$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6667aa6e-961d-36af-a0df-86e2a2162012.roa File: 6667aa6e-961d-36af-a0df-86e2a2162012.roa (raw, json) Hash identifier: Vo24DGS6UgDnHsyyFqFpMcBqC18lS9EHvgBFyLNyXqQ= Subject key identifier: 42:83:BA:79:F7:F0:4E:1D:0A:74:65:64:12:06:64:E6:1B:3F:E1:29 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785027AC12B173EB896E068 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6667aa6e-961d-36af-a0df-86e2a2162012.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.200.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:02:7a:c1:2b:17:3e:b8:96:e0:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=ccecddf5-525b-4907-b0e0-b062f44be44a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:eb:2e:aa:73:f3:8b:a4:30:95:9a:fc:d2:dc: b7:cd:e8:24:1c:94:8f:3b:7b:3f:4a:33:0b:46:69: 50:8a:68:fc:4b:3b:f4:33:f0:67:61:56:cc:fc:3f: ba:60:fa:0b:2a:3c:fe:69:c7:57:92:ba:14:69:59: e9:10:75:ad:70:a9:2f:7c:27:2a:93:33:33:57:68: a4:f4:dc:b9:04:15:42:1c:db:08:83:d0:0a:fb:0d: 76:8a:7c:51:89:a4:c2:c2:b2:72:a5:7c:9e:46:61: 2e:d7:f8:ad:75:ff:f9:e2:bf:73:51:e5:34:a9:da: 29:21:a3:67:14:97:54:96:5c:73:02:a6:a2:bb:e6: d6:e2:55:19:d3:a9:f7:33:35:b0:f8:d8:ce:ff:df: 0e:20:37:bb:45:a4:34:58:2d:00:44:d4:73:39:7c: 8e:77:fb:1b:6e:85:be:53:ae:2f:7c:e3:da:58:0f: f6:f2:9a:05:53:48:90:e1:5e:2a:65:33:a5:09:6c: 00:df:2f:6d:d6:3b:d0:a1:6d:9a:b6:23:45:3d:7c: 08:92:97:8e:e2:7f:30:69:b9:50:7c:c0:22:b6:6f: 3d:aa:ff:70:95:da:f8:e3:70:83:f0:4b:7c:63:e1: 96:84:9f:8c:2d:f8:46:0e:15:e9:85:cc:a1:63:14: 78:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:83:BA:79:F7:F0:4E:1D:0A:74:65:64:12:06:64:E6:1B:3F:E1:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6667aa6e-961d-36af-a0df-86e2a2162012.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.200.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:86:73:6e:a5:1f:6c:29:db:50:ca:f8:e3:0a:34:cd:28:fe: b5:6f:b7:2d:7d:8e:63:8e:f7:97:46:cd:38:fa:68:7b:38:20: 17:59:93:ac:22:2b:87:58:20:ec:e2:95:fb:39:c6:c9:95:f7: f3:4a:6f:10:fc:92:a1:4b:a2:e8:45:a9:70:35:f6:3b:3b:db: 80:2f:2a:b6:12:11:34:15:2b:21:13:51:6e:15:90:6b:d7:2d: 50:0e:5d:7f:e0:a6:a1:c4:c5:03:37:67:5d:0c:4f:ed:0d:44: b6:83:a2:e4:cf:95:8f:4d:aa:c6:3b:d5:66:d1:7a:05:1b:d0: ca:88:87:22:16:a4:ec:12:0d:60:8f:1d:02:79:d0:83:71:6d: c1:17:8f:f5:d4:a1:b1:66:53:af:0b:c7:d8:ce:c2:c3:47:41: 14:ef:9b:6e:8a:39:69:c5:8c:a2:57:f5:f2:08:da:a3:52:45: fe:05:c4:50:d7:e5:ff:b5:0d:84:4a:84:ce:0f:91:f2:84:a9: e1:ac:59:6c:10:ed:f6:55:8d:8c:bc:4f:97:69:12:ab:21:9f: 80:8d:67:1b:b8:0c:40:56:2e:78:1a:bc:c3:ea:e5:e1:12:e0: 45:26:bc:b0:0b:18:df:03:20:8f:fd:8c:05:bc:fa:82:e8:f3: fb:43:71:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQJ6wSsXPriW4GgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk Y2NlY2RkZjUtNTI1Yi00OTA3LWIwZTAtYjA2MmY0NGJlNDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+suqnPzi6QwlZr80ty3zegkHJSPO3s/SjML RmlQimj8Szv0M/BnYVbM/D+6YPoLKjz+acdXkroUaVnpEHWtcKkvfCcqkzMzV2ik 9Ny5BBVCHNsIg9AK+w12inxRiaTCwrJypXyeRmEu1/itdf/54r9zUeU0qdopIaNn FJdUllxzAqaiu+bW4lUZ06n3MzWw+NjO/98OIDe7RaQ0WC0ARNRzOXyOd/sbboW+ U64vfOPaWA/28poFU0iQ4V4qZTOlCWwA3y9t1jvQoW2atiNFPXwIkpeO4n8wablQ fMAitm89qv9wldr443CD8Et8Y+GWhJ+MLfhGDhXphcyhYxR4iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKDunn38E4dCnRlZBIGZOYbP+EpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjY2N2FhNmUtOTYxZC0z NmFmLWEwZGYtODZlMmEyMTYyMDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8hgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqGc26lH2wp21DK+OMKNM0o/rVvty19jmOO95dGzTj6aHs4IBdZk6wi K4dYIOzilfs5xsmV9/NKbxD8kqFLouhFqXA19js724AvKrYSETQVKyETUW4VkGvX LVAOXX/gpqHExQM3Z10MT+0NRLaDouTPlY9NqsY71WbRegUb0MqIhyIWpOwSDWCP HQJ50INxbcEXj/XUobFmU68Lx9jOwsNHQRTvm26KOWnFjKJX9fII2qNSRf4FxFDX 5f+1DYRKhM4PkfKEqeGsWWwQ7fZVjYy8T5dpEqshn4CNZxu4DEBWLngavMPq5eES 4EUmvLALGN8DII/9jAW8+oLo8/tDcU8= -----END CERTIFICATE-----Generated at Sat Apr 26 20:24:52 2025 by rpki-client