$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e14c3b0-8069-3391-bdaa-dc38a6d50d27.roa File: 9e14c3b0-8069-3391-bdaa-dc38a6d50d27.roa (raw, json) Hash identifier: D4SWGdpBmatvZntXcORXyZEgkMUAbwayiWbdiYxKePM= Subject key identifier: 42:67:7B:72:67:0C:C2:5C:D3:05:4C:8F:FA:C3:E2:06:7B:52:27:3B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7851B2A089788C0D8A23280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e14c3b0-8069-3391-bdaa-dc38a6d50d27.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.192.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:1b:2a:08:97:88:c0:d8:a2:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=1de4e0ee-ed63-4d39-b66e-c826b5865497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:07:ab:7e:23:16:ae:93:9d:d5:2f:59:c6:64: 8c:f6:de:7a:b6:bc:07:93:85:be:d2:86:f4:88:1b: 57:41:9f:2d:48:38:28:13:a3:b8:c5:a2:df:6a:fa: a3:06:90:d4:a1:4e:91:67:dd:fc:96:b4:59:0e:8d: 19:cb:ba:d3:1f:54:68:dd:ce:3a:7f:b4:9f:97:2f: 25:b9:22:f7:21:f1:90:05:17:55:c5:20:9a:fc:ac: dc:47:7f:ca:e5:85:10:9c:ac:91:db:d8:cb:75:99: 3b:1a:54:44:82:e7:1a:86:68:53:00:5e:4a:d2:92: 55:11:c1:86:b1:f8:86:cf:0c:12:e6:fe:a1:2c:60: 96:44:43:cf:3f:b2:40:67:56:54:01:e6:5c:2d:c3: 8d:04:d7:d0:9e:89:bd:2d:b9:04:82:a7:ed:ae:9c: e6:a4:83:7e:58:7b:f9:ab:43:fe:c8:7f:71:7e:b3: c0:61:aa:7b:56:5b:8d:40:49:27:ad:5b:a5:1b:8e: c0:a4:57:e8:df:09:a8:b8:90:95:eb:65:27:83:4e: 61:4f:f8:64:58:a1:c3:2e:15:e5:37:12:e0:8a:94: df:90:93:aa:26:62:69:99:05:88:0f:f6:ba:c7:3a: a7:aa:5c:76:dd:f2:18:b1:fd:65:a7:f3:a1:f6:53: d1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:67:7B:72:67:0C:C2:5C:D3:05:4C:8F:FA:C3:E2:06:7B:52:27:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9e14c3b0-8069-3391-bdaa-dc38a6d50d27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.192.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:56:d2:b2:46:8e:20:37:b5:62:82:ac:24:e1:ad:7a:1e:e9: 4f:a0:59:09:b9:e7:86:7c:48:ef:40:cf:a8:d1:0f:60:4a:6c: 7a:99:71:a3:e4:8a:ce:8b:a0:63:69:a8:45:6b:fe:23:b2:7d: fe:b3:3c:a8:72:62:7c:55:07:8a:34:c3:ac:b9:a4:3d:d3:ee: ed:b4:87:22:34:5e:80:4b:c9:cc:8c:27:54:9c:fb:0f:44:6c: 73:e4:ee:c8:56:da:de:62:e9:5e:b8:4c:28:4c:65:fd:82:18: 32:fa:62:f1:91:70:af:3c:75:19:f2:95:c2:24:0d:bb:b2:5c: d2:65:76:15:9e:49:eb:a3:50:89:1b:32:34:a0:ca:08:fe:42: 05:05:d8:50:8e:94:a1:46:21:45:91:3b:75:ba:5c:f0:17:0a: 27:4c:f6:48:95:62:26:75:73:a8:49:5e:56:f8:0e:48:fd:d5: e5:5d:98:d1:1e:ea:17:e6:22:b0:88:cf:54:ea:88:c0:da:f3: ac:e3:90:f7:a5:d5:7a:ab:96:9b:89:84:14:7d:1f:1a:ea:f5: 99:47:d5:9b:6e:ac:67:d9:64:1e:21:ce:82:fa:b1:4b:65:b6: 61:52:5a:e8:f5:1d:00:d3:f0:b5:31:30:88:c6:0d:05:3a:da: 02:3f:2e:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRsqCJeIwNiiMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MWRlNGUwZWUtZWQ2My00ZDM5LWI2NmUtYzgyNmI1ODY1NDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQerfiMWrpOd1S9ZxmSM9t56trwHk4W+0ob0 iBtXQZ8tSDgoE6O4xaLfavqjBpDUoU6RZ938lrRZDo0Zy7rTH1Ro3c46f7Sfly8l uSL3IfGQBRdVxSCa/KzcR3/K5YUQnKyR29jLdZk7GlREgucahmhTAF5K0pJVEcGG sfiGzwwS5v6hLGCWREPPP7JAZ1ZUAeZcLcONBNfQnom9LbkEgqftrpzmpIN+WHv5 q0P+yH9xfrPAYap7VluNQEknrVulG47ApFfo3wmouJCV62Ung05hT/hkWKHDLhXl NxLgipTfkJOqJmJpmQWID/a6xzqnqlx23fIYsf1lp/Oh9lPR7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJne3JnDMJc0wVMj/rD4gZ7Uic7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWUxNGMzYjAtODA2OS0z MzkxLWJkYWEtZGMzOGE2ZDUwZDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8AAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNW0rJGjiA3tWKCrCThrXoe6U+gWQm554Z8SO9Az6jRD2BKbHqZcaPk is6LoGNpqEVr/iOyff6zPKhyYnxVB4o0w6y5pD3T7u20hyI0XoBLycyMJ1Sc+w9E bHPk7shW2t5i6V64TChMZf2CGDL6YvGRcK88dRnylcIkDbuyXNJldhWeSeujUIkb MjSgygj+QgUF2FCOlKFGIUWRO3W6XPAXCidM9kiVYiZ1c6hJXlb4Dkj91eVdmNEe 6hfmIrCIz1TqiMDa86zjkPel1XqrlpuJhBR9Hxrq9ZlH1ZturGfZZB4hzoL6sUtl tmFSWuj1HQDT8LUxMIjGDQU62gI/Lrw= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:50 2025 by rpki-client