$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2586893-e250-31e8-92a1-f740bc668f0a.roa File: a2586893-e250-31e8-92a1-f740bc668f0a.roa (raw, json) Hash identifier: nqz+vh4KGkEsTEODwNeeaxTgRlABnTBaNYUwJqJ8nvM= Subject key identifier: 15:6C:9F:31:D9:B0:8D:77:26:1C:62:A3:E9:66:B9:EA:4D:51:32:EB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784E65DD3F4C29485A2DD00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2586893-e250-31e8-92a1-f740bc668f0a.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.202.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e6:5d:d3:f4:c2:94:85:a2:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=eecfc226-7da6-410d-b943-244dd08a12bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b4:cb:49:86:39:12:c7:a3:13:a4:40:a3:2d: c1:0d:3e:78:19:a5:2c:57:2b:fa:9e:7e:61:5e:bb: fa:3c:6b:ca:1b:d8:49:96:d8:9b:b1:54:4f:3e:f2: a0:f9:bc:86:01:03:f3:5a:bd:a9:38:c0:05:3f:05: 4d:8e:52:4e:b9:ab:ed:a6:58:58:ce:35:cc:8d:3d: a7:f4:a4:bd:07:0d:60:42:8e:e5:0c:65:09:97:3f: 17:37:57:c1:93:1b:7b:2f:06:a4:cf:dc:c0:ac:fd: 40:9b:71:8b:85:28:ab:d3:00:92:0e:4f:8d:44:e0: d5:75:c5:12:2f:6b:eb:69:4b:85:5f:89:40:5f:61: c1:a2:dd:6c:10:c5:ad:9d:18:48:0f:12:7d:6d:04: 57:bb:cc:25:e2:0a:3f:61:0e:c3:db:32:c8:ee:cd: ae:16:3c:f6:ae:f3:08:ff:3a:9a:09:23:1d:fa:8b: ed:51:66:2b:98:dd:ec:57:86:79:83:8c:a3:e9:60: ec:39:55:49:87:1d:98:c0:3c:8f:63:d6:cc:f9:37: 25:21:4e:1f:ef:53:80:ea:0f:bf:9b:fa:e0:23:59: 60:e4:a5:a4:9b:8c:c7:93:5e:af:c8:70:2a:06:e6: 1d:84:ce:e3:cc:03:61:c5:8e:07:0c:6c:7c:23:35: c4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6C:9F:31:D9:B0:8D:77:26:1C:62:A3:E9:66:B9:EA:4D:51:32:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2586893-e250-31e8-92a1-f740bc668f0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.202.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:67:74:5c:df:51:cd:74:00:08:77:6e:88:bd:56:96:39:53: 77:e8:01:02:2b:24:a9:05:78:38:e9:a3:1c:1f:96:ae:2e:29: 23:28:28:df:65:1d:68:aa:3b:c1:9d:fc:c0:2a:24:e5:8a:c3: bc:a1:9d:b5:d4:08:44:fd:fd:dd:fc:d1:d8:94:8b:e5:5d:84: 4c:de:c5:93:1d:42:01:f2:36:09:4e:1d:5f:b3:39:33:3f:2f: 42:98:02:d2:30:aa:d9:ac:c8:1e:2c:23:69:4f:c6:25:21:2b: a4:1d:77:6f:34:53:85:9c:67:07:8f:d2:5b:86:b3:53:89:56: c7:d7:81:0b:f8:5e:8d:2f:94:5c:93:83:5a:73:2e:5f:85:c8: f6:a7:44:6e:5d:5b:98:b0:5f:bb:01:6e:32:73:70:a8:b2:47: 47:3f:e8:44:e4:4d:6c:f3:8c:a4:a5:7a:d6:e8:74:48:25:2f: 18:0d:b3:6a:d5:46:a4:cd:3f:4f:df:1c:fe:48:6d:23:9a:70: 8f:50:b2:46:e2:2e:23:5d:44:b4:79:ba:30:2d:31:0b:4c:45: b1:58:a0:7a:e1:8e:bd:90:ae:11:38:e4:a8:6a:0c:69:77:80: a6:74:86:c5:35:69:2d:41:93:f3:56:07:78:59:ac:49:a3:09: e1:ed:ad:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOZd0/TClIWi3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZWVjZmMyMjYtN2RhNi00MTBkLWI5NDMtMjQ0ZGQwOGExMmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7TLSYY5EsejE6RAoy3BDT54GaUsVyv6nn5h Xrv6PGvKG9hJltibsVRPPvKg+byGAQPzWr2pOMAFPwVNjlJOuavtplhYzjXMjT2n 9KS9Bw1gQo7lDGUJlz8XN1fBkxt7Lwakz9zArP1Am3GLhSir0wCSDk+NRODVdcUS L2vraUuFX4lAX2HBot1sEMWtnRhIDxJ9bQRXu8wl4go/YQ7D2zLI7s2uFjz2rvMI /zqaCSMd+ovtUWYrmN3sV4Z5g4yj6WDsOVVJhx2YwDyPY9bM+TclIU4f71OA6g+/ m/rgI1lg5KWkm4zHk16vyHAqBuYdhM7jzANhxY4HDGx8IzXEhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVsnzHZsI13Jhxio+lmuepNUTLrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTI1ODY4OTMtZTI1MC0z MWU4LTkyYTEtZjc0MGJjNjY4ZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8qAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5ndFzfUc10AAh3boi9VpY5U3foAQIrJKkFeDjpoxwflq4uKSMoKN9l HWiqO8Gd/MAqJOWKw7yhnbXUCET9/d380diUi+VdhEzexZMdQgHyNglOHV+zOTM/ L0KYAtIwqtmsyB4sI2lPxiUhK6Qdd280U4WcZweP0luGs1OJVsfXgQv4Xo0vlFyT g1pzLl+FyPanRG5dW5iwX7sBbjJzcKiyR0c/6ETkTWzzjKSletbodEglLxgNs2rV RqTNP0/fHP5IbSOacI9QskbiLiNdRLR5ujAtMQtMRbFYoHrhjr2QrhE45KhqDGl3 gKZ0hsU1aS1Bk/NWB3hZrEmjCeHtrSg= -----END CERTIFICATE-----Generated at Sat Apr 26 19:27:11 2025 by rpki-client