$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5899eaf1-4aac-378e-b6cc-b484a2849734.roa File: 5899eaf1-4aac-378e-b6cc-b484a2849734.roa (raw, json) Hash identifier: jwT7PbgP8WtYbq1k7fb8LmEjyARwjLfOHoOtQNq3YzU= Subject key identifier: DF:3E:D2:35:33:50:5F:A3:0E:F0:CB:0E:AD:9A:6E:23:CC:5D:9F:C9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7852DF282C82644E3349580 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5899eaf1-4aac-378e-b6cc-b484a2849734.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.243.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:2d:f2:82:c8:26:44:e3:34:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=51d6bd4d-cbd9-4ab8-ac5d-cf3aea961554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f8:bf:85:3a:91:ae:7b:57:16:3c:74:7d:ed: 9e:57:1c:cd:4c:42:9e:4d:9d:22:32:80:2a:38:ec: a0:7e:cc:fb:cb:29:cf:30:39:c8:69:89:0d:84:21: 94:41:e7:18:ee:9d:9f:15:55:7b:77:52:6e:ad:28: b0:8a:87:50:46:18:7c:4d:d9:3e:5f:4d:47:b6:cc: ed:dc:b7:42:2d:f0:5f:4d:04:b3:de:bd:61:18:76: 3d:2f:0c:6e:86:39:a1:c7:e9:f3:3d:b3:af:9d:25: 3d:a8:ef:fd:54:d3:b0:39:11:11:c6:1e:6a:7b:ae: 0d:82:f6:b1:6d:42:d8:85:fd:85:97:bb:83:7c:36: 25:9f:0d:69:e4:cc:c3:2c:17:b7:35:ae:fe:42:93: 3f:5a:08:c9:cc:0b:98:f8:96:08:a8:43:8c:10:f3: 09:bc:50:dc:a1:9a:36:7c:a2:7b:84:7d:7f:60:93: 11:e4:30:5a:e3:83:7a:5f:e1:13:6c:3f:67:27:a1: d4:db:43:bf:3e:43:35:59:28:40:67:b5:25:9d:9c: c5:4c:36:60:bc:70:9e:33:a5:5e:5f:4c:10:16:b6: 52:30:60:07:81:0e:cf:25:4a:d3:19:24:ac:4a:36: 12:aa:49:bc:f5:e4:fd:4d:3a:3f:3e:88:1c:e7:45: 6e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:3E:D2:35:33:50:5F:A3:0E:F0:CB:0E:AD:9A:6E:23:CC:5D:9F:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5899eaf1-4aac-378e-b6cc-b484a2849734.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.243.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:bb:67:56:53:8f:b4:b6:19:81:38:3a:70:7b:d1:44:ec:b0: 55:97:24:f1:11:ca:bb:ec:aa:8a:62:b8:11:75:ca:14:1c:a2: 89:f1:17:a0:88:e0:15:6d:04:ab:c5:cd:07:81:b7:c6:da:fb: aa:13:df:ad:5b:d4:39:2b:af:17:d8:4b:ce:27:b2:71:f5:a5: e9:74:8b:e7:d7:cd:6a:0e:b2:36:60:3c:de:cf:ce:d2:90:34: a4:fc:44:d2:d8:30:42:a8:9d:aa:76:d4:8c:4d:d8:6c:5c:fe: bc:a8:20:75:91:e3:39:e2:fc:57:b0:48:94:20:ba:72:5f:f7: f3:96:fa:48:d2:f9:de:cc:e5:b6:4d:e7:ad:e1:b9:0c:28:17: 09:1b:f8:f1:b2:4d:a3:93:a7:ed:e4:57:e5:32:7a:f1:2f:ff: 63:6a:b2:70:d9:24:25:bc:39:53:eb:20:eb:96:72:2a:d1:96: ca:aa:2b:14:11:34:59:58:94:65:12:48:2d:9e:3d:f0:04:64: 62:fd:17:24:0e:20:72:90:36:9e:3c:75:3c:86:09:b3:7e:e0: ba:99:12:6e:1e:43:1f:64:f6:64:b5:7e:3a:83:8b:70:93:d9: ac:5b:b4:3e:f7:6b:7e:a4:e1:0d:2d:c5:0c:ab:41:58:6f:25: 99:e8:0a:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhS3ygsgmROM0lYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NTFkNmJkNGQtY2JkOS00YWI4LWFjNWQtY2YzYWVhOTYxNTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifi/hTqRrntXFjx0fe2eVxzNTEKeTZ0iMoAq OOygfsz7yynPMDnIaYkNhCGUQecY7p2fFVV7d1JurSiwiodQRhh8Tdk+X01Htszt 3LdCLfBfTQSz3r1hGHY9Lwxuhjmhx+nzPbOvnSU9qO/9VNOwORERxh5qe64Ngvax bULYhf2Fl7uDfDYlnw1p5MzDLBe3Na7+QpM/WgjJzAuY+JYIqEOMEPMJvFDcoZo2 fKJ7hH1/YJMR5DBa44N6X+ETbD9nJ6HU20O/PkM1WShAZ7UlnZzFTDZgvHCeM6Ve X0wQFrZSMGAHgQ7PJUrTGSSsSjYSqkm89eT9TTo/Pogc50VuWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8+0jUzUF+jDvDLDq2abiPMXZ/JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTg5OWVhZjEtNGFhYy0z NzhlLWI2Y2MtYjQ4NGEyODQ5NzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/PgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKa7Z1ZTj7S2GYE4OnB70UTssFWXJPERyrvsqopiuBF1yhQcoonxF6CI 4BVtBKvFzQeBt8ba+6oT361b1DkrrxfYS84nsnH1pel0i+fXzWoOsjZgPN7PztKQ NKT8RNLYMEKonap21IxN2Gxc/ryoIHWR4zni/FewSJQgunJf9/OW+kjS+d7M5bZN 563huQwoFwkb+PGyTaOTp+3kV+UyevEv/2NqsnDZJCW8OVPrIOuWcirRlsqqKxQR NFlYlGUSSC2ePfAEZGL9FyQOIHKQNp48dTyGCbN+4LqZEm4eQx9k9mS1fjqDi3CT 2axbtD73a36k4Q0txQyrQVhvJZnoCvg= -----END CERTIFICATE-----Generated at Sat Apr 26 16:40:01 2025 by rpki-client