$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4cec3286-2d4b-3b25-ae1b-38e6039547d6.roa File: 4cec3286-2d4b-3b25-ae1b-38e6039547d6.roa (raw, json) Hash identifier: rgRoYAUnqhceiVHlJnCRAgs8qwwz81lpTG8AotdK0So= Subject key identifier: D3:15:D3:C5:9F:3A:9B:29:4B:EC:A1:A1:C2:6F:C8:C0:05:55:85:85 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784FA4850257402B401DC80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4cec3286-2d4b-3b25-ae1b-38e6039547d6.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.246.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:fa:48:50:25:74:02:b4:01:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=606b2185-581a-4783-98e5-9e93dae44d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:93:bf:2d:4c:11:a4:cd:20:0d:40:49:f5:c4: 65:ee:b4:fb:72:0a:79:d1:e7:90:ea:dd:45:e7:7d: 5f:69:99:3d:48:25:c0:ed:96:93:ea:41:00:54:8c: 36:9a:93:d7:fd:52:2c:98:90:cb:7e:19:b0:a5:b6: 65:85:37:3f:11:ec:93:d7:6a:e7:5a:35:54:15:0b: 0f:e6:1b:6b:eb:13:aa:ce:bd:84:7c:83:22:3f:db: 9f:73:d5:3c:69:d9:9e:15:bf:35:7d:13:d7:24:2c: 00:2d:7b:c9:31:86:98:1b:44:6b:2a:60:68:96:4f: 6a:24:af:ad:bf:b8:62:17:f8:a0:e9:60:24:ba:34: f5:39:45:73:08:38:ba:a2:c0:fe:6c:1e:6f:29:15: 1a:d5:37:ec:58:98:3c:b4:d6:bb:5f:dd:55:68:89: 63:ac:bd:62:90:05:9c:24:45:51:90:90:08:15:45: 26:06:dd:b3:19:76:ca:b1:e0:05:98:9d:30:ec:b5: 16:9d:de:1c:b1:b0:d2:ec:6f:5f:77:9f:9a:fe:ee: ad:1c:65:44:21:64:5a:b4:af:ec:7a:2e:e2:52:07: fa:15:18:f8:51:4c:36:6e:1b:fe:b5:8f:be:7b:95: 4e:47:2f:bc:5f:f8:d8:88:dd:69:2d:4d:91:32:f1: b5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:15:D3:C5:9F:3A:9B:29:4B:EC:A1:A1:C2:6F:C8:C0:05:55:85:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4cec3286-2d4b-3b25-ae1b-38e6039547d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.246.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:7e:ec:94:6a:5b:2a:1f:cd:c2:e0:ad:fa:75:a8:0b:47:dd: 5a:24:2d:2e:fb:15:f1:7e:f3:fa:5b:d2:dd:0d:86:ed:23:9b: d0:02:92:62:80:6c:33:f9:46:a7:80:eb:5f:9b:bf:0b:1f:d4: 39:8d:c3:06:8d:32:1d:50:69:f4:aa:1a:7d:19:94:14:3f:e2: 49:30:5f:83:a1:1d:a0:48:28:ef:0f:77:8b:69:f4:fc:d6:9d: 6a:ff:5e:fb:3c:ab:6a:02:67:2d:2e:6b:1b:2d:49:b9:93:6d: b0:f2:8a:d2:fb:a7:c0:77:84:36:f1:8e:da:0d:b7:72:d1:0e: b6:a8:a9:f3:e0:20:26:d5:2e:8b:3e:b8:b2:a1:d7:80:d1:b2: 33:da:6f:5a:0a:22:64:7c:de:11:17:42:1e:78:6e:8e:6f:4c: 15:8b:f4:ea:d9:d1:06:59:6e:73:df:a9:5a:bb:61:e8:d9:7f: 1a:8c:1b:00:b6:51:02:89:76:1e:d3:bd:e0:30:2d:31:f5:93: 6a:e4:4b:5a:c0:b0:da:6f:b5:a7:3c:bf:6b:b5:99:0f:36:42: a1:66:dc:9e:20:13:f3:13:fd:f8:53:81:03:f1:8a:b4:8c:75: 1e:47:98:bb:be:ad:d2:af:68:84:cd:44:bb:61:f6:79:f1:8b: e7:af:31:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPpIUCV0ArQB3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NjA2YjIxODUtNTgxYS00NzgzLTk4ZTUtOWU5M2RhZTQ0ZDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpO/LUwRpM0gDUBJ9cRl7rT7cgp50eeQ6t1F 531faZk9SCXA7ZaT6kEAVIw2mpPX/VIsmJDLfhmwpbZlhTc/EeyT12rnWjVUFQsP 5htr6xOqzr2EfIMiP9ufc9U8admeFb81fRPXJCwALXvJMYaYG0RrKmBolk9qJK+t v7hiF/ig6WAkujT1OUVzCDi6osD+bB5vKRUa1TfsWJg8tNa7X91VaIljrL1ikAWc JEVRkJAIFUUmBt2zGXbKseAFmJ0w7LUWnd4csbDS7G9fd5+a/u6tHGVEIWRatK/s ei7iUgf6FRj4UUw2bhv+tY++e5VORy+8X/jYiN1pLU2RMvG1OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMV08WfOpspS+yhocJvyMAFVYWFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGNlYzMyODYtMmQ0Yi0z YjI1LWFlMWItMzhlNjAzOTU0N2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/bwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZ+7JRqWyofzcLgrfp1qAtH3VokLS77FfF+8/pb0t0Nhu0jm9ACkmKA bDP5RqeA61+bvwsf1DmNwwaNMh1QafSqGn0ZlBQ/4kkwX4OhHaBIKO8Pd4tp9PzW nWr/Xvs8q2oCZy0uaxstSbmTbbDyitL7p8B3hDbxjtoNt3LRDraoqfPgICbVLos+ uLKh14DRsjPab1oKImR83hEXQh54bo5vTBWL9OrZ0QZZbnPfqVq7YejZfxqMGwC2 UQKJdh7TveAwLTH1k2rkS1rAsNpvtac8v2u1mQ82QqFm3J4gE/MT/fhTgQPxirSM dR5HmLu+rdKvaITNRLth9nnxi+evMR8= -----END CERTIFICATE-----Generated at Sat Apr 26 18:10:22 2025 by rpki-client