$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/84242fdf-fc1d-30d9-bed9-3fc4bd4e7a96.roa File: 84242fdf-fc1d-30d9-bed9-3fc4bd4e7a96.roa (raw, json) Hash identifier: tQf9IctdVaULapBRPn/82xW+w6O8ldx27lnma+tSrGQ= Subject key identifier: A7:8B:40:7F:77:3C:5A:B1:5B:1F:92:60:C4:A6:E6:0F:1C:12:A5:B3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784F4D82E4DE2CDD9F90800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/84242fdf-fc1d-30d9-bed9-3fc4bd4e7a96.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.202.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:f4:d8:2e:4d:e2:cd:d9:f9:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=82debb1f-b83a-49b6-a6de-a873c874b973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:5b:63:0b:83:76:73:21:37:54:07:81:61:7c: 9d:cf:bf:ae:1a:44:d6:59:a4:4a:25:1e:3d:72:91: 6a:26:45:d5:1e:d5:c7:69:f0:ec:f1:4f:46:4a:fb: d2:0c:09:6c:f3:21:44:cd:ea:0b:7f:b7:cc:93:ae: 01:6b:06:b2:c8:70:f2:96:10:f3:29:50:e2:b5:d5: 90:c6:e9:35:25:d0:b2:c7:67:63:cc:c7:0e:3e:8b: 22:e0:82:8c:16:12:e3:a2:f2:12:6c:cf:32:b8:14: 99:35:82:d5:3c:33:8c:99:4d:08:6c:a3:ba:72:7b: d5:89:7f:78:7f:3c:46:dd:e0:2f:a8:97:bc:57:81: c6:a3:68:4a:5a:d0:4a:3a:ca:70:50:7e:4f:e0:cf: 1c:63:bd:57:4b:87:6e:f7:a9:44:18:cc:32:8d:f9: 6f:76:d2:05:44:28:93:85:a0:0c:c3:7f:0b:af:b4: fc:b5:a1:96:05:d9:06:41:64:f2:44:63:04:13:91: a9:cb:db:ff:4f:f8:2f:22:8f:ee:70:37:3e:af:00: 89:0c:5d:40:69:23:a6:fa:e5:f1:2d:1c:30:ac:88: d2:93:15:0b:bc:f8:c4:df:fc:70:61:e9:17:9d:e1: 92:b3:25:66:7d:18:ea:74:89:1f:f5:3d:ba:88:20: 18:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:8B:40:7F:77:3C:5A:B1:5B:1F:92:60:C4:A6:E6:0F:1C:12:A5:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/84242fdf-fc1d-30d9-bed9-3fc4bd4e7a96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.202.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:cf:83:d8:d3:fe:b9:a7:82:fd:6d:c7:18:ec:25:de:62:d7: b1:b7:4f:87:6a:87:6b:64:c7:74:bd:61:3f:ce:4e:88:1f:e2: 45:9c:e9:12:a2:d2:6b:0a:aa:b2:9c:92:a9:bf:e6:77:60:f8: 74:b3:d7:3f:12:2b:dc:ef:9c:64:c2:db:cd:d6:31:50:7a:d9: e1:f1:c6:ab:26:34:5e:43:44:d1:bb:e1:1f:0c:99:d4:f8:3b: cc:94:2d:79:e4:54:15:4b:45:c8:30:d7:af:9c:f6:a4:07:62: bf:51:07:2a:10:63:77:17:c0:35:6c:0d:ab:25:99:57:55:63: fc:05:91:6b:92:40:ed:2f:50:65:85:cc:b3:ee:56:8f:f1:cb: 24:8b:fd:e9:dc:78:99:84:7c:54:6a:d5:41:e2:8c:f2:14:2e: 7c:96:e5:73:e8:01:e0:4a:cf:be:f1:d8:6d:98:50:77:21:5f: dc:d8:69:78:93:35:1c:ef:96:e0:ab:0b:ca:03:5e:71:bd:7b: 2b:62:a4:62:a0:4d:59:fe:af:a8:05:aa:05:d2:10:02:24:bd: 25:10:4a:99:03:1a:dc:39:5f:e7:27:03:13:ce:14:0c:b5:7f: 9b:61:7c:33:5e:47:72:6e:97:8e:1e:61:de:4c:c6:dd:67:9e: 8e:eb:99:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPTYLk3izdn5CAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ODJkZWJiMWYtYjgzYS00OWI2LWE2ZGUtYTg3M2M4NzRiOTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71tjC4N2cyE3VAeBYXydz7+uGkTWWaRKJR49 cpFqJkXVHtXHafDs8U9GSvvSDAls8yFEzeoLf7fMk64BawayyHDylhDzKVDitdWQ xuk1JdCyx2djzMcOPosi4IKMFhLjovISbM8yuBSZNYLVPDOMmU0IbKO6cnvViX94 fzxG3eAvqJe8V4HGo2hKWtBKOspwUH5P4M8cY71XS4du96lEGMwyjflvdtIFRCiT haAMw38Lr7T8taGWBdkGQWTyRGMEE5Gpy9v/T/gvIo/ucDc+rwCJDF1AaSOm+uXx LRwwrIjSkxULvPjE3/xwYekXneGSsyVmfRjqdIkf9T26iCAYMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKeLQH93PFqxWx+SYMSm5g8cEqWzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODQyNDJmZGYtZmMxZC0z MGQ5LWJlZDktM2ZjNGJkNGU3YTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8pgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXPg9jT/rmngv1txxjsJd5i17G3T4dqh2tkx3S9YT/OTogf4kWc6RKi 0msKqrKckqm/5ndg+HSz1z8SK9zvnGTC283WMVB62eHxxqsmNF5DRNG74R8MmdT4 O8yULXnkVBVLRcgw16+c9qQHYr9RByoQY3cXwDVsDaslmVdVY/wFkWuSQO0vUGWF zLPuVo/xyySL/enceJmEfFRq1UHijPIULnyW5XPoAeBKz77x2G2YUHchX9zYaXiT NRzvluCrC8oDXnG9eytipGKgTVn+r6gFqgXSEAIkvSUQSpkDGtw5X+cnAxPOFAy1 f5thfDNeR3Jul44eYd5Mxt1nno7rmXE= -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:50 2025 by rpki-client