$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4216241-8789-3504-8e99-5bd2f64d40a4.roa File: a4216241-8789-3504-8e99-5bd2f64d40a4.roa (raw, json) Hash identifier: gfsgCXvv2a6XCpmsMeuu5gdHlBRADUVIDvlptYl1OGk= Subject key identifier: D5:D0:DB:6C:AF:15:83:D1:6A:95:CF:10:2F:D6:F0:F4:14:11:4E:C6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78529D5B693D982FEB7FA60 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4216241-8789-3504-8e99-5bd2f64d40a4.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.189.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:29:d5:b6:93:d9:82:fe:b7:fa:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=036b7c05-cf0f-4ff4-86d1-9662348d8d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a0:f5:c2:e6:96:c4:34:2b:cd:4e:93:cc:eb: 97:f6:7f:1c:35:70:40:6f:f3:f1:dc:aa:65:21:8a: 8e:8b:a3:71:3c:9b:22:e3:d6:69:69:b4:5e:88:ac: 2d:1a:f5:fe:bb:aa:df:66:d0:87:3f:73:85:f5:d2: 3d:86:90:a1:fc:f2:aa:a7:74:4d:64:74:c8:6a:dc: 19:6d:e7:af:1d:5c:94:32:72:c6:db:da:0a:c0:a4: 4f:5a:06:4d:84:54:a7:38:a4:99:5d:4f:28:a9:71: df:5f:a2:5e:04:68:12:7f:81:56:0f:ed:d8:8a:4d: a8:0e:0a:1c:10:ef:0b:49:ca:ab:ef:23:7f:f2:a0: f9:e0:39:57:1e:53:d0:fe:22:c1:84:0c:98:c1:4b: ed:04:59:7d:25:70:a3:66:87:a7:36:93:cb:34:d1: ac:66:81:4c:1a:36:18:bb:03:7f:0b:5f:65:ed:e5: b1:8a:cf:0b:16:40:5c:eb:29:a9:78:87:11:58:68: ab:79:29:fd:b4:8a:e6:37:16:bf:66:a4:29:be:f9: 5e:f8:45:84:c8:d4:fa:35:19:94:62:45:f0:45:03: 85:b4:ab:27:2a:b6:72:8b:7c:56:95:b6:88:fa:53: 98:09:60:86:e5:c7:9b:cd:54:ce:70:47:3d:14:02: ea:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D0:DB:6C:AF:15:83:D1:6A:95:CF:10:2F:D6:F0:F4:14:11:4E:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4216241-8789-3504-8e99-5bd2f64d40a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.189.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:19:1f:a7:ab:35:c7:2f:d4:26:a0:91:b2:04:b6:be:57:b9: bf:5e:90:e3:17:04:ff:41:78:7d:46:b3:f3:65:48:03:e9:b7: e8:aa:5a:4a:35:c0:32:60:ff:5b:19:1a:5c:f8:ef:45:e9:33: 35:34:6d:82:b0:27:2e:44:d3:e7:c0:f3:8f:18:9c:87:21:af: af:2c:79:0d:d2:4a:4b:8b:ed:af:33:7e:4f:40:8c:b8:af:ed: d9:26:99:bf:6b:d5:72:73:1a:ae:0f:7d:e2:73:3f:10:bb:d3: 84:4b:6c:27:9e:2f:0e:42:60:a0:3d:f6:1d:33:28:76:ae:1d: f8:94:37:d9:60:da:a1:46:09:f0:14:c7:77:19:b7:eb:59:ec: 0e:59:bc:c4:5e:8f:5c:8e:d2:c0:cd:19:98:e0:6e:1b:5f:1e: 01:c2:ef:c4:9b:53:97:6b:ed:2a:84:5f:3a:57:95:16:c9:39: 30:d8:be:50:5b:ad:d0:15:1a:fb:c0:63:e9:c4:b7:62:d5:6a: c2:a7:48:88:37:5f:22:9a:17:2f:42:ca:8f:8a:44:3d:1b:db: ca:8f:4e:92:d6:6e:b5:34:64:cf:c5:7c:25:cc:4e:28:26:19: 48:32:52:1f:38:20:e4:a6:91:01:d7:b9:a2:49:87:76:33:70: aa:17:15:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhSnVtpPZgv63+mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MDM2YjdjMDUtY2YwZi00ZmY0LTg2ZDEtOTY2MjM0OGQ4ZDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraD1wuaWxDQrzU6TzOuX9n8cNXBAb/Px3Kpl IYqOi6NxPJsi49ZpabReiKwtGvX+u6rfZtCHP3OF9dI9hpCh/PKqp3RNZHTIatwZ beevHVyUMnLG29oKwKRPWgZNhFSnOKSZXU8oqXHfX6JeBGgSf4FWD+3Yik2oDgoc EO8LScqr7yN/8qD54DlXHlPQ/iLBhAyYwUvtBFl9JXCjZoenNpPLNNGsZoFMGjYY uwN/C19l7eWxis8LFkBc6ympeIcRWGireSn9tIrmNxa/ZqQpvvle+EWEyNT6NRmU YkXwRQOFtKsnKrZyi3xWlbaI+lOYCWCG5cebzVTOcEc9FALqwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXQ22yvFYPRapXPEC/W8PQUEU7GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTQyMTYyNDEtODc4OS0z NTA0LThlOTktNWJkMmY2NGQ0MGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI72gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkZH6erNccv1CagkbIEtr5Xub9ekOMXBP9BeH1Gs/NlSAPpt+iqWko1 wDJg/1sZGlz470XpMzU0bYKwJy5E0+fA848YnIchr68seQ3SSkuL7a8zfk9AjLiv 7dkmmb9r1XJzGq4PfeJzPxC704RLbCeeLw5CYKA99h0zKHauHfiUN9lg2qFGCfAU x3cZt+tZ7A5ZvMRej1yO0sDNGZjgbhtfHgHC78SbU5dr7SqEXzpXlRbJOTDYvlBb rdAVGvvAY+nEt2LVasKnSIg3XyKaFy9Cyo+KRD0b28qPTpLWbrU0ZM/FfCXMTigm GUgyUh84IOSmkQHXuaJJh3YzcKoXFSk= -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:43 2025 by rpki-client