$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9dbdb3a6-b714-3bd5-955e-17f00a124989.roa File: 9dbdb3a6-b714-3bd5-955e-17f00a124989.roa (raw, json) Hash identifier: y3ooGOxIgEgZWjMIhGKtU0qXsdQeAeOdUFdBprLfeGw= Subject key identifier: 3A:38:92:BA:89:E4:4D:8B:E2:B7:EF:8D:02:1E:2C:E8:10:A4:D4:86 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784ED82606F5F8BE3C6C100 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9dbdb3a6-b714-3bd5-955e-17f00a124989.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.196.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ed:82:60:6f:5f:8b:e3:c6:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=c2d7a077-a5dc-4179-bda3-a09fc2b7735e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:23:aa:f6:9c:c5:49:81:71:64:e0:dc:fe:9d: a9:65:35:f8:ca:16:44:8b:c7:f7:9a:83:e5:a3:9a: cf:8d:3d:a9:9f:58:9a:37:5f:8e:3d:8b:e1:98:86: 2a:f2:c3:3f:d4:4b:88:b6:ac:87:db:8e:28:6d:d1: 27:15:23:a4:32:aa:0c:90:cd:75:89:33:2a:e9:b5: 5e:11:77:3f:e8:27:0c:ef:a9:fc:92:da:06:6c:60: 35:a7:74:f8:76:cd:2a:7b:71:07:d5:4d:8d:3d:68: 8a:04:50:fd:2b:98:2d:6c:50:4a:c4:b8:67:9f:4b: 3c:9d:e5:8b:cc:49:f4:b9:b9:d6:9c:ea:b3:c7:14: 63:f8:c8:73:83:d5:f2:40:ec:31:48:01:9f:66:fc: bf:6b:56:24:b5:5a:04:12:58:7c:0b:5d:8d:79:56: ec:bc:19:0d:28:87:bb:04:7c:ef:45:a8:3d:d5:27: f5:a8:bf:87:db:c2:8d:41:77:bc:c7:b1:7a:45:f5: 82:da:c9:17:e6:aa:1e:85:15:3b:00:be:2b:95:0a: 14:a5:0f:68:65:45:1e:14:99:be:2c:ae:06:f7:7f: 06:0b:af:f8:62:bf:e0:f6:a0:ff:dc:b1:3d:ed:dc: 4a:ac:30:77:70:cb:2d:d7:e1:d9:93:5c:f2:d2:7c: 15:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:38:92:BA:89:E4:4D:8B:E2:B7:EF:8D:02:1E:2C:E8:10:A4:D4:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9dbdb3a6-b714-3bd5-955e-17f00a124989.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.196.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:19:c9:4c:4a:73:1e:1b:69:47:98:3a:5a:d4:af:dd:a0:da: 60:2c:a6:7a:03:d0:44:6c:2c:60:a0:bb:45:86:11:6f:49:a6: 96:1d:28:c3:2d:d4:1e:f0:1e:04:c8:12:70:ce:8e:98:09:be: 7e:e8:13:dd:69:ef:70:79:d8:04:f9:33:07:37:23:9f:31:79: bf:39:40:f1:aa:9f:5d:34:7d:de:be:4c:7c:b7:e0:98:29:85: d2:8c:52:24:f4:61:75:cb:c8:87:87:50:30:2f:82:29:97:fc: 40:54:26:34:63:46:06:87:dd:4b:f9:0e:eb:e5:99:15:a5:1a: 55:21:6c:89:d0:57:ac:b3:e5:15:cd:f9:34:f3:5a:a2:1f:08: 6a:78:65:8a:b2:8b:71:d4:f4:20:f0:b2:9a:65:ab:61:37:90: e0:47:9c:71:df:04:5d:37:44:f0:32:ad:43:6f:43:67:f8:2f: 7c:b4:8f:a0:d8:64:3c:b1:b9:0e:51:17:37:c6:d6:b0:4d:a1: b4:11:34:06:73:83:f2:8c:81:78:d1:fa:5c:60:c2:ea:a9:6d: 40:76:25:9b:ed:cf:a4:5c:16:e8:d6:bf:77:89:e4:b4:f4:ea: c8:d9:37:c1:9c:26:5c:07:e5:23:8f:0c:7c:61:ec:38:6e:00: d0:35:63:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhO2CYG9fi+PGwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YzJkN2EwNzctYTVkYy00MTc5LWJkYTMtYTA5ZmMyYjc3MzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyOq9pzFSYFxZODc/p2pZTX4yhZEi8f3moPl o5rPjT2pn1iaN1+OPYvhmIYq8sM/1EuItqyH244obdEnFSOkMqoMkM11iTMq6bVe EXc/6CcM76n8ktoGbGA1p3T4ds0qe3EH1U2NPWiKBFD9K5gtbFBKxLhnn0s8neWL zEn0ubnWnOqzxxRj+Mhzg9XyQOwxSAGfZvy/a1YktVoEElh8C12NeVbsvBkNKIe7 BHzvRag91Sf1qL+H28KNQXe8x7F6RfWC2skX5qoehRU7AL4rlQoUpQ9oZUUeFJm+ LK4G938GC6/4Yr/g9qD/3LE97dxKrDB3cMst1+HZk1zy0nwVSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDo4krqJ5E2L4rfvjQIeLOgQpNSGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWRiZGIzYTYtYjcxNC0z YmQ1LTk1NWUtMTdmMDBhMTI0OTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8TAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEZyUxKcx4baUeYOlrUr92g2mAspnoD0ERsLGCgu0WGEW9JppYdKMMt 1B7wHgTIEnDOjpgJvn7oE91p73B52AT5Mwc3I58xeb85QPGqn100fd6+THy34Jgp hdKMUiT0YXXLyIeHUDAvgimX/EBUJjRjRgaH3Uv5DuvlmRWlGlUhbInQV6yz5RXN +TTzWqIfCGp4ZYqyi3HU9CDwspplq2E3kOBHnHHfBF03RPAyrUNvQ2f4L3y0j6DY ZDyxuQ5RFzfG1rBNobQRNAZzg/KMgXjR+lxgwuqpbUB2JZvtz6RcFujWv3eJ5LT0 6sjZN8GcJlwH5SOPDHxh7DhuANA1Y9E= -----END CERTIFICATE-----Generated at Sat Apr 26 14:55:54 2025 by rpki-client