$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b1efa6a-c631-3ac4-91fe-87327ad88618.roa File: 8b1efa6a-c631-3ac4-91fe-87327ad88618.roa (raw, json) Hash identifier: qXfgjPFeiumotSv81Z3wy89m/bT860wTqZbmuFatD4I= Subject key identifier: F5:27:0A:33:E3:20:97:7A:46:F4:CC:85:19:BC:F8:21:C0:89:94:E9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7851A690D9698EA6C8DE420 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b1efa6a-c631-3ac4-91fe-87327ad88618.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.184.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:1a:69:0d:96:98:ea:6c:8d:e4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=8e9eecd3-1e1e-48d0-bdd0-b4dd6b052d0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:29:80:d5:d5:3e:78:9b:5d:87:69:3e:14:bf: 15:3c:c0:9a:f2:34:4d:c1:d8:33:20:fd:f3:9a:df: ff:bf:4d:2f:e1:53:67:18:58:e9:ac:85:b0:a4:fd: cf:e3:e2:be:da:e6:41:ee:b5:d0:16:b4:d8:5b:f9: 60:d4:59:37:43:5a:99:32:ce:4b:53:a6:96:9b:42: a6:c3:da:2c:ba:f4:2a:06:14:dc:05:23:d9:b2:bd: a4:7c:8a:49:79:ba:ef:ce:1c:e1:9f:8d:2d:2d:b7: 2d:d6:4b:56:64:7d:71:c1:4d:f4:84:d1:37:44:44: ea:63:87:db:ff:93:1a:a9:4b:a4:4a:79:38:fe:5e: f3:67:95:bd:2c:c3:34:85:d6:b4:26:58:4a:33:9f: 11:1f:4c:d9:ae:cd:dd:17:eb:e3:46:04:c3:40:71: 64:7c:e8:d7:ea:96:d6:d8:ab:59:04:a6:f6:22:6f: bc:36:9a:09:6d:0d:20:24:65:12:96:42:33:2f:12: b9:ab:fe:c5:30:45:f7:eb:40:10:ed:e8:57:45:68: 4c:1c:06:9c:50:7f:e8:eb:ba:a8:02:e1:ac:f0:2c: 33:9b:8d:42:ff:f1:3a:24:ec:2f:df:58:20:7c:ef: e7:78:f4:90:50:df:d4:62:93:a0:e6:07:14:d3:32: 7f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:27:0A:33:E3:20:97:7A:46:F4:CC:85:19:BC:F8:21:C0:89:94:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8b1efa6a-c631-3ac4-91fe-87327ad88618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.184.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:8c:7b:b8:a1:a4:1d:88:aa:6d:03:f8:59:1a:e8:7c:8b:38: 0f:d9:18:e5:02:10:03:20:87:66:d5:5b:25:55:c9:30:da:66: 1c:79:98:d6:54:18:2f:d2:70:98:35:d9:ba:30:66:7d:d0:8b: fc:c7:58:c7:5c:ff:80:11:86:3e:0e:d1:1e:1c:b5:a0:a3:08: 77:8f:34:e4:48:f9:26:13:0a:42:97:4d:4c:63:2c:37:6c:bd: 04:1c:5a:0b:24:07:b9:59:b3:9f:05:f5:b1:5e:2f:f2:03:7c: 01:ed:5a:8a:65:af:2e:e8:ed:0e:27:03:41:1e:06:81:37:1f: 8d:81:10:1f:7c:7b:30:32:33:ca:b3:80:e7:92:50:33:ce:82: b6:20:2c:d0:3b:aa:21:05:db:98:c1:9c:06:9f:e2:c7:fb:65: 2c:f2:c2:5e:66:95:98:6c:51:59:69:ae:07:c6:e0:9c:4a:43: 4c:c0:fb:4a:1e:49:7b:2b:a3:d9:6e:e9:5e:15:b4:cf:cb:e5: a3:29:0d:e9:5c:55:cd:55:f5:0a:7c:8a:70:cf:a1:ed:3c:1c: bd:81:8f:35:05:ef:65:97:42:a6:34:05:6f:3f:a1:79:6f:18: a7:fb:7c:6a:93:22:1d:22:51:6a:26:13:78:de:66:fa:e5:d5: 29:3e:27:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRppDZaY6myN5CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OGU5ZWVjZDMtMWUxZS00OGQwLWJkZDAtYjRkZDZiMDUyZDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwymA1dU+eJtdh2k+FL8VPMCa8jRNwdgzIP3z mt//v00v4VNnGFjprIWwpP3P4+K+2uZB7rXQFrTYW/lg1Fk3Q1qZMs5LU6aWm0Km w9osuvQqBhTcBSPZsr2kfIpJebrvzhzhn40tLbct1ktWZH1xwU30hNE3RETqY4fb /5MaqUukSnk4/l7zZ5W9LMM0hda0JlhKM58RH0zZrs3dF+vjRgTDQHFkfOjX6pbW 2KtZBKb2Im+8NpoJbQ0gJGUSlkIzLxK5q/7FMEX360AQ7ehXRWhMHAacUH/o67qo AuGs8Cwzm41C//E6JOwv31ggfO/nePSQUN/UYpOg5gcU0zJ/TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUnCjPjIJd6RvTMhRm8+CHAiZTpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGIxZWZhNmEtYzYzMS0z YWM0LTkxZmUtODczMjdhZDg4NjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7gAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmMe7ihpB2Iqm0D+Fka6HyLOA/ZGOUCEAMgh2bVWyVVyTDaZhx5mNZU GC/ScJg12bowZn3Qi/zHWMdc/4ARhj4O0R4ctaCjCHePNORI+SYTCkKXTUxjLDds vQQcWgskB7lZs58F9bFeL/IDfAHtWoplry7o7Q4nA0EeBoE3H42BEB98ezAyM8qz gOeSUDPOgrYgLNA7qiEF25jBnAaf4sf7ZSzywl5mlZhsUVlprgfG4JxKQ0zA+0oe SXsro9lu6V4VtM/L5aMpDelcVc1V9Qp8inDPoe08HL2BjzUF72WXQqY0BW8/oXlv GKf7fGqTIh0iUWomE3jeZvrl1Sk+JwY= -----END CERTIFICATE-----Generated at Sat Apr 26 16:17:49 2025 by rpki-client