$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/491d92ac-1ea7-36bc-9147-49134bad70d4.roa File: 491d92ac-1ea7-36bc-9147-49134bad70d4.roa (raw, json) Hash identifier: E6rrgP7J6+RMEo/5Sx4WvGRg7YRsCUqWsLLX/DX0Wvw= Subject key identifier: B7:EE:53:B6:1C:3B:0B:CC:C9:B6:89:98:7E:9A:47:E0:FD:9F:D1:5A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784DFC6D300010CCB0FD6C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/491d92ac-1ea7-36bc-9147-49134bad70d4.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.238.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:df:c6:d3:00:01:0c:cb:0f:d6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=bd511397-59d1-4b98-a634-99c948d9854d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:41:17:21:5f:f4:42:61:44:1b:f2:c7:2f:cd: 1a:56:05:b1:42:de:f5:1a:65:39:e2:01:65:ef:aa: e9:0d:57:e0:b6:5e:8f:cd:59:de:a2:76:5c:85:79: 5a:8c:14:ee:ce:7b:a4:48:b9:93:e3:75:68:3f:63: d7:e5:e2:54:f3:bb:af:3a:34:ff:a1:3e:8d:6c:c8: 98:13:07:60:ea:a4:2c:3a:c9:92:b3:b2:51:35:12: 28:91:e9:24:e3:f4:15:99:c2:4b:23:f0:fd:46:60: 02:27:da:a3:a5:65:ea:71:56:38:73:7e:3b:68:15: fd:b4:98:f3:10:7b:81:7b:6e:36:b3:b2:2f:42:af: 92:c4:7c:44:5b:c1:6c:b2:b7:82:90:06:2d:c3:16: 18:16:8f:3a:fe:f5:15:32:f5:8b:12:c2:80:91:09: 6e:48:74:ac:ba:85:d7:0e:c1:45:31:0d:0d:b6:8b: 72:8a:56:66:27:e6:91:12:2c:40:76:cf:5e:80:34: 90:2c:c9:8b:47:ed:1e:a6:b4:40:6d:ef:9e:c4:88: d8:a8:4e:75:90:cd:89:40:09:91:3a:67:65:07:45: 18:c9:a1:e8:86:c6:ff:81:c6:fc:06:57:ed:71:50: 01:d4:91:e8:89:d1:b0:0c:5d:41:cc:68:99:0e:57: 54:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:EE:53:B6:1C:3B:0B:CC:C9:B6:89:98:7E:9A:47:E0:FD:9F:D1:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/491d92ac-1ea7-36bc-9147-49134bad70d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:2a:d1:bc:85:06:60:d4:0a:c1:b0:04:ac:6a:00:38:04:71: f7:a9:13:15:db:b0:d6:e7:9c:e5:b9:63:d6:ba:de:b8:ab:ad: c6:bd:97:31:bd:ad:6e:da:20:a3:7d:37:e8:52:22:81:28:c1: 06:54:54:43:40:b7:6b:bb:7f:e7:91:e0:6b:b9:1d:a9:5c:2f: 26:f3:17:24:0b:12:39:44:4f:e8:35:75:40:99:a5:57:69:b9: b2:c6:65:32:0e:9f:ec:09:9a:40:90:58:17:8f:1a:2c:4f:fe: f5:97:49:ad:86:53:4b:b4:2b:c1:c4:cd:3d:f8:46:7f:83:01: e4:d1:0f:39:cc:2a:3f:4e:fe:6f:9e:30:b6:77:49:f9:6b:d8: 4b:93:19:71:1e:ff:1d:a4:06:f9:d0:00:14:41:1c:f3:ad:88: 76:29:d6:97:74:e3:44:bd:27:c2:65:5d:bd:a0:87:17:3c:f5: 81:e5:39:00:94:89:e7:c4:b6:3d:43:56:62:52:6c:9e:e5:c9: 93:42:a1:37:0e:0a:e7:4d:6e:65:5f:d5:bd:15:b4:e9:4b:d8: 72:37:bb:f6:8e:05:58:7e:8d:90:0b:66:c2:23:a4:6e:d2:e8: c4:ec:32:df:52:92:18:ed:14:24:c3:4c:f2:ea:73:37:8b:67: 77:a1:a7:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhN/G0wABDMsP1sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YmQ1MTEzOTctNTlkMS00Yjk4LWE2MzQtOTljOTQ4ZDk4NTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikEXIV/0QmFEG/LHL80aVgWxQt71GmU54gFl 76rpDVfgtl6PzVneonZchXlajBTuznukSLmT43VoP2PX5eJU87uvOjT/oT6NbMiY Ewdg6qQsOsmSs7JRNRIokekk4/QVmcJLI/D9RmACJ9qjpWXqcVY4c347aBX9tJjz EHuBe242s7IvQq+SxHxEW8FssreCkAYtwxYYFo86/vUVMvWLEsKAkQluSHSsuoXX DsFFMQ0NtotyilZmJ+aREixAds9egDSQLMmLR+0eprRAbe+exIjYqE51kM2JQAmR OmdlB0UYyaHohsb/gcb8BlftcVAB1JHoidGwDF1BzGiZDldUgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfuU7YcOwvMybaJmH6aR+D9n9FaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDkxZDkyYWMtMWVhNy0z NmJjLTkxNDctNDkxMzRiYWQ3MGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgq0byFBmDUCsGwBKxqADgEcfepExXbsNbnnOW5Y9a63rirrca9lzG9 rW7aIKN9N+hSIoEowQZUVENAt2u7f+eR4Gu5HalcLybzFyQLEjlET+g1dUCZpVdp ubLGZTIOn+wJmkCQWBePGixP/vWXSa2GU0u0K8HEzT34Rn+DAeTRDznMKj9O/m+e MLZ3Sflr2EuTGXEe/x2kBvnQABRBHPOtiHYp1pd040S9J8JlXb2ghxc89YHlOQCU iefEtj1DVmJSbJ7lyZNCoTcOCudNbmVf1b0VtOlL2HI3u/aOBVh+jZALZsIjpG7S 6MTsMt9SkhjtFCTDTPLqczeLZ3ehp0A= -----END CERTIFICATE-----Generated at Sat Apr 26 16:39:44 2025 by rpki-client