$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3822e1bd-124a-3706-923f-59c9217ee90b.roa File: 3822e1bd-124a-3706-923f-59c9217ee90b.roa (raw, json) Hash identifier: oSMsyqw1LEhasRfStogT2WgR79+0JitNdaS9LsMg03g= Subject key identifier: 7C:AB:8F:20:9F:91:3F:9C:FF:88:64:A0:43:57:49:F7:74:D7:FA:74 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785222100A22481E88C3560 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3822e1bd-124a-3706-923f-59c9217ee90b.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.196.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:22:21:00:a2:24:81:e8:8c:35:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=c1911ea3-4c1c-439c-8cb2-a2d7cf1166b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:51:b2:1f:84:da:64:63:bc:5a:39:66:cb:d8: 19:1c:ee:4b:4a:7e:72:12:4f:89:aa:3b:73:2c:7a: c3:a9:22:85:c3:a1:68:c3:e5:67:9f:e5:78:c2:64: 67:96:b5:4c:a2:cd:e1:eb:73:46:a0:05:6b:e9:f2: 0c:11:b4:b7:44:c4:b4:9e:a0:7a:b0:29:01:c1:17: f3:73:d9:97:8e:ee:c1:63:e8:21:0b:48:08:5b:cc: 34:30:4e:04:71:c0:30:57:db:c5:36:dd:d5:16:31: 2f:ff:38:a6:ee:b9:07:18:77:ca:43:3b:a2:c1:bc: b3:39:c0:97:ca:79:aa:c0:00:4d:15:2d:a2:78:8c: 36:c3:ca:16:ed:d6:68:df:4e:7d:0d:1a:12:8a:ce: 74:16:63:21:61:07:ce:1a:46:41:ed:c0:ee:48:46: 5d:57:2c:5d:45:ef:f1:9c:d4:04:86:7c:67:8f:a7: 6b:09:85:35:4d:39:79:1e:42:2f:fc:45:64:d8:64: ee:ba:d0:47:78:a6:ce:09:3b:8b:47:db:ff:69:13: 32:10:36:31:ba:d7:a1:9b:fd:93:a3:a4:d9:41:53: 78:77:2d:68:b0:7f:4a:45:75:26:54:0d:3b:ac:62: f0:93:70:f4:f2:0a:5b:f3:0d:86:78:9c:a8:37:5f: 62:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:AB:8F:20:9F:91:3F:9C:FF:88:64:A0:43:57:49:F7:74:D7:FA:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3822e1bd-124a-3706-923f-59c9217ee90b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.196.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:44:2d:d0:e4:b5:cc:6d:d4:a0:f0:c0:4e:08:7a:d8:f2:ea: 81:d3:19:08:a1:7e:79:3a:25:d4:8d:5f:f7:c0:ec:38:9c:ed: 86:e7:9b:4a:d3:e6:a0:d1:7e:6f:b0:73:50:35:03:4b:01:db: a4:d4:a0:66:35:5a:06:84:ca:27:cd:1c:fa:a7:db:0f:a9:2c: e7:30:b1:1a:43:31:6b:92:e0:5f:51:f5:c9:81:46:a8:d9:e9: e8:a6:37:13:48:f4:72:dd:2f:e0:6c:b9:a5:e5:fe:fa:c1:d9: e2:f4:4e:8d:34:83:17:32:b9:16:f3:f2:51:09:8a:2f:05:ac: 7e:dd:c5:e0:27:3c:50:b8:81:3f:6d:80:47:6e:ef:66:b3:26: 86:ff:c7:99:05:e4:96:a3:2f:c9:93:3f:9f:75:64:34:18:20: 30:da:b6:03:b2:92:aa:c2:96:5c:8d:d7:bb:a7:b9:2a:f0:53: 7d:80:dc:eb:1e:d2:ed:6d:dd:c7:17:c3:2e:22:aa:93:59:2d: af:6f:d0:d2:cc:01:6e:83:08:c5:ec:b8:a0:5d:3b:b2:70:58: 96:fb:c3:bf:81:ce:d2:8e:8b:3f:d5:5b:b4:77:5e:f5:de:19: 20:38:06:a6:c7:da:ac:b5:2a:a7:3c:21:62:19:23:5e:f6:32: 67:11:cc:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhSIhAKIkgeiMNWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YzE5MTFlYTMtNGMxYy00MzljLThjYjItYTJkN2NmMTE2NmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplGyH4TaZGO8Wjlmy9gZHO5LSn5yEk+Jqjtz LHrDqSKFw6Fow+Vnn+V4wmRnlrVMos3h63NGoAVr6fIMEbS3RMS0nqB6sCkBwRfz c9mXju7BY+ghC0gIW8w0ME4EccAwV9vFNt3VFjEv/zim7rkHGHfKQzuiwbyzOcCX ynmqwABNFS2ieIw2w8oW7dZo3059DRoSis50FmMhYQfOGkZB7cDuSEZdVyxdRe/x nNQEhnxnj6drCYU1TTl5HkIv/EVk2GTuutBHeKbOCTuLR9v/aRMyEDYxutehm/2T o6TZQVN4dy1osH9KRXUmVA07rGLwk3D08gpb8w2GeJyoN19i8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHyrjyCfkT+c/4hkoENXSfd01/p0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzgyMmUxYmQtMTI0YS0z NzA2LTkyM2YtNTljOTIxN2VlOTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8RwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlELdDktcxt1KDwwE4Ietjy6oHTGQihfnk6JdSNX/fA7Dic7Ybnm0rT 5qDRfm+wc1A1A0sB26TUoGY1WgaEyifNHPqn2w+pLOcwsRpDMWuS4F9R9cmBRqjZ 6eimNxNI9HLdL+BsuaXl/vrB2eL0To00gxcyuRbz8lEJii8FrH7dxeAnPFC4gT9t gEdu72azJob/x5kF5JajL8mTP591ZDQYIDDatgOykqrCllyN17unuSrwU32A3Ose 0u1t3ccXwy4iqpNZLa9v0NLMAW6DCMXsuKBdO7JwWJb7w7+BztKOiz/VW7R3XvXe GSA4BqbH2qy1Kqc8IWIZI172MmcRzF0= -----END CERTIFICATE-----Generated at Sat Apr 26 14:58:25 2025 by rpki-client