$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/85baef20-0be8-35d2-8505-71d7c669389e.roa File: 85baef20-0be8-35d2-8505-71d7c669389e.roa (raw, json) Hash identifier: SvzNn7Ntmam0ByroJTT7upLsMkXx5nEAalVUN36lDiA= Subject key identifier: B1:01:A6:CA:66:84:15:67:EB:75:37:3A:EE:ED:EB:AA:CD:86:72:A3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7851EB47066C74313F53C40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/85baef20-0be8-35d2-8505-71d7c669389e.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.246.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:1e:b4:70:66:c7:43:13:f5:3c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=4f539c61-f67b-4f3b-95d6-308e082e56bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:3c:be:55:8d:c5:97:65:b9:5b:49:54:6c:08: 00:76:7a:7d:1d:1d:40:03:84:0c:e9:33:87:46:80: d2:8a:cf:bc:1c:a0:4e:21:5e:d1:70:5c:2f:e9:68: ba:a5:a0:a1:ca:d4:f7:fd:c8:a8:22:40:75:f1:de: d7:96:fc:80:06:0f:83:4a:a3:77:41:51:97:04:e0: 5f:e2:68:9c:0d:ea:4b:49:68:b3:3c:3d:7b:9f:48: 54:e8:81:83:91:1e:c5:86:47:d4:c1:26:45:4b:12: a3:ba:35:ae:79:f5:83:db:4d:e0:f6:80:fd:33:cf: d0:f2:85:75:80:81:26:f3:ff:34:aa:66:05:44:0b: ff:6e:ff:c0:c8:f1:5a:b3:98:f0:4f:51:38:58:84: 6f:4b:3b:e3:e1:19:09:f8:87:89:47:4d:9a:76:2f: 60:65:15:51:6e:0c:67:fa:58:5c:ee:9c:8a:f4:19: 6f:62:51:94:d8:2d:fa:83:2f:bf:a4:04:15:30:61: c4:cb:7f:68:21:73:d0:b0:2e:85:ec:51:9e:f1:bb: ff:a8:22:eb:69:f5:09:7b:f3:db:01:6d:00:28:ee: 4c:6a:26:b3:f2:b0:d3:a1:9b:cc:1c:68:58:bb:6b: 31:4a:50:23:30:05:db:1a:f3:96:83:14:79:d0:1d: 64:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:01:A6:CA:66:84:15:67:EB:75:37:3A:EE:ED:EB:AA:CD:86:72:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/85baef20-0be8-35d2-8505-71d7c669389e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.246.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:ee:20:cf:38:92:43:5f:20:35:7e:49:9f:ff:a8:a4:74:41: 41:66:4f:3e:62:e1:b6:e4:64:33:1b:cc:bd:8e:a8:20:66:b1: ad:01:a9:df:c5:db:20:cc:fb:08:8e:70:4f:59:ff:5f:e8:73: a9:70:6e:cb:ae:32:54:7f:38:8c:d8:6d:aa:2c:e5:c1:e2:0d: 01:04:83:58:fa:b3:69:8c:8c:95:9f:96:95:cb:7a:a0:42:a5: 4a:c7:dc:38:4d:5d:30:c5:35:07:ec:3d:2b:69:a1:d0:69:e7: 15:09:2b:43:f2:b2:a9:06:73:f5:d0:78:94:a6:db:93:24:2f: 4e:cf:3d:d4:ae:2a:12:3b:d0:9a:b3:18:12:75:60:5b:41:c7: f6:f0:08:73:d1:8a:f4:41:22:46:55:83:b7:db:d9:d9:f7:a7: 1d:b2:9c:d6:f3:cc:87:c6:be:4b:b4:60:d4:03:27:74:5b:69: 46:a1:5f:08:b1:5a:e9:8a:2c:2f:5c:5d:61:a2:4c:01:57:b3: c8:80:d5:6c:ed:a0:03:c5:39:80:47:51:58:43:9d:15:65:db: 03:b5:4e:cb:b6:55:4f:82:87:d1:22:00:d6:80:88:ce:90:35: 58:f7:12:f5:f8:95:ad:ac:a1:0c:5f:50:50:c3:90:2b:07:b0: 8b:17:12:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhR60cGbHQxP1PEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NGY1MzljNjEtZjY3Yi00ZjNiLTk1ZDYtMzA4ZTA4MmU1NmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Dy+VY3Fl2W5W0lUbAgAdnp9HR1AA4QM6TOH RoDSis+8HKBOIV7RcFwv6Wi6paChytT3/cioIkB18d7XlvyABg+DSqN3QVGXBOBf 4micDepLSWizPD17n0hU6IGDkR7FhkfUwSZFSxKjujWuefWD203g9oD9M8/Q8oV1 gIEm8/80qmYFRAv/bv/AyPFas5jwT1E4WIRvSzvj4RkJ+IeJR02adi9gZRVRbgxn +lhc7pyK9BlvYlGU2C36gy+/pAQVMGHEy39oIXPQsC6F7FGe8bv/qCLrafUJe/Pb AW0AKO5Maiaz8rDToZvMHGhYu2sxSlAjMAXbGvOWgxR50B1kywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEBpspmhBVn63U3Ou7t66rNhnKjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODViYWVmMjAtMGJlOC0z NWQyLTg1MDUtNzFkN2M2NjkzODllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/ZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7uIM84kkNfIDV+SZ//qKR0QUFmTz5i4bbkZDMbzL2OqCBmsa0Bqd/F 2yDM+wiOcE9Z/1/oc6lwbsuuMlR/OIzYbaos5cHiDQEEg1j6s2mMjJWflpXLeqBC pUrH3DhNXTDFNQfsPStpodBp5xUJK0PysqkGc/XQeJSm25MkL07PPdSuKhI70Jqz GBJ1YFtBx/bwCHPRivRBIkZVg7fb2dn3px2ynNbzzIfGvku0YNQDJ3RbaUahXwix WumKLC9cXWGiTAFXs8iA1WztoAPFOYBHUVhDnRVl2wO1Tsu2VU+Ch9EiANaAiM6Q NVj3EvX4la2soQxfUFDDkCsHsIsXEgQ= -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:21 2025 by rpki-client