$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/389a04cc-ce57-377a-b7f0-dc0931509188.roa File: 389a04cc-ce57-377a-b7f0-dc0931509188.roa (raw, json) Hash identifier: +mkQBlOC0xm9H1DzR8CzZgtymDAqAiqLDwK7HglcCcY= Subject key identifier: 5A:03:5E:DB:1E:FB:A7:8F:E8:E3:30:64:3D:9F:1D:56:89:D0:A3:F5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7851CB3A0FFF42B10489F00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/389a04cc-ce57-377a-b7f0-dc0931509188.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.246.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:1c:b3:a0:ff:f4:2b:10:48:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=5751a455-8aa5-42b0-a558-274a78b8e982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c6:48:9f:74:e2:87:fa:fe:2b:92:bd:a2:57: 45:70:87:b2:1d:b3:b0:4f:e9:7e:8d:5a:7c:0f:ea: 60:a1:fb:b5:1f:6e:2e:87:72:14:5f:45:5a:7c:eb: 30:fd:4a:34:f4:1a:39:f5:cf:c6:81:89:15:35:71: d8:13:06:92:73:c7:45:d6:c0:c1:81:e1:b6:bc:73: 3c:92:97:94:df:ad:6d:2d:6b:af:ae:f4:bc:c7:9f: 06:c4:bd:61:62:8d:e8:96:88:fa:4a:18:fe:26:25: 0a:57:a8:f7:cb:8a:9e:ed:6d:37:61:79:dc:22:18: 41:fe:7e:62:ba:ed:93:44:b0:45:f5:98:ff:a0:c4: 0b:8a:1c:e5:41:17:81:54:e0:db:05:e2:6e:04:4f: 59:ce:35:82:2d:41:ad:5a:a3:f1:58:15:26:ea:32: 93:6d:2b:80:aa:dc:a6:4f:e2:8e:fc:03:c0:4d:93: 5e:e6:f7:ba:cc:a4:ca:34:40:63:02:b3:29:7d:1f: 5c:c3:df:4f:4e:14:b6:49:d7:ee:71:8e:cf:3a:27: 7a:2b:54:e3:25:12:fc:5a:3e:5e:5a:55:32:71:51: 25:b5:2f:07:20:ea:d7:e1:63:55:6d:a4:c1:13:8f: 2d:60:70:4b:24:ec:e0:25:86:e8:69:7d:65:b3:10: 3f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:03:5E:DB:1E:FB:A7:8F:E8:E3:30:64:3D:9F:1D:56:89:D0:A3:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/389a04cc-ce57-377a-b7f0-dc0931509188.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.246.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:f2:bb:fc:a9:4b:56:c8:51:30:ff:ad:d4:80:f5:19:83:c3: 1f:de:02:4c:65:43:c7:5a:60:8e:39:9f:fa:e3:c8:38:ae:3b: 04:51:d6:34:4b:17:2f:d2:dd:ba:e4:12:20:42:5d:dc:9a:be: e0:fb:fa:fb:b4:3e:db:d0:3a:9f:6d:cb:99:0a:19:0b:35:d7: 6a:51:ef:67:79:ec:ff:27:e2:71:d2:52:88:79:ca:bb:e0:90: e9:a7:82:f5:ce:2e:9f:ec:6b:51:ba:92:ac:ba:43:e6:3b:6d: 38:26:84:46:3f:ce:3f:75:54:fc:62:8c:e4:5d:7e:5e:ef:66: fd:a2:ff:26:ed:83:9e:ba:13:cc:03:95:17:9d:de:79:b2:c1: 26:5e:d9:21:34:9d:0f:95:d6:95:64:8d:f3:1c:54:e6:37:8e: b5:b1:af:da:73:02:08:3e:a3:09:cd:fa:0b:14:7b:07:2b:d3: 8b:26:c0:3d:6f:de:38:11:c5:c6:a5:e1:5e:02:d8:6c:59:fb: 1b:0c:97:ee:9a:4b:4a:a0:cb:fe:22:66:92:7a:73:63:72:d8: 30:83:15:15:6f:18:15:ff:61:8b:1b:9c:a5:f5:dd:d3:c8:db: 59:9a:4e:fc:ef:5d:c9:11:60:33:18:4b:fc:b9:d0:bc:f8:7f: b4:f6:33:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRyzoP/0KxBInwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NTc1MWE0NTUtOGFhNS00MmIwLWE1NTgtMjc0YTc4YjhlOTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsZIn3Tih/r+K5K9oldFcIeyHbOwT+l+jVp8 D+pgofu1H24uh3IUX0VafOsw/Uo09Bo59c/GgYkVNXHYEwaSc8dF1sDBgeG2vHM8 kpeU361tLWuvrvS8x58GxL1hYo3oloj6Shj+JiUKV6j3y4qe7W03YXncIhhB/n5i uu2TRLBF9Zj/oMQLihzlQReBVODbBeJuBE9ZzjWCLUGtWqPxWBUm6jKTbSuAqtym T+KO/APATZNe5ve6zKTKNEBjArMpfR9cw99PThS2SdfucY7POid6K1TjJRL8Wj5e WlUycVEltS8HIOrX4WNVbaTBE48tYHBLJOzgJYboaX1lsxA/BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoDXtse+6eP6OMwZD2fHVaJ0KP1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzg5YTA0Y2MtY2U1Ny0z NzdhLWI3ZjAtZGMwOTMxNTA5MTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/YwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXyu/ypS1bIUTD/rdSA9RmDwx/eAkxlQ8daYI45n/rjyDiuOwRR1jRL Fy/S3brkEiBCXdyavuD7+vu0PtvQOp9ty5kKGQs112pR72d57P8n4nHSUoh5yrvg kOmngvXOLp/sa1G6kqy6Q+Y7bTgmhEY/zj91VPxijORdfl7vZv2i/ybtg566E8wD lRed3nmywSZe2SE0nQ+V1pVkjfMcVOY3jrWxr9pzAgg+ownN+gsUewcr04smwD1v 3jgRxcal4V4C2GxZ+xsMl+6aS0qgy/4iZpJ6c2Ny2DCDFRVvGBX/YYsbnKX13dPI 21maTvzvXckRYDMYS/y50Lz4f7T2M6o= -----END CERTIFICATE-----Generated at Sat Apr 26 16:48:15 2025 by rpki-client