$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/85f3d5a8-dc97-3f7c-a88a-7cc3b8a1b491.roa File: 85f3d5a8-dc97-3f7c-a88a-7cc3b8a1b491.roa (raw, json) Hash identifier: 1OM2yEMGrllyaG9IS/5aJ6lAKpDKpCPTHKlCDIXKabM= Subject key identifier: 41:61:6C:F6:F7:FC:D6:13:E2:AC:38:A5:19:66:EA:C8:F5:36:1B:0F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784DC11106AE0B85E889F80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/85f3d5a8-dc97-3f7c-a88a-7cc3b8a1b491.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.200.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:dc:11:10:6a:e0:b8:5e:88:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=777001ad-688c-43a2-85b1-ac3f24291dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c4:40:18:6a:b5:4d:99:ce:de:c9:60:03:ca: e2:4b:6f:08:6f:49:1f:d2:90:cc:3d:32:a3:25:38: 41:49:65:12:93:6d:dc:ab:7f:63:7d:21:8a:22:92: 7b:f6:ca:b4:fc:3a:ff:49:f7:6b:ed:5e:31:69:15: 14:63:eb:e1:42:22:db:2f:0c:12:1b:d7:41:29:4a: c3:45:a8:5e:9e:3b:b0:69:a3:bf:36:e9:90:85:4a: a0:3a:63:bc:22:9b:99:50:17:e1:c0:bc:01:32:d5: 13:db:11:fb:d4:26:2d:8a:2b:0a:ad:e7:30:09:4d: c6:fd:86:a7:e7:65:ac:62:df:0c:c1:2a:67:f0:6d: 75:b2:8a:7a:b1:72:c8:16:c2:b4:0e:69:76:9a:8e: 93:d8:0a:e8:86:94:1b:b4:90:71:d6:74:71:61:b2: 15:7b:e5:bf:5a:f2:d6:e3:d9:12:c2:08:fa:57:b9: af:69:8e:17:1c:ed:16:9f:10:88:e7:0e:b1:c6:a4: 10:35:39:f2:a2:94:77:79:6d:2a:5b:e9:05:e2:86: 74:5e:6e:05:a6:cf:80:36:46:c6:35:7f:2e:ed:c3: b9:8b:4a:ae:7f:ad:c7:25:8d:c1:a4:c6:c3:e8:da: 5a:2d:29:d9:ac:6e:c8:52:0b:ab:c4:99:44:4b:55: 23:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:61:6C:F6:F7:FC:D6:13:E2:AC:38:A5:19:66:EA:C8:F5:36:1B:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/85f3d5a8-dc97-3f7c-a88a-7cc3b8a1b491.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.200.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:02:f6:2a:ab:de:d3:ad:b3:2c:45:72:11:92:2c:ea:63:17: 13:57:25:fd:d3:35:75:de:2f:e8:f8:2e:1a:af:0c:b5:2d:8f: b9:e5:8a:fe:c7:6c:d0:02:89:b2:14:5c:43:4c:e0:e9:ee:85: 74:19:f0:46:ff:cc:5d:8e:45:9c:91:78:19:a9:0a:40:61:a3: d2:d9:6b:d3:2d:5f:3b:67:dd:2e:50:15:8b:e0:ee:28:27:f2: 86:cb:80:85:64:34:bf:04:52:fe:b4:e8:77:0b:42:e5:58:9d: e8:b0:39:0b:55:d5:c3:47:11:0b:f7:d5:b8:63:2a:19:ff:be: 95:fb:00:eb:41:ff:5e:4a:6f:33:3c:10:dd:9c:b6:ef:3f:5b: 21:82:cc:a5:5e:88:9a:c4:89:2c:d0:83:36:98:ef:27:9f:d8: da:2f:1e:08:f7:b7:92:e4:40:50:95:dd:ce:43:08:91:69:36: e8:cd:03:ab:51:c8:c2:e6:65:ca:d8:38:bf:75:ac:64:db:cf: 45:db:0c:a7:a9:5e:d4:a3:bd:1d:5c:d9:dd:2b:d9:79:e5:02: 53:4d:91:6e:a9:ae:8c:54:bf:6e:06:b3:fe:fa:e4:26:a6:a0: f0:5b:8c:f7:d8:df:09:c6:33:d6:81:73:d0:9b:30:12:08:ba: 5d:7b:db:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNwREGrguF6In4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk Nzc3MDAxYWQtNjg4Yy00M2EyLTg1YjEtYWMzZjI0MjkxZGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcRAGGq1TZnO3slgA8riS28Ib0kf0pDMPTKj JThBSWUSk23cq39jfSGKIpJ79sq0/Dr/Sfdr7V4xaRUUY+vhQiLbLwwSG9dBKUrD RahenjuwaaO/NumQhUqgOmO8IpuZUBfhwLwBMtUT2xH71CYtiisKrecwCU3G/Yan 52WsYt8MwSpn8G11sop6sXLIFsK0Dml2mo6T2ArohpQbtJBx1nRxYbIVe+W/WvLW 49kSwgj6V7mvaY4XHO0WnxCI5w6xxqQQNTnyopR3eW0qW+kF4oZ0Xm4Fps+ANkbG NX8u7cO5i0quf63HJY3BpMbD6NpaLSnZrG7IUgurxJlES1UjxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFhbPb3/NYT4qw4pRlm6sj1NhsPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODVmM2Q1YTgtZGM5Ny0z ZjdjLWE4OGEtN2NjM2I4YTFiNDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8gQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMC9iqr3tOtsyxFchGSLOpjFxNXJf3TNXXeL+j4LhqvDLUtj7nliv7H bNACibIUXENM4OnuhXQZ8Eb/zF2ORZyReBmpCkBho9LZa9MtXztn3S5QFYvg7ign 8obLgIVkNL8EUv606HcLQuVYneiwOQtV1cNHEQv31bhjKhn/vpX7AOtB/15KbzM8 EN2ctu8/WyGCzKVeiJrEiSzQgzaY7yef2NovHgj3t5LkQFCV3c5DCJFpNujNA6tR yMLmZcrYOL91rGTbz0XbDKepXtSjvR1c2d0r2XnlAlNNkW6proxUv24Gs/765Cam oPBbjPfY3wnGM9aBc9CbMBIIul17294= -----END CERTIFICATE-----Generated at Sat Apr 26 20:51:16 2025 by rpki-client