$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4871874b-4bd9-39e0-8216-30cbb562d513.roa File: 4871874b-4bd9-39e0-8216-30cbb562d513.roa (raw, json) Hash identifier: /nXT0/hIz+BxUD2/7B60VfJX0UstWun16e+MP1326Gs= Subject key identifier: FF:4B:01:70:7D:DE:43:E8:28:D0:B5:55:41:ED:B7:72:13:5A:36:A0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78519B6B34F0108ED78DDA0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4871874b-4bd9-39e0-8216-30cbb562d513.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.240.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:19:b6:b3:4f:01:08:ed:78:dd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=4e8d3028-0e9c-4a45-9d81-6dc514286b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:be:af:ed:fc:37:5f:88:ba:ec:5e:cf:16:d2: 15:6f:4f:fb:56:a8:43:93:59:3e:bc:b4:ab:d8:ad: 91:d5:ad:35:f2:4c:41:cf:6a:6e:fb:3e:64:0b:e4: e5:47:4b:b9:9c:a1:ca:95:5d:3b:f3:90:56:6d:56: 11:88:13:07:6a:7d:ec:91:7d:0a:a5:3b:59:9d:fb: 86:ad:a0:10:07:5d:51:29:e7:99:55:64:d8:a2:81: 21:d5:c6:87:8e:b6:0e:f5:40:00:84:80:fe:70:ed: 1f:07:91:b4:51:89:45:f4:3c:26:e2:31:95:7b:c9: 31:7b:ed:e5:a4:f6:4d:36:3f:da:fa:49:08:40:7e: 24:25:07:35:b6:8c:f4:50:0b:c8:c1:b1:d1:14:b5: 69:fc:b6:c3:bd:ef:d0:cb:5d:8d:b7:0e:c5:1b:c6: 7d:a5:44:c9:a8:65:f1:47:31:e4:ad:02:f3:06:55: 1d:5f:f2:8b:43:48:c4:10:ef:2d:1d:d7:2c:d3:24: c8:b6:53:02:da:58:45:b1:27:fe:82:51:70:a4:28: b8:7e:d1:7d:27:ad:27:f4:f5:86:d8:1d:bd:7e:45: a1:dd:c4:05:db:ed:81:50:1a:e1:06:96:16:c6:e5: 32:04:04:0c:32:a4:f6:ca:c8:13:8f:ee:d1:ab:fd: c8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:4B:01:70:7D:DE:43:E8:28:D0:B5:55:41:ED:B7:72:13:5A:36:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4871874b-4bd9-39e0-8216-30cbb562d513.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.240.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:bd:fd:f6:a5:06:fa:2a:79:1a:56:c4:e8:c7:34:87:63:c4: 03:74:03:a8:c0:e6:1c:d8:60:f7:42:c4:c8:4a:9c:1c:79:05: 88:a7:72:47:3a:4d:c2:f9:3d:5b:0f:96:ee:70:98:54:0b:9d: e3:76:8d:d3:61:0f:39:7d:e0:da:86:bf:bf:c1:4d:c5:6c:98: ea:ad:95:49:a8:44:22:b0:32:89:b7:d7:01:e8:9e:fa:a6:c4: c2:fc:e8:3d:38:c3:4a:b8:08:a7:e8:a4:a0:0a:53:db:95:f2: 1f:0d:52:0e:46:75:f1:bd:4f:a9:5f:3f:d2:1c:24:0f:4d:0b: b5:a2:1c:dc:a6:ba:42:a5:40:a9:bb:63:b3:fc:17:89:0a:e9: a7:47:08:e0:4d:34:7a:1a:5f:73:e0:e5:6d:24:2a:71:fa:cc: a8:1a:4e:36:72:1f:27:4b:44:d3:94:9f:cd:14:e4:0b:93:74: 4d:9e:0a:60:59:18:13:64:0a:70:5c:dd:c3:e4:99:b4:2b:3f: d9:41:4c:01:b8:0b:83:fe:5b:ed:e6:e9:df:a3:5e:eb:ba:cb: a7:24:ae:b9:22:62:8e:65:5c:10:28:9e:b7:22:80:41:d6:c1: a1:d8:11:1c:35:02:41:6d:f6:7e:b3:a5:c7:9a:ec:70:cc:49: 89:f2:c9:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRm2s08BCO143aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NGU4ZDMwMjgtMGU5Yy00YTQ1LTlkODEtNmRjNTE0Mjg2YjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0r6v7fw3X4i67F7PFtIVb0/7VqhDk1k+vLSr 2K2R1a018kxBz2pu+z5kC+TlR0u5nKHKlV0785BWbVYRiBMHan3skX0KpTtZnfuG raAQB11RKeeZVWTYooEh1caHjrYO9UAAhID+cO0fB5G0UYlF9Dwm4jGVe8kxe+3l pPZNNj/a+kkIQH4kJQc1toz0UAvIwbHRFLVp/LbDve/Qy12Ntw7FG8Z9pUTJqGXx RzHkrQLzBlUdX/KLQ0jEEO8tHdcs0yTItlMC2lhFsSf+glFwpCi4ftF9J60n9PWG 2B29fkWh3cQF2+2BUBrhBpYWxuUyBAQMMqT2ysgTj+7Rq/3IzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9LAXB93kPoKNC1VUHtt3ITWjagMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDg3MTg3NGItNGJkOS0z OWUwLTgyMTYtMzBjYmI1NjJkNTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/AwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEi9/falBvoqeRpWxOjHNIdjxAN0A6jA5hzYYPdCxMhKnBx5BYinckc6 TcL5PVsPlu5wmFQLneN2jdNhDzl94NqGv7/BTcVsmOqtlUmoRCKwMom31wHonvqm xML86D04w0q4CKfopKAKU9uV8h8NUg5GdfG9T6lfP9IcJA9NC7WiHNymukKlQKm7 Y7P8F4kK6adHCOBNNHoaX3Pg5W0kKnH6zKgaTjZyHydLRNOUn80U5AuTdE2eCmBZ GBNkCnBc3cPkmbQrP9lBTAG4C4P+W+3m6d+jXuu6y6ckrrkiYo5lXBAonrcigEHW waHYERw1AkFt9n6zpcea7HDMSYnyyUA= -----END CERTIFICATE-----Generated at Sat Apr 26 18:08:39 2025 by rpki-client