$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52b9faca-f0b2-3cf8-a680-4b7c053bb25d.roa File: 52b9faca-f0b2-3cf8-a680-4b7c053bb25d.roa (raw, json) Hash identifier: FEvqZt0LYsyOxRhhxcgQOf4Fe0UvVAC6ZBSaxDSOiVc= Subject key identifier: 3C:00:47:E5:CE:E4:E2:57:7E:04:E6:0B:36:DA:C9:F6:BD:FA:6E:22 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7853FD3701A97DB5B893180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52b9faca-f0b2-3cf8-a680-4b7c053bb25d.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.202.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:3f:d3:70:1a:97:db:5b:89:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=52d3a0c8-38f4-4091-bc4b-b02921e871ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:65:67:43:29:69:47:6e:d4:f8:03:35:39:55: b1:9e:86:9e:4f:da:10:3c:07:85:80:e6:04:04:17: 71:02:f1:f1:56:89:29:33:2a:9a:03:37:35:28:de: 42:2b:a7:0e:8f:10:4b:e5:8f:05:ca:54:45:2e:1c: 41:9b:9b:f9:92:a3:af:b3:a6:24:21:84:e4:36:32: 50:ce:5b:29:66:bb:e1:43:ab:74:37:bc:97:f3:8d: 86:21:57:eb:11:a9:a3:88:02:3e:7d:2a:7c:fd:eb: dd:74:ca:bb:10:da:ea:ae:e9:f0:d2:bb:4f:15:4a: e2:fb:c2:e9:fe:cd:4f:b5:7b:3a:1e:95:1e:d3:a0: 0c:50:3b:ee:0b:cb:ea:22:1f:3e:62:64:44:1f:29: 53:33:55:65:cc:ae:e1:5f:12:59:30:dd:d1:54:7f: e8:a1:9d:95:aa:8f:a3:3f:fe:c8:7f:51:e3:09:df: e3:e0:fe:28:d3:5a:c4:34:aa:e5:c1:74:ad:8c:37: 5c:36:4e:c3:dd:18:96:da:c3:ab:f3:33:d8:3a:09: c5:b5:f3:e5:7d:f0:20:06:b8:fc:aa:f9:87:19:5d: 93:ae:dd:94:5f:1c:71:67:9d:32:e2:21:7a:67:bc: de:77:82:d5:51:f5:85:98:98:51:20:18:f3:fd:4e: 09:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:00:47:E5:CE:E4:E2:57:7E:04:E6:0B:36:DA:C9:F6:BD:FA:6E:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52b9faca-f0b2-3cf8-a680-4b7c053bb25d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.202.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:58:0f:ff:2d:65:3b:82:32:c5:78:26:41:f3:c9:dd:57:76: c1:75:d5:75:b6:c4:27:a7:39:7d:5a:c4:3f:88:f1:51:c4:2e: 5b:05:4e:9e:95:8c:63:c5:d0:a4:d3:1e:fa:1a:6e:55:92:ad: f0:e5:7f:5b:11:8c:34:da:fb:0d:7e:81:2f:31:17:51:1b:b3: 21:58:39:43:1d:16:35:10:e8:cf:31:54:a2:b8:14:42:8c:ea: c3:95:9d:46:56:18:3d:e7:c9:3c:a2:32:ef:da:fb:40:a1:65: 8a:dc:70:1b:27:00:33:73:b8:23:6c:68:83:1b:26:69:41:96: b7:9f:5c:b4:81:4e:7e:b5:9b:16:03:b5:37:20:65:f4:0d:07: 8d:d5:30:d9:b0:8e:60:ae:cf:a3:1c:29:cd:a3:64:6d:1d:32: 1f:be:f0:7b:93:bf:9b:f8:c9:30:ea:01:2e:f9:25:40:75:eb: 95:be:37:c5:bc:a6:94:e0:c6:25:4f:20:f1:3d:db:1a:17:01: 53:8f:d5:96:0d:52:f2:90:ea:7f:c7:7e:37:7f:21:ab:fb:13: f2:ad:8b:f2:62:e1:1e:cd:74:ba:ba:92:76:92:c7:af:1d:b6: 6f:e6:f1:4c:3c:61:90:00:b1:9c:9d:6c:11:5f:ec:04:dd:21: b9:89:47:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhT/TcBqX21uJMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NTJkM2EwYzgtMzhmNC00MDkxLWJjNGItYjAyOTIxZTg3MWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2VnQylpR27U+AM1OVWxnoaeT9oQPAeFgOYE BBdxAvHxVokpMyqaAzc1KN5CK6cOjxBL5Y8FylRFLhxBm5v5kqOvs6YkIYTkNjJQ zlspZrvhQ6t0N7yX842GIVfrEamjiAI+fSp8/evddMq7ENrqrunw0rtPFUri+8Lp /s1PtXs6HpUe06AMUDvuC8vqIh8+YmREHylTM1VlzK7hXxJZMN3RVH/ooZ2Vqo+j P/7If1HjCd/j4P4o01rENKrlwXStjDdcNk7D3RiW2sOr8zPYOgnFtfPlffAgBrj8 qvmHGV2Trt2UXxxxZ50y4iF6Z7zed4LVUfWFmJhRIBjz/U4JDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwAR+XO5OJXfgTmCzbayfa9+m4iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTJiOWZhY2EtZjBiMi0z Y2Y4LWE2ODAtNGI3YzA1M2JiMjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8qQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRYD/8tZTuCMsV4JkHzyd1XdsF11XW2xCenOX1axD+I8VHELlsFTp6V jGPF0KTTHvoablWSrfDlf1sRjDTa+w1+gS8xF1EbsyFYOUMdFjUQ6M8xVKK4FEKM 6sOVnUZWGD3nyTyiMu/a+0ChZYrccBsnADNzuCNsaIMbJmlBlrefXLSBTn61mxYD tTcgZfQNB43VMNmwjmCuz6McKc2jZG0dMh++8HuTv5v4yTDqAS75JUB165W+N8W8 ppTgxiVPIPE92xoXAVOP1ZYNUvKQ6n/Hfjd/Iav7E/Kti/Ji4R7NdLq6knaSx68d tm/m8Uw8YZAAsZydbBFf7ATdIbmJRzs= -----END CERTIFICATE-----Generated at Sat Apr 26 16:07:25 2025 by rpki-client