$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/63a799f7-620c-3e6d-a174-e979e3a9bd06.roa File: 63a799f7-620c-3e6d-a174-e979e3a9bd06.roa (raw, json) Hash identifier: vaK0NTRxNFBwi3MKG1kh7KSteM3TPopVhc089iIiBkI= Subject key identifier: 8D:B6:39:A4:48:10:85:5C:EE:DA:61:B1:69:B7:89:4F:C4:8A:6B:34 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784EA9414CBD18579346E00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/63a799f7-620c-3e6d-a174-e979e3a9bd06.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.238.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ea:94:14:cb:d1:85:79:34:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=5c9e2100-4e8d-4504-9f21-03082daaf82a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:00:1f:6a:e5:05:64:5c:d9:79:c3:3a:2c:07: 8a:6a:3a:55:f3:a5:75:89:bf:19:bd:f6:0c:92:c8: 19:75:9b:08:f4:76:5d:4d:90:c3:cc:9b:f6:4b:04: 2d:78:8d:2a:c0:3d:b7:c5:95:a8:4a:a1:24:5a:3b: c3:c8:a8:d7:e6:d6:31:6a:6b:4e:18:47:2b:a3:37: d2:78:fa:95:7e:00:d8:47:1b:26:1f:86:02:bb:a1: a5:3c:a3:78:37:6c:bc:79:8a:10:32:be:f0:a0:41: bb:0d:3a:6d:cb:a0:df:66:1b:53:cf:49:0b:4f:65: 8d:02:0c:35:6f:36:37:fd:7c:e5:67:3e:5b:a7:83: 7b:3c:ee:c3:84:2b:86:3d:e8:c4:6f:f6:ac:07:5c: b8:65:66:8d:ca:98:b0:4a:b0:f8:40:09:58:87:80: 37:07:ed:7f:d3:85:a2:d3:ce:ac:55:be:a1:cc:26: ee:c3:b6:69:fd:76:c5:d4:b9:42:38:47:3c:90:f4: 3c:f9:01:f7:33:56:7d:a1:5c:4b:f8:0b:1d:59:e8: c5:25:ea:1f:30:70:70:dc:b4:2d:7c:17:66:48:fe: 3b:02:fb:bd:b4:6a:af:0b:3a:d6:0b:33:73:03:d6: f5:20:32:93:07:2c:43:03:1e:cb:24:62:b6:93:23: 05:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B6:39:A4:48:10:85:5C:EE:DA:61:B1:69:B7:89:4F:C4:8A:6B:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/63a799f7-620c-3e6d-a174-e979e3a9bd06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:31:85:f8:87:b7:c1:da:4b:06:50:c9:d6:3a:b9:3d:63:a4: 6b:7e:79:e3:c0:72:81:b6:92:b0:9d:86:2a:04:b1:8d:c7:a7: 40:d7:5f:b0:76:e1:6d:05:0f:37:b4:cd:72:52:fb:5c:4a:4e: 20:a3:0e:8c:f3:39:9e:9b:7b:8e:1c:1f:d7:ec:d7:cd:83:f7: a3:61:69:97:ce:ed:ac:ea:2e:c1:f6:ec:70:6b:ba:b8:fb:d4: 03:fe:ce:25:58:fb:28:b3:95:70:05:f8:93:b5:65:95:66:99: d1:fa:0c:0f:3c:56:90:18:67:3f:1a:21:24:17:34:c8:70:e9: 91:78:f9:11:53:1a:0c:f8:9f:4d:c9:1c:82:82:03:de:7b:95: 55:bf:3c:29:77:03:ec:ff:68:67:7f:8c:6d:9b:c1:f2:b3:d8: a2:21:10:07:4a:d0:d5:1f:e9:6c:0c:53:81:cd:0f:5d:a2:24: 0e:17:b3:28:35:70:43:84:a9:7e:95:43:d2:cb:3f:83:44:f8: d8:98:f4:84:78:3f:c3:d8:c3:57:2e:8c:fe:18:12:d8:21:05: dd:8a:1a:bb:ee:be:93:55:c1:f5:f9:1a:be:16:f7:be:3b:9a: 0b:28:7c:25:ff:49:62:b8:59:25:85:5f:40:a8:cb:08:cc:7b: a1:06:6d:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOqUFMvRhXk0bgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NWM5ZTIxMDAtNGU4ZC00NTA0LTlmMjEtMDMwODJkYWFmODJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQAfauUFZFzZecM6LAeKajpV86V1ib8ZvfYM ksgZdZsI9HZdTZDDzJv2SwQteI0qwD23xZWoSqEkWjvDyKjX5tYxamtOGEcrozfS ePqVfgDYRxsmH4YCu6GlPKN4N2y8eYoQMr7woEG7DTpty6DfZhtTz0kLT2WNAgw1 bzY3/XzlZz5bp4N7PO7DhCuGPejEb/asB1y4ZWaNypiwSrD4QAlYh4A3B+1/04Wi 086sVb6hzCbuw7Zp/XbF1LlCOEc8kPQ8+QH3M1Z9oVxL+AsdWejFJeofMHBw3LQt fBdmSP47Avu9tGqvCzrWCzNzA9b1IDKTByxDAx7LJGK2kyMFjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI22OaRIEIVc7tphsWm3iU/Eims0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjNhNzk5ZjctNjIwYy0z ZTZkLWExNzQtZTk3OWUzYTliZDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADExhfiHt8HaSwZQydY6uT1jpGt+eePAcoG2krCdhioEsY3Hp0DXX7B2 4W0FDze0zXJS+1xKTiCjDozzOZ6be44cH9fs182D96NhaZfO7azqLsH27HBrurj7 1AP+ziVY+yizlXAF+JO1ZZVmmdH6DA88VpAYZz8aISQXNMhw6ZF4+RFTGgz4n03J HIKCA957lVW/PCl3A+z/aGd/jG2bwfKz2KIhEAdK0NUf6WwMU4HND12iJA4Xsyg1 cEOEqX6VQ9LLP4NE+NiY9IR4P8PYw1cujP4YEtghBd2KGrvuvpNVwfX5Gr4W9747 mgsofCX/SWK4WSWFX0CoywjMe6EGbZI= -----END CERTIFICATE-----Generated at Sat Apr 26 16:01:06 2025 by rpki-client