$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/34b45be3-b170-346c-86b5-0ba4db7ce614.roa File: 34b45be3-b170-346c-86b5-0ba4db7ce614.roa (raw, json) Hash identifier: NS5JAFJReOVvRvjYCNMqToHcOk0ZOL+TGZn99km84pU= Subject key identifier: EA:42:D1:6B:7E:25:60:51:20:CB:A7:90:BE:69:A7:EF:C1:3C:98:CE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785131C6F6259A2A49B0BC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/34b45be3-b170-346c-86b5-0ba4db7ce614.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.204.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:13:1c:6f:62:59:a2:a4:9b:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=5c76afee-b474-4792-bd54-ffc2d56feae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5b:30:a2:29:60:ea:f4:ca:a5:75:ab:7c:f8: 0c:1c:4e:86:2e:98:1a:a3:a4:ac:fd:0b:80:55:c1: b6:b0:9d:35:5f:d2:36:c3:5a:61:71:98:39:25:ad: 6a:44:e0:e6:98:2b:fb:f3:0a:a5:9c:24:2a:c4:84: 2b:5c:22:25:0f:d4:df:e4:d4:ff:10:5a:cd:72:85: df:9e:bf:f8:c7:aa:52:a2:37:e1:64:e1:0f:e3:bd: 8a:0c:fd:f2:10:ff:ab:8a:99:c8:5a:3c:7a:43:10: 45:a6:c6:ec:44:3f:db:95:6e:78:4d:cf:34:26:bb: d5:3a:15:78:44:a7:41:87:16:30:fc:cc:f1:37:b4: 85:28:bb:84:d5:0d:28:fc:e2:d1:0a:2d:9f:29:78: df:f3:b0:39:18:0b:70:c3:4f:d4:2b:60:81:c2:c6: 7e:a3:aa:9d:5a:d5:b6:6d:9b:f2:fd:59:b0:40:5e: dd:66:21:17:db:1a:49:cc:0e:2a:cd:82:8c:24:31: 0b:1b:77:b4:25:65:2b:fc:5a:88:c6:9d:cb:8d:6d: 65:9d:3c:42:aa:a7:7c:a4:d7:0c:5f:27:af:22:67: f2:e2:d4:8a:34:c4:42:3a:cf:74:c8:89:5e:c1:87: 64:cb:8c:b9:5b:9b:1c:37:44:41:31:86:d2:51:c0: 10:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:42:D1:6B:7E:25:60:51:20:CB:A7:90:BE:69:A7:EF:C1:3C:98:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/34b45be3-b170-346c-86b5-0ba4db7ce614.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.204.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:0a:de:57:0b:b2:5f:8d:30:f4:4f:70:c7:03:2e:89:27:ba: c0:f9:b5:15:84:3a:7b:e3:0f:6f:2c:6c:63:90:18:3b:b5:4a: 96:44:7e:9b:f4:e3:fb:25:d9:50:e8:c3:1a:7a:8e:6e:6d:00: ae:ab:b8:6d:bd:97:17:ba:97:f1:e6:88:df:c5:62:fe:4f:b1: 9e:99:5f:9d:2f:77:a9:dc:64:5e:69:b1:6c:aa:42:0a:ed:8a: ef:72:9b:f6:9a:16:41:a8:0f:b7:b3:3c:da:92:3f:59:75:e9: 75:c3:d4:3d:48:ae:00:fc:49:9a:2a:83:de:3e:a8:41:df:ae: b0:46:df:59:c9:95:f0:d3:7a:4c:88:07:0a:fc:05:0a:90:b8: 44:7c:ef:81:10:7f:bc:bf:00:d9:f7:0d:49:24:96:8d:29:f5: 80:30:91:10:ac:68:9b:dc:b5:b9:3f:df:92:44:66:b5:1e:91: 50:4f:60:11:10:a7:24:6f:ea:54:ff:e8:6e:9f:f0:86:7b:a5: d3:90:b8:d6:6e:ca:68:cf:57:21:ee:5c:45:78:fa:73:bc:b5: 8c:a7:62:c2:96:12:37:a2:71:f8:82:8b:ca:33:e0:c1:36:2e: 21:f8:a1:15:cf:4e:b9:f3:30:7a:e6:fc:cd:ce:76:a6:78:ab: a9:1b:13:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRMcb2JZoqSbC8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NWM3NmFmZWUtYjQ3NC00NzkyLWJkNTQtZmZjMmQ1NmZlYWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVswoilg6vTKpXWrfPgMHE6GLpgao6Ss/QuA VcG2sJ01X9I2w1phcZg5Ja1qRODmmCv78wqlnCQqxIQrXCIlD9Tf5NT/EFrNcoXf nr/4x6pSojfhZOEP472KDP3yEP+ripnIWjx6QxBFpsbsRD/blW54Tc80JrvVOhV4 RKdBhxYw/MzxN7SFKLuE1Q0o/OLRCi2fKXjf87A5GAtww0/UK2CBwsZ+o6qdWtW2 bZvy/VmwQF7dZiEX2xpJzA4qzYKMJDELG3e0JWUr/FqIxp3LjW1lnTxCqqd8pNcM XyevImfy4tSKNMRCOs90yIlewYdky4y5W5scN0RBMYbSUcAQ6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpC0Wt+JWBRIMunkL5pp+/BPJjOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzRiNDViZTMtYjE3MC0z NDZjLTg2YjUtMGJhNGRiN2NlNjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8wwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcK3lcLsl+NMPRPcMcDLoknusD5tRWEOnvjD28sbGOQGDu1SpZEfpv0 4/sl2VDowxp6jm5tAK6ruG29lxe6l/HmiN/FYv5PsZ6ZX50vd6ncZF5psWyqQgrt iu9ym/aaFkGoD7ezPNqSP1l16XXD1D1IrgD8SZoqg94+qEHfrrBG31nJlfDTekyI Bwr8BQqQuER874EQf7y/ANn3DUkklo0p9YAwkRCsaJvctbk/35JEZrUekVBPYBEQ pyRv6lT/6G6f8IZ7pdOQuNZuymjPVyHuXEV4+nO8tYynYsKWEjeicfiCi8oz4ME2 LiH4oRXPTrnzMHrm/M3OdqZ4q6kbE/U= -----END CERTIFICATE-----Generated at Sat Apr 26 16:01:53 2025 by rpki-client