$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/64052f03-2c0d-31e6-b61e-86b11245ebc3.roa File: 64052f03-2c0d-31e6-b61e-86b11245ebc3.roa (raw, json) Hash identifier: Dbz39HRemD8AF89eGVNDMQtuzwjsOd9JuwQ4k0pc0j4= Subject key identifier: B8:DE:24:CD:64:B3:51:87:83:61:DD:36:09:CD:60:B0:91:D9:03:F6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784EC3466FE1C8646063B60 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/64052f03-2c0d-31e6-b61e-86b11245ebc3.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.238.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ec:34:66:fe:1c:86:46:06:3b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=229a2976-cc2a-4ed8-8cf6-75cdedb0ce44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:90:bc:bd:90:51:84:36:aa:cc:d5:21:68:49: 38:18:24:32:1d:56:ba:9d:57:50:f0:98:d9:95:72: eb:a9:c5:b8:ea:49:fa:14:fe:a1:91:57:2f:1f:a9: 7d:5a:c1:01:79:12:c4:0a:87:3a:78:ca:e3:4f:64: c4:1b:67:31:d9:3f:6a:ee:f4:2c:12:70:a7:61:7d: 41:45:e8:17:6c:05:4f:f0:d6:95:5d:16:bf:cf:5b: 3a:1d:86:13:19:d2:ba:a1:6e:81:55:34:e8:24:65: 87:00:8a:65:0d:0e:0a:55:9f:6d:9e:85:d0:d7:72: ec:e9:fe:b0:e7:94:78:2d:48:ed:f0:75:ca:09:d5: 35:b7:3e:07:f6:2b:ae:e0:48:00:5a:31:8c:90:0a: af:51:1b:a9:f8:5f:aa:a2:b8:39:b2:e5:15:b2:e9: bc:b3:2c:a5:f5:65:06:a5:0c:2b:c1:25:ec:8f:71: 79:9a:72:86:2e:07:87:45:7f:ea:38:b2:20:bb:59: 94:48:d5:f7:a8:f9:d0:85:d6:6c:d7:a0:ac:f4:3e: 33:d4:30:53:09:4f:16:55:8f:da:19:03:13:d5:2c: 96:e2:3b:1a:a4:a7:6c:7b:a9:b3:33:71:30:35:d2: 9a:e2:99:4b:38:c1:e8:62:11:d0:ac:cc:ec:1d:70: 2b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DE:24:CD:64:B3:51:87:83:61:DD:36:09:CD:60:B0:91:D9:03:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/64052f03-2c0d-31e6-b61e-86b11245ebc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:5c:ea:d3:a4:61:aa:92:f9:1c:ae:16:ec:56:8d:6e:5d:31: 09:ed:59:0b:00:ed:ae:b1:28:7a:2d:4d:81:72:4d:d3:d2:58: 1b:3d:79:46:30:67:22:b9:d7:ed:0f:84:e1:33:1e:cd:ba:7f: 03:20:74:58:d7:2f:f3:bc:4a:58:73:79:e3:7d:64:b0:c3:20: 99:89:4c:5c:d4:63:20:96:06:99:24:55:a2:cc:30:5f:06:ea: 96:11:c5:67:43:d0:1d:b2:26:90:9a:f7:10:63:b3:a1:c3:c3: 53:8b:63:28:ea:f5:27:34:0a:6b:2b:94:c0:5f:74:67:f1:d9: 47:d0:08:01:08:4e:ec:8b:9f:73:11:4f:d6:b0:a3:19:32:af: ee:37:5a:97:15:ab:97:64:05:df:77:6d:57:ab:e5:48:8f:66: de:ab:5f:69:35:4b:22:14:61:d6:e1:98:be:fc:d6:0a:99:63: 68:c1:35:d8:05:0d:bb:35:62:ad:5e:d2:59:a3:a8:16:88:2b: fa:87:c8:45:cc:2a:94:f0:36:e2:10:8a:54:e7:e7:3d:31:aa: ae:78:4a:2f:cc:e6:91:d3:a2:1a:84:14:fe:6c:73:87:7e:dd: ae:1c:00:b7:2b:da:fb:7f:79:d8:6f:81:a3:51:99:51:ee:81: a0:97:76:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOw0Zv4chkYGO2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MjI5YTI5NzYtY2MyYS00ZWQ4LThjZjYtNzVjZGVkYjBjZTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5C8vZBRhDaqzNUhaEk4GCQyHVa6nVdQ8JjZ lXLrqcW46kn6FP6hkVcvH6l9WsEBeRLECoc6eMrjT2TEG2cx2T9q7vQsEnCnYX1B RegXbAVP8NaVXRa/z1s6HYYTGdK6oW6BVTToJGWHAIplDQ4KVZ9tnoXQ13Ls6f6w 55R4LUjt8HXKCdU1tz4H9iuu4EgAWjGMkAqvURup+F+qorg5suUVsum8syyl9WUG pQwrwSXsj3F5mnKGLgeHRX/qOLIgu1mUSNX3qPnQhdZs16Cs9D4z1DBTCU8WVY/a GQMT1SyW4jsapKdse6mzM3EwNdKa4plLOMHoYhHQrMzsHXAr3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjeJM1ks1GHg2HdNgnNYLCR2QP2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjQwNTJmMDMtMmMwZC0z MWU2LWI2MWUtODZiMTEyNDVlYmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+4wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJc6tOkYaqS+RyuFuxWjW5dMQntWQsA7a6xKHotTYFyTdPSWBs9eUYw ZyK51+0PhOEzHs26fwMgdFjXL/O8SlhzeeN9ZLDDIJmJTFzUYyCWBpkkVaLMMF8G 6pYRxWdD0B2yJpCa9xBjs6HDw1OLYyjq9Sc0CmsrlMBfdGfx2UfQCAEITuyLn3MR T9awoxkyr+43WpcVq5dkBd93bVer5UiPZt6rX2k1SyIUYdbhmL781gqZY2jBNdgF Dbs1Yq1e0lmjqBaIK/qHyEXMKpTwNuIQilTn5z0xqq54Si/M5pHTohqEFP5sc4d+ 3a4cALcr2vt/edhvgaNRmVHugaCXdrg= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:13 2025 by rpki-client