$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/436a90bc-0f2f-3d4a-b75b-c72f1175dd54.roa File: 436a90bc-0f2f-3d4a-b75b-c72f1175dd54.roa (raw, json) Hash identifier: Th2ZUkWLhMx36gl4bXfUFwENpBwnDDgNu2x0O/uMmhA= Subject key identifier: 69:3F:8B:D0:5F:6A:9C:77:8E:90:F9:7A:E5:27:56:BE:22:02:0D:5B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784CC6A64FB012B1962C440 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/436a90bc-0f2f-3d4a-b75b-c72f1175dd54.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.187.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:cc:6a:64:fb:01:2b:19:62:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=b9dead6c-b30e-431e-8ed6-1996d9ec0fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:85:11:0e:4f:a6:9f:83:e6:21:bd:e3:f9:c1: f6:92:da:2e:ac:7a:75:b1:13:21:7d:dd:c8:30:99: 7b:38:6f:16:73:9b:d8:31:2a:62:9d:da:b7:ea:61: 52:45:f3:a4:a8:f6:8a:70:58:52:34:77:6d:d0:09: 08:72:53:6d:fa:e1:61:c1:89:07:9f:36:1c:ed:a7: ae:82:36:7e:64:a2:e4:c4:f6:3f:95:15:7c:71:ec: f8:3a:a8:b6:e9:56:0f:1c:c0:44:5e:85:db:1b:e9: 1f:1c:36:ae:92:e0:06:f4:2d:93:75:2a:ae:8a:52: 53:17:e7:dd:68:25:73:92:c2:93:45:be:76:c5:c6: 0a:28:8e:9e:42:43:0e:0f:ad:8c:1a:36:3d:ef:1e: 10:b3:7b:7a:0a:e9:2b:b3:44:ee:c1:e7:6c:c6:50: cb:5e:6c:fb:2c:88:f2:8d:1d:05:c2:b1:e5:b9:84: 8c:69:5e:00:f7:af:16:f3:15:ec:84:08:08:c8:f6: 83:14:08:bb:fe:65:79:b4:6b:43:39:09:6d:d4:56: b7:c0:92:19:f6:39:32:1f:4c:e6:72:01:e4:1f:60: 26:c7:94:c9:26:1d:bf:d8:15:e6:17:36:9b:f7:7d: aa:a9:23:ac:7a:37:be:2e:5e:47:7a:33:64:0a:42: 0e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:3F:8B:D0:5F:6A:9C:77:8E:90:F9:7A:E5:27:56:BE:22:02:0D:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/436a90bc-0f2f-3d4a-b75b-c72f1175dd54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.187.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:0f:5d:35:69:50:2d:e3:3b:ac:e2:6c:ab:a7:9c:b1:31:70: 54:5e:36:2c:0f:e6:23:99:29:82:3f:3b:e8:0c:c8:0d:5a:58: 61:95:55:74:85:99:30:56:30:d4:c2:a7:ac:2d:d1:f6:4a:ec: be:7a:c0:f3:99:36:ff:b1:95:c8:56:ec:0b:56:e5:f7:97:2f: f8:d8:4c:1f:a9:e1:48:d0:8e:6b:75:46:fb:49:66:99:eb:47: 1b:d9:c1:32:d6:11:20:a9:0c:cd:dc:41:5d:14:b0:3a:7d:38: f8:d2:91:d2:a2:17:78:d7:cb:a5:c3:ce:2d:7c:31:f0:b5:ec: c1:11:c0:a8:be:9f:2e:a2:28:10:10:e4:17:c6:bc:13:93:f3: c3:d6:94:c6:ca:5f:f6:85:ca:de:4f:6a:16:23:f9:fe:8c:45: 86:2a:1a:0c:fd:15:41:6c:b5:31:1c:a3:c6:df:5e:57:b3:8f: 0b:8e:de:fe:92:74:aa:0c:ca:91:ab:52:ea:39:ce:9e:79:ea: 3c:5f:24:d0:cf:f0:db:16:68:c4:f0:4d:c6:86:24:4b:ee:73: bc:7d:9b:b5:fa:e1:55:f2:80:f9:8c:bd:17:5d:f0:f7:cb:6f: d0:a1:75:65:86:09:9f:0e:0d:56:22:c5:2b:8e:76:81:2a:b3: a7:38:f1:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMxqZPsBKxlixEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YjlkZWFkNmMtYjMwZS00MzFlLThlZDYtMTk5NmQ5ZWMwZmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYURDk+mn4PmIb3j+cH2ktourHp1sRMhfd3I MJl7OG8Wc5vYMSpindq36mFSRfOkqPaKcFhSNHdt0AkIclNt+uFhwYkHnzYc7aeu gjZ+ZKLkxPY/lRV8cez4Oqi26VYPHMBEXoXbG+kfHDaukuAG9C2TdSquilJTF+fd aCVzksKTRb52xcYKKI6eQkMOD62MGjY97x4Qs3t6Cukrs0TuwedsxlDLXmz7LIjy jR0FwrHluYSMaV4A968W8xXshAgIyPaDFAi7/mV5tGtDOQlt1Fa3wJIZ9jkyH0zm cgHkH2Amx5TJJh2/2BXmFzab932qqSOseje+Ll5HejNkCkIOfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGk/i9Bfapx3jpD5euUnVr4iAg1bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDM2YTkwYmMtMGYyZi0z ZDRhLWI3NWItYzcyZjExNzVkZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7vwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0PXTVpUC3jO6zibKunnLExcFReNiwP5iOZKYI/O+gMyA1aWGGVVXSF mTBWMNTCp6wt0fZK7L56wPOZNv+xlchW7AtW5feXL/jYTB+p4UjQjmt1RvtJZpnr RxvZwTLWESCpDM3cQV0UsDp9OPjSkdKiF3jXy6XDzi18MfC17MERwKi+ny6iKBAQ 5BfGvBOT88PWlMbKX/aFyt5PahYj+f6MRYYqGgz9FUFstTEco8bfXlezjwuO3v6S dKoMypGrUuo5zp556jxfJNDP8NsWaMTwTcaGJEvuc7x9m7X64VXygPmMvRdd8PfL b9ChdWWGCZ8ODVYixSuOdoEqs6c48YI= -----END CERTIFICATE-----Generated at Sat Apr 26 16:01:58 2025 by rpki-client