$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fb4b33d-a33d-3078-ae33-e269759882cb.roa File: 3fb4b33d-a33d-3078-ae33-e269759882cb.roa (raw, json) Hash identifier: qSep5zEjYmZHI3ny1cSBQMVC6NByk497+qfjlpdcur0= Subject key identifier: 75:FE:16:B3:D4:C9:36:85:18:47:2D:24:41:28:07:89:01:31:E0:35 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784EE75C77ACFFF08DC8280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fb4b33d-a33d-3078-ae33-e269759882cb.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.244.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ee:75:c7:7a:cf:ff:08:dc:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=15693100-bec4-4180-ba45-3c7badf8148b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:99:7b:25:71:78:4f:9a:a1:71:33:d6:d5:f0: 75:7d:c9:91:d0:5c:ab:72:58:ad:ac:e2:2e:fa:4e: 0a:4b:c9:ff:58:fb:df:ae:50:15:03:d1:1b:66:99: 2a:99:8c:60:8e:ae:b2:1e:f3:c2:40:9d:0a:20:ee: 2a:c4:54:75:9d:e1:f7:e4:8d:b0:3a:e9:c0:88:d2: 0a:e5:34:16:ef:cf:6f:c6:33:7b:da:42:f5:73:5c: fc:cf:a1:11:d0:f9:bc:43:a2:a7:eb:41:e1:fc:bc: a9:75:ea:5f:13:5c:bc:9d:87:03:f3:7b:3e:32:ed: 0c:39:cd:5f:88:a3:80:c3:78:44:66:18:83:99:59: d5:a5:6d:a0:6c:52:9a:30:5d:62:6a:39:ec:45:23: 1a:8f:5b:b8:d7:5a:3f:9a:e8:16:7d:b0:86:c0:1a: a3:44:7b:bf:63:cf:e0:2b:71:77:f3:1d:fb:81:dc: 54:ad:0d:86:05:88:1c:85:84:ad:cb:54:d9:7e:09: 41:be:3d:69:d5:58:a5:13:26:17:43:d7:a5:f9:95: ed:9d:fc:6e:db:fb:e4:c1:ee:04:b5:bc:dc:c3:71: 1b:66:ee:1d:ee:b8:b1:df:95:3f:26:52:99:ae:dc: 70:f8:bb:9d:57:ec:39:34:9f:72:c7:71:1a:b9:74: 25:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:FE:16:B3:D4:C9:36:85:18:47:2D:24:41:28:07:89:01:31:E0:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fb4b33d-a33d-3078-ae33-e269759882cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.244.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:ea:bd:b3:c9:11:56:4a:b8:76:aa:b5:2b:2a:c6:44:01:27: c0:13:3e:f3:b7:e0:a9:d5:58:6f:dd:57:2b:1f:d7:96:93:59: 98:b9:04:c6:db:54:e8:d0:9e:63:1c:1a:77:ab:4f:32:97:fb: bb:19:06:d3:4f:89:d3:52:20:e4:16:ee:b7:aa:95:a3:2b:76: ab:bd:65:9a:76:dc:5d:e1:8b:43:82:ea:4b:60:af:9c:66:bd: df:ac:e9:94:43:00:4a:d9:90:3a:76:a0:bb:44:ee:e7:e4:ca: 8b:e9:eb:c1:08:24:ac:83:61:af:a8:a5:cc:62:f9:2b:32:01: 3f:ca:8d:34:20:59:f5:6a:9e:f9:b5:d3:07:91:79:a1:0f:91: 7a:8d:6b:92:4e:95:99:c1:24:8f:4c:f9:a9:d3:f3:31:00:7c: df:e6:01:1d:08:e1:3a:58:bf:11:0c:96:dd:92:60:b6:3b:87: f4:4b:66:95:85:8f:74:1a:c6:03:d5:fb:2e:6b:86:02:9c:6c: 2d:6b:7f:8f:f2:33:a1:70:d0:ef:48:ab:b2:22:a0:cc:9b:43: 2a:7d:97:a5:85:83:77:d3:b1:41:a7:30:00:85:f4:24:64:d8: 37:0d:6e:e2:67:88:75:71:b2:fd:86:6a:2c:72:07:19:f1:dd: 2b:b2:26:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhO51x3rP/wjcgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MTU2OTMxMDAtYmVjNC00MTgwLWJhNDUtM2M3YmFkZjgxNDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZl7JXF4T5qhcTPW1fB1fcmR0FyrclitrOIu +k4KS8n/WPvfrlAVA9EbZpkqmYxgjq6yHvPCQJ0KIO4qxFR1neH35I2wOunAiNIK 5TQW789vxjN72kL1c1z8z6ER0Pm8Q6Kn60Hh/LypdepfE1y8nYcD83s+Mu0MOc1f iKOAw3hEZhiDmVnVpW2gbFKaMF1iajnsRSMaj1u411o/mugWfbCGwBqjRHu/Y8/g K3F38x37gdxUrQ2GBYgchYSty1TZfglBvj1p1VilEyYXQ9el+ZXtnfxu2/vkwe4E tbzcw3EbZu4d7rix35U/JlKZrtxw+LudV+w5NJ9yx3EauXQliwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHX+FrPUyTaFGEctJEEoB4kBMeA1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2ZiNGIzM2QtYTMzZC0z MDc4LWFlMzMtZTI2OTc1OTg4MmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/QQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTqvbPJEVZKuHaqtSsqxkQBJ8ATPvO34KnVWG/dVysf15aTWZi5BMbb VOjQnmMcGnerTzKX+7sZBtNPidNSIOQW7reqlaMrdqu9ZZp23F3hi0OC6ktgr5xm vd+s6ZRDAErZkDp2oLtE7ufkyovp68EIJKyDYa+opcxi+SsyAT/KjTQgWfVqnvm1 0weReaEPkXqNa5JOlZnBJI9M+anT8zEAfN/mAR0I4TpYvxEMlt2SYLY7h/RLZpWF j3QaxgPV+y5rhgKcbC1rf4/yM6Fw0O9Iq7IioMybQyp9l6WFg3fTsUGnMACF9CRk 2DcNbuJniHVxsv2GaixyBxnx3SuyJjM= -----END CERTIFICATE-----Generated at Sat Apr 26 16:14:40 2025 by rpki-client