$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a41dc736-0e87-3c47-9450-ef97be0ba342.roa File: a41dc736-0e87-3c47-9450-ef97be0ba342.roa (raw, json) Hash identifier: 1t8wCXD8VLdY6XXrCscku8SRZmZOEHSpT5xnNIJ4X0M= Subject key identifier: 72:BB:AE:DB:63:C9:98:E7:6C:90:F5:14:BD:79:72:E0:56:4F:0B:9B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7850B1217908238CD8B7200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a41dc736-0e87-3c47-9450-ef97be0ba342.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.190.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:0b:12:17:90:82:38:cd:8b:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=088054a6-d2f1-43ee-bdbb-5092b5bedebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:53:b5:e0:35:c0:7c:52:56:08:20:f7:6e:33: 1a:74:67:c9:45:26:45:af:a6:3a:4a:b5:9a:1c:5c: 86:27:20:9e:fc:2a:fe:69:f3:d3:bc:36:51:3f:38: 75:94:50:c7:ca:92:d6:34:bc:96:bf:f0:82:0c:72: 3e:e2:73:0b:52:85:8a:d6:dc:d8:f1:4e:37:b4:3e: df:3b:54:d9:37:a2:77:f8:4c:39:9d:ea:d0:3f:6e: 2a:e9:cb:7c:f4:65:d4:a3:d4:88:10:87:cf:cc:9e: 4a:58:ee:89:2b:56:66:ca:48:d3:2c:0b:72:83:b4: 15:c6:9a:1e:4b:3c:72:e7:a4:c8:0e:4b:19:3c:c0: f6:c7:2c:0d:c8:dd:fc:d0:23:0f:2f:4a:ee:6f:00: 9a:da:32:19:65:0a:1e:24:6e:7d:35:29:5b:88:2b: a6:47:f2:13:35:6f:d0:2b:7b:4d:7b:77:13:b2:9c: 2f:db:08:5c:7e:01:8e:9c:f7:0b:ec:c9:f0:64:fb: 30:c5:01:82:f1:a6:ef:6d:27:98:8c:b0:4b:c8:3e: eb:95:9c:5a:ab:30:1f:96:65:cc:1c:66:31:06:20: 6d:39:c4:42:59:3e:29:b8:89:98:c4:1e:83:2d:4c: 6b:2d:8e:31:71:55:df:a7:89:43:85:90:4d:9a:7f: d1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:BB:AE:DB:63:C9:98:E7:6C:90:F5:14:BD:79:72:E0:56:4F:0B:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a41dc736-0e87-3c47-9450-ef97be0ba342.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.190.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:0d:5b:4b:99:2a:5b:a8:21:f5:1d:b2:fa:9a:99:df:5e:8d: ba:02:82:53:2d:da:10:36:ea:31:ad:bb:d7:53:87:f8:0c:3d: f5:20:22:16:de:53:c1:ec:7f:c0:2d:fd:53:5a:87:f5:32:4e: 3f:86:46:00:4b:4d:72:bc:34:3b:82:26:20:6f:ee:da:bb:61: b0:b6:b4:fd:68:34:96:b1:37:68:34:60:b8:82:ba:2d:55:cc: e7:2b:c4:5e:1b:0b:3f:21:fd:9c:12:5a:3d:4a:41:51:0b:37: 8b:1a:92:42:c9:8a:76:c4:4f:6b:6e:73:fe:33:9e:4d:3e:3d: b3:68:62:04:3f:65:c5:8b:bb:48:67:a6:b9:9d:1a:f7:bd:44: 06:9b:fb:ac:c8:3a:75:be:c9:f4:96:19:1a:ed:9b:a4:57:f9: 8e:31:b1:54:b1:b6:e4:89:bc:d4:4b:c1:4d:44:70:e8:10:af: 46:d7:0e:3d:33:f4:12:61:ec:11:fa:70:49:3c:7c:6a:ee:f0: ea:2a:ec:2c:6a:d5:2e:80:ca:62:c2:6f:49:df:e4:c6:b9:25: 25:70:38:73:ed:18:3e:6f:0e:9c:a2:37:3f:43:24:7d:03:c1: 1d:38:81:3a:24:c1:be:f8:eb:7d:26:34:e2:52:52:b7:97:00: 41:2a:b5:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQsSF5CCOM2LcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MDg4MDU0YTYtZDJmMS00M2VlLWJkYmItNTA5MmI1YmVkZWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1O14DXAfFJWCCD3bjMadGfJRSZFr6Y6SrWa HFyGJyCe/Cr+afPTvDZRPzh1lFDHypLWNLyWv/CCDHI+4nMLUoWK1tzY8U43tD7f O1TZN6J3+Ew5nerQP24q6ct89GXUo9SIEIfPzJ5KWO6JK1ZmykjTLAtyg7QVxpoe Szxy56TIDksZPMD2xywNyN380CMPL0rubwCa2jIZZQoeJG59NSlbiCumR/ITNW/Q K3tNe3cTspwv2whcfgGOnPcL7MnwZPswxQGC8abvbSeYjLBLyD7rlZxaqzAflmXM HGYxBiBtOcRCWT4puImYxB6DLUxrLY4xcVXfp4lDhZBNmn/RKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHK7rttjyZjnbJD1FL15cuBWTwubMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTQxZGM3MzYtMGU4Ny0z YzQ3LTk0NTAtZWY5N2JlMGJhMzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI76wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsNW0uZKluoIfUdsvqamd9ejboCglMt2hA26jGtu9dTh/gMPfUgIhbe U8Hsf8At/VNah/UyTj+GRgBLTXK8NDuCJiBv7tq7YbC2tP1oNJaxN2g0YLiCui1V zOcrxF4bCz8h/ZwSWj1KQVELN4sakkLJinbET2tuc/4znk0+PbNoYgQ/ZcWLu0hn prmdGve9RAab+6zIOnW+yfSWGRrtm6RX+Y4xsVSxtuSJvNRLwU1EcOgQr0bXDj0z 9BJh7BH6cEk8fGru8Ooq7Cxq1S6AymLCb0nf5Ma5JSVwOHPtGD5vDpyiNz9DJH0D wR04gTokwb74630mNOJSUreXAEEqtcU= -----END CERTIFICATE-----Generated at Sat Apr 26 14:59:21 2025 by rpki-client