$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35bd475e-f0a3-3e3f-82db-5a515e5c1595.roa File: 35bd475e-f0a3-3e3f-82db-5a515e5c1595.roa (raw, json) Hash identifier: ayUj+LvZTz8v1qT0s3UDalITCD8nd9D2YGw/2wutPpk= Subject key identifier: BD:45:90:F0:E1:E9:CF:7A:C6:4B:4A:D5:45:8C:8C:F2:D6:65:B6:A3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78517E47ED0C10736293BE0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35bd475e-f0a3-3e3f-82db-5a515e5c1595.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.190.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:17:e4:7e:d0:c1:07:36:29:3b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=2a6afe5a-81b9-4600-b90d-4efc7931cd95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b1:6b:69:b4:c7:ac:2c:2f:f8:57:76:97:1b: a8:ca:70:e0:3b:a3:98:4b:46:35:22:2a:f5:e9:8c: 71:50:ee:f5:d1:e8:c6:3f:0f:0b:a0:09:09:e7:e1: dd:62:17:43:a1:4f:2a:a2:fc:d6:2b:a1:97:96:8a: 94:b6:cf:c6:91:0d:58:6e:59:a4:44:c3:4c:5b:a3: 78:44:8d:95:b9:b2:72:66:de:3a:ab:f3:1c:60:b5: 87:5d:09:0f:f4:c0:d4:a3:db:ed:2f:f9:3f:8f:61: 02:33:cb:24:e0:a4:3a:33:73:13:15:a3:f6:78:73: e6:79:4d:f3:79:27:bb:26:46:77:79:db:2d:26:44: dc:26:a4:5b:55:07:33:c1:68:f0:b4:5e:68:c1:75: f2:53:d1:b0:87:38:0a:9e:0a:31:fc:9a:97:86:22: 2b:03:01:30:de:e3:95:47:ea:c7:20:79:52:01:1b: 1b:0f:38:7f:7c:f5:b5:15:fc:d9:8b:83:12:4c:d3: 5c:e5:2f:be:a3:24:9e:06:45:8f:43:f0:69:ad:ba: 26:25:a3:62:f5:af:6c:14:e2:40:e2:0f:fd:40:9b: 78:7b:e5:49:80:d3:76:9a:ca:98:13:5e:b3:2f:fb: 93:c3:f6:e1:0f:a3:e8:70:fb:14:d2:13:81:22:e0: 79:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:45:90:F0:E1:E9:CF:7A:C6:4B:4A:D5:45:8C:8C:F2:D6:65:B6:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35bd475e-f0a3-3e3f-82db-5a515e5c1595.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.190.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:a0:ff:c0:b8:d4:3f:78:f6:ce:a8:07:2d:5a:c6:b7:d9:5d: 66:fc:15:a0:45:77:ff:cf:f3:3b:8e:63:9b:e2:1d:44:fa:ff: f0:34:d8:8a:ab:02:eb:c8:bc:26:cb:51:9e:3d:71:35:1a:8a: c7:c8:28:bb:0c:61:e8:34:d7:25:47:eb:c5:46:8e:f7:17:b9: 4a:24:bc:b8:49:42:4d:a5:bb:4f:50:8e:c0:27:67:bb:ce:3d: 2b:bc:ae:4c:8a:cb:de:30:30:f7:86:d0:12:39:7e:7c:96:31: 43:4c:be:b5:20:c2:a1:c0:9e:cf:4a:3f:8f:90:20:24:d6:c9: 32:a0:70:3a:41:11:20:50:12:96:35:9d:4a:f2:41:3f:a5:9b: 6f:a2:90:7e:21:1c:d3:6e:84:10:4c:75:80:2d:64:a7:af:ab: 6a:b3:2a:18:52:a8:17:20:f8:bf:10:41:80:84:63:fe:61:e5: e9:13:62:58:07:54:87:e4:39:70:b6:2b:a7:75:fa:8b:c2:f8: d2:0b:54:d2:dc:95:cf:69:9c:f5:5d:6c:3e:f6:ec:3c:76:56: 0b:2e:44:1f:54:76:8d:d2:8d:6f:64:00:ae:16:c9:18:d8:55: 87:6e:f5:b7:5e:6b:18:dd:8a:f6:3d:17:77:5d:e9:d7:24:9f: 4f:d8:f5:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRfkftDBBzYpO+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MmE2YWZlNWEtODFiOS00NjAwLWI5MGQtNGVmYzc5MzFjZDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLFrabTHrCwv+Fd2lxuoynDgO6OYS0Y1Iir1 6YxxUO710ejGPw8LoAkJ5+HdYhdDoU8qovzWK6GXloqUts/GkQ1YblmkRMNMW6N4 RI2VubJyZt46q/McYLWHXQkP9MDUo9vtL/k/j2ECM8sk4KQ6M3MTFaP2eHPmeU3z eSe7JkZ3edstJkTcJqRbVQczwWjwtF5owXXyU9GwhzgKngox/JqXhiIrAwEw3uOV R+rHIHlSARsbDzh/fPW1FfzZi4MSTNNc5S++oySeBkWPQ/BprbomJaNi9a9sFOJA 4g/9QJt4e+VJgNN2msqYE16zL/uTw/bhD6PocPsU0hOBIuB5ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1FkPDh6c96xktK1UWMjPLWZbajMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzViZDQ3NWUtZjBhMy0z ZTNmLTgyZGItNWE1MTVlNWMxNTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI76QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeg/8C41D949s6oBy1axrfZXWb8FaBFd//P8zuOY5viHUT6//A02Iqr AuvIvCbLUZ49cTUaisfIKLsMYeg01yVH68VGjvcXuUokvLhJQk2lu09QjsAnZ7vO PSu8rkyKy94wMPeG0BI5fnyWMUNMvrUgwqHAns9KP4+QICTWyTKgcDpBESBQEpY1 nUryQT+lm2+ikH4hHNNuhBBMdYAtZKevq2qzKhhSqBcg+L8QQYCEY/5h5ekTYlgH VIfkOXC2K6d1+ovC+NILVNLclc9pnPVdbD727Dx2VgsuRB9Udo3SjW9kAK4WyRjY VYdu9bdeaxjdivY9F3dd6dckn0/Y9Qg= -----END CERTIFICATE-----Generated at Sat Apr 26 16:01:02 2025 by rpki-client