b:58:f0:7d: ad:16:32:e2:6f:6e:e5:f5:40:b8:7c:f1:fc:ed:ca:ba:3f:82: b3:ff:65:3b:18:c9:ca:3d:c0:83:58:94:63:11:24:52:f5:8a: 54:c6:37:d4:05:4a:f5:93:81:66:08:4d:ef:9b:06:2b:3f:9a: 15:f3:b1:3c:81:e3:ce:98:69:85:11:f7:13:f4:0e:36:ca:b0: 41:de:6d:ea:cc:bf:3d:f5:18:22:6e:38:b6:18:b3:a0:65:2e: 20:6d:0c:2c:c6:5f:28:93:3d:c9:94:9d:91:57:40:6e:7a:e2: 53:7b:89:d3:f1:b2:46:f2:6e:bc:d8:bd:88:24:50:4b:94:51: 59:4e:f3:d9:a9:dd:13:56:f0:fd:80:fd:70:e4:bc:c5:6e:87: c7:fb:d1:d5:f5:ca:76:28:45:c0:15:74:d6:da:58:8c:cf:73: 10:ed:13:57:0c:14:c8:4c:96:03:d5:c6:36:56:65:c1:50:d1: 78:8c:23:1b:74:da:f8:f1:bf:79:0c:09:f0:d0:6e:bf:3f:c8: f7:39:fd:f3:19:82:d9:29:72:2d:1c:27:e8:3a:e7:a3:af:34: df:29:f4:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNejBGH7JLONsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MjE1YTU4YTktYTdhOC00YzdkLWE2MTctNGYzM2JhYWEzMzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq47Ac/nbhzIXjh5ZeOapOMCv4XVHBbCFSccQ Nk+zUXSr1D4rE0Hl6V89xyCNZv35bo5rsGJgwQTmi8KuniiDjmv0af4Xl7DCsyk8 7/pRzJf5Y7MzoUlib3pcpA3dmLMX+s/8xI7HXrAKFEuCWWeLmvSpBmmzDlq/NHGJ 1rlxU9YqBCuWieOlspFeMkQeWO9uajDp2QOu42SuyNM1010NFlJJhjM+S8x7zzgB GUqeHj4uwzKC5W4Gq4RXAhNkLoSpo6E8Ck+T+jLucjeokNBz5AI4mp78PzAU6J2Q 6VKtrsgGoM2exiqwVz1T7+kZMyS+UqXn4zQQSQJ83B7DHHH2XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrTb31yciE9etwd6jgPO7EEHnG8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzJkOTE3OWItMmZiMy0z ZjdhLWE5MGItMzhlOGI2YzBhZjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8QgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZnB3l9VHzQpnuOeWJY6LF887tutQt3i+ipSwj5UTYwW1jwfa0WMuJv buX1QLh88fztyro/grP/ZTsYyco9wINYlGMRJFL1ilTGN9QFSvWTgWYITe+bBis/ mhXzsTyB486YaYUR9xP0DjbKsEHeberMvz31GCJuOLYYs6BlLiBtDCzGXyiTPcmU nZFXQG564lN7idPxskbybrzYvYgkUEuUUVlO89mp3RNW8P2A/XDkvMVuh8f70dX1 ynYoRcAVdNbaWIzPcxDtE1cMFMhMlgPVxjZWZcFQ0XiMIxt02vjxv3kMCfDQbr8/ yPc5/fMZgtkpci0cJ+g656OvNN8p9Dw= -----END CERTIFICATE-----Generated at Sun Jun 15 17:52:12 2025 by rpki-client