$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c8b5aff-f8c1-3ae6-818d-92fb1048f1b6.roa File: 3c8b5aff-f8c1-3ae6-818d-92fb1048f1b6.roa (raw, json) Hash identifier: YgIEstaYCyz0+sB/N4F0n3yU0sTEHjq4lYx3nE3wO58= Subject key identifier: 07:17:69:7B:42:E5:D1:49:C6:7A:07:33:5B:E0:A2:08:66:E1:D5:35 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784E5A72B4FA823BF86C980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c8b5aff-f8c1-3ae6-818d-92fb1048f1b6.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.188.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e5:a7:2b:4f:a8:23:bf:86:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=767023f4-a165-4a39-b0f8-7739b178ffe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a1:4a:cd:f8:c0:51:7e:f4:37:b8:58:8e:aa: 61:47:41:2b:7c:c6:ae:66:8f:15:56:78:da:c2:b0: 38:db:7a:16:44:c3:3e:d2:7a:7f:26:4d:1f:fa:7e: 79:d1:ad:4f:b3:f8:4d:c0:84:95:09:ba:6e:34:56: fa:f0:da:38:f5:75:12:29:2b:8f:d9:fd:c8:66:91: 1e:ae:23:0e:cb:73:a3:c7:4f:60:65:d4:c1:64:83: 16:a3:ff:b8:bb:9c:a7:fc:2e:fc:c6:d0:cb:12:8a: 92:b8:5a:ba:ad:9e:b1:06:95:52:ed:fb:6f:b3:45: 5f:ad:ea:0b:33:67:67:c5:97:f4:0b:d7:28:fd:a0: 53:4a:3f:09:c7:33:61:47:1f:2e:5a:7d:50:f6:c9: 2e:ac:c5:57:4c:b5:9f:ae:ad:5d:fa:3e:ab:93:95: c6:23:85:dd:c7:f2:45:3e:00:6a:84:9e:8c:d2:2f: 12:c8:72:55:19:30:08:ba:5f:76:53:f6:1d:19:42: f3:98:83:1c:3c:aa:d1:22:cc:59:9d:b0:89:1d:96: f2:1d:2a:95:ba:d8:8a:00:75:d1:19:b6:11:b8:92: 6c:5b:c3:ea:fb:ce:27:0c:23:a4:d0:36:06:38:e9: 48:f9:8d:73:ba:18:2a:77:1f:c3:38:38:8b:1e:41: e9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:17:69:7B:42:E5:D1:49:C6:7A:07:33:5B:E0:A2:08:66:E1:D5:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c8b5aff-f8c1-3ae6-818d-92fb1048f1b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.188.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:4a:27:35:e8:79:7c:b9:b5:55:ab:53:af:81:83:86:93:88: ab:4e:fd:9e:6f:3a:b6:92:f7:41:89:eb:0a:2d:b3:f0:cb:99: 19:00:fe:0f:55:ae:77:72:85:6c:7a:be:29:12:31:24:5c:10: 70:c0:c6:4d:3d:54:26:4e:79:33:cf:b7:59:ac:a4:86:b4:ca: c3:02:63:01:60:b5:39:56:fe:bc:d1:b1:f4:77:5b:73:2b:78: af:6e:f2:89:eb:ae:73:10:38:4a:68:72:ec:c1:6f:0a:7b:81: bc:1d:cd:89:ec:c3:55:5b:4c:c1:e3:e4:1e:7c:90:47:9c:8f: c0:28:b4:31:6e:02:be:c2:38:d1:9d:42:99:5a:d5:19:d9:1c: 34:c2:2f:2d:21:a2:84:df:11:e0:a2:18:d1:56:e0:c0:93:21: 40:bd:a9:7b:0a:2a:57:24:63:ca:63:3a:ab:b4:76:04:58:9b: a1:2c:5b:c0:b3:ac:8e:78:33:9e:cf:a4:f1:c2:ab:ed:96:3a: 04:27:c1:70:87:d9:e3:80:bf:c5:92:a0:e2:9e:b5:9e:d5:b7: 46:21:e6:ef:b4:86:95:46:c4:e6:54:24:81:3c:20:c4:45:71: 6b:cb:61:70:35:3c:dc:bf:cc:b8:dd:90:44:0b:77:b5:9f:0d: a2:82:31:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOWnK0+oI7+GyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NzY3MDIzZjQtYTE2NS00YTM5LWIwZjgtNzczOWIxNzhmZmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6FKzfjAUX70N7hYjqphR0ErfMauZo8VVnja wrA423oWRMM+0np/Jk0f+n550a1Ps/hNwISVCbpuNFb68No49XUSKSuP2f3IZpEe riMOy3Ojx09gZdTBZIMWo/+4u5yn/C78xtDLEoqSuFq6rZ6xBpVS7ftvs0VfreoL M2dnxZf0C9co/aBTSj8JxzNhRx8uWn1Q9skurMVXTLWfrq1d+j6rk5XGI4Xdx/JF PgBqhJ6M0i8SyHJVGTAIul92U/YdGULzmIMcPKrRIsxZnbCJHZbyHSqVutiKAHXR GbYRuJJsW8Pq+84nDCOk0DYGOOlI+Y1zuhgqdx/DODiLHkHp4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAcXaXtC5dFJxnoHM1vgoghm4dU1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2M4YjVhZmYtZjhjMS0z YWU2LTgxOGQtOTJmYjEwNDhmMWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7ywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJKJzXoeXy5tVWrU6+Bg4aTiKtO/Z5vOraS90GJ6wots/DLmRkA/g9V rndyhWx6vikSMSRcEHDAxk09VCZOeTPPt1mspIa0ysMCYwFgtTlW/rzRsfR3W3Mr eK9u8onrrnMQOEpocuzBbwp7gbwdzYnsw1VbTMHj5B58kEecj8AotDFuAr7CONGd Qpla1RnZHDTCLy0hooTfEeCiGNFW4MCTIUC9qXsKKlckY8pjOqu0dgRYm6EsW8Cz rI54M57PpPHCq+2WOgQnwXCH2eOAv8WSoOKetZ7Vt0Yh5u+0hpVGxOZUJIE8IMRF cWvLYXA1PNy/zLjdkEQLd7WfDaKCMUs= -----END CERTIFICATE-----Generated at Sat Apr 26 19:12:58 2025 by rpki-client