$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/491428b9-829e-3245-93b9-d7e91070c389.roa File: 491428b9-829e-3245-93b9-d7e91070c389.roa (raw, json) Hash identifier: SYCmsflkDsCnM7reQHCbeNtQLrOUCRhfhhLtNAWcEX8= Subject key identifier: 5E:F4:38:80:9F:5A:7B:33:D6:66:35:1A:16:D7:A2:58:AE:9F:FA:E4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7851884F3F91C83B6C5ECE0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/491428b9-829e-3245-93b9-d7e91070c389.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.239.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:18:84:f3:f9:1c:83:b6:c5:ec:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=6a069139-7a6a-4cc7-b7b4-c00fe35c5fd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ad:5e:37:45:59:8c:38:7a:13:c1:04:35:41: 7c:62:7f:c3:c2:09:b7:88:2f:9a:64:b0:42:ae:b3: 9b:7e:2a:dd:66:4c:d0:d1:ae:0e:49:1a:e9:72:20: 48:56:55:22:7f:31:ce:44:c7:5f:8f:fc:8a:bf:e6: 16:f8:6a:59:0c:25:f1:ed:20:13:43:69:94:ea:fa: 52:a5:73:12:f8:11:d0:cf:16:58:b8:b9:cf:fa:b9: 47:76:23:16:50:e4:8f:8f:be:bf:47:8d:dc:14:89: e1:b9:ee:70:be:bc:a4:d5:46:48:b8:b6:bd:c2:fd: b2:3c:44:e7:17:58:ff:8f:dd:07:4d:ed:3b:d9:d8: 23:ad:e3:6b:57:b8:44:29:bb:b5:8d:58:65:2d:c3: 53:03:ec:86:53:0b:0b:cf:6f:b0:4f:f1:33:f7:c7: 7e:e5:7f:3c:e3:aa:82:6e:40:eb:8f:0f:d0:30:07: c9:46:31:5d:68:3b:58:04:12:ad:24:9f:bc:f1:2c: c6:e4:82:23:15:e4:66:fa:14:d9:74:11:05:9e:88: 5d:4f:97:b0:2d:f6:42:ea:be:14:ac:1c:f3:82:c7: b6:60:8f:f2:0d:21:cd:ec:68:45:6b:57:5c:02:a0: af:17:14:d0:ac:2f:74:3f:16:59:32:df:37:cf:54: 54:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F4:38:80:9F:5A:7B:33:D6:66:35:1A:16:D7:A2:58:AE:9F:FA:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/491428b9-829e-3245-93b9-d7e91070c389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.239.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:92:31:9d:50:20:9d:b5:b3:5f:6c:f3:23:98:05:81:df:3d: 33:90:b4:42:15:6d:b1:62:f4:07:09:54:c6:8f:83:3e:54:30: 29:97:f9:3c:a0:c6:65:2e:08:ee:ef:a2:e3:0c:b8:b0:b2:a1: 0b:29:01:3f:7a:a0:5f:c0:1c:91:70:10:e0:29:1f:ad:70:f6: 3d:15:66:1c:3c:11:70:47:05:e8:6a:2e:2e:60:f6:26:e9:18: 28:b2:e4:8d:9f:b0:63:fc:bd:9e:6d:28:e5:09:98:63:bb:54: 80:8f:af:ec:c0:1a:ee:70:24:fb:e2:fe:4e:07:57:fe:c6:ce: 18:00:76:15:21:c2:30:6d:b3:a5:ba:a0:ad:ce:9e:6c:5e:60: 53:b6:d2:dd:85:91:f3:24:76:ff:7e:4d:e5:b1:f6:08:27:89: 1b:eb:bf:c9:23:34:4e:df:fb:13:00:11:62:c0:58:0d:ed:83: f9:a0:52:dd:c3:62:cd:96:99:a5:fe:96:5a:5d:ff:62:0f:9f: 8a:ad:31:00:bf:f3:a9:6a:67:81:c2:9a:f0:bd:74:ca:57:b6: c1:72:12:50:fa:16:67:b1:2e:63:f5:ab:84:6a:6d:c4:19:5c: 5b:2b:86:2d:16:c4:38:e9:47:5f:3b:4a:45:77:98:ec:2e:43: d7:32:f9:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRiE8/kcg7bF7OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NmEwNjkxMzktN2E2YS00Y2M3LWI3YjQtYzAwZmUzNWM1ZmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK1eN0VZjDh6E8EENUF8Yn/Dwgm3iC+aZLBC rrObfirdZkzQ0a4OSRrpciBIVlUifzHORMdfj/yKv+YW+GpZDCXx7SATQ2mU6vpS pXMS+BHQzxZYuLnP+rlHdiMWUOSPj76/R43cFInhue5wvryk1UZIuLa9wv2yPETn F1j/j90HTe072dgjreNrV7hEKbu1jVhlLcNTA+yGUwsLz2+wT/Ez98d+5X8846qC bkDrjw/QMAfJRjFdaDtYBBKtJJ+88SzG5IIjFeRm+hTZdBEFnohdT5ewLfZC6r4U rBzzgse2YI/yDSHN7GhFa1dcAqCvFxTQrC90PxZZMt83z1RUJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF70OICfWnsz1mY1GhbXoliun/rkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDkxNDI4YjktODI5ZS0z MjQ1LTkzYjktZDdlOTEwNzBjMzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCSMZ1QIJ21s19s8yOYBYHfPTOQtEIVbbFi9AcJVMaPgz5UMCmX+Tyg xmUuCO7vouMMuLCyoQspAT96oF/AHJFwEOApH61w9j0VZhw8EXBHBehqLi5g9ibp GCiy5I2fsGP8vZ5tKOUJmGO7VICPr+zAGu5wJPvi/k4HV/7GzhgAdhUhwjBts6W6 oK3OnmxeYFO20t2FkfMkdv9+TeWx9ggniRvrv8kjNE7f+xMAEWLAWA3tg/mgUt3D Ys2WmaX+llpd/2IPn4qtMQC/86lqZ4HCmvC9dMpXtsFyElD6FmexLmP1q4RqbcQZ XFsrhi0WxDjpR187SkV3mOwuQ9cy+TA= -----END CERTIFICATE-----Generated at Sat Apr 26 14:55:59 2025 by rpki-client