$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5aaf058-9fbc-36d7-877a-1a427aa1e4c2.roa File: a5aaf058-9fbc-36d7-877a-1a427aa1e4c2.roa (raw, json) Hash identifier: xkQg/QelhnrbMyefjKq+AcF0oF9I7movcKLRORbt7is= Subject key identifier: EB:18:31:33:35:CA:69:59:82:B8:EC:6E:D9:AB:CC:20:B3:83:F9:90 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784CC29E311392063124640 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5aaf058-9fbc-36d7-877a-1a427aa1e4c2.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.238.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:cc:29:e3:11:39:20:63:12:46:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=1ce9fd02-903d-407b-9a2f-4c0b410980c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:46:c4:ed:59:b6:64:5d:f0:66:87:54:93:ab: 76:6f:b1:0a:ec:6e:90:83:ed:67:71:dc:47:c6:a6: 2c:ec:42:0d:93:80:5b:2b:b4:50:ef:4f:22:bc:31: 48:8a:b6:3f:fc:03:f2:03:9b:d6:cb:35:4c:c5:9a: a2:73:98:1c:0d:3e:77:9e:b3:00:92:ed:b5:d5:c0: af:bc:4e:9c:8b:56:f1:03:1d:bd:3a:13:17:68:2d: 71:87:70:31:d5:31:cf:d4:4d:f7:db:9c:64:62:9c: 5e:2e:f0:f1:ce:32:63:96:cc:d4:7a:9a:24:82:2a: 80:73:ab:66:a6:63:b3:23:31:9c:20:96:8a:84:c4: 1a:45:05:fc:9b:20:30:c6:f8:60:64:cb:02:4a:2f: c5:4a:bd:18:55:34:31:97:6f:a9:d6:36:8d:c1:04: 92:57:7c:1d:ea:e7:40:4f:11:9b:97:26:a8:44:27: bf:fd:96:82:d6:b1:59:e4:8a:1e:8a:c4:48:78:21: 28:f1:9b:37:ad:df:78:79:8c:ea:ec:05:25:bc:69: 86:5b:2c:cc:b6:be:dc:13:16:65:a5:05:33:e2:e3: 6b:9b:be:21:b5:e4:e0:6d:38:3c:e8:50:67:c9:09: 76:9b:99:1a:09:e4:75:67:58:4d:37:9f:5d:e3:88: b3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:18:31:33:35:CA:69:59:82:B8:EC:6E:D9:AB:CC:20:B3:83:F9:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5aaf058-9fbc-36d7-877a-1a427aa1e4c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:09:be:ae:02:e2:1d:83:d6:2d:cb:f4:88:9c:45:37:a1:b0: c7:02:41:58:da:78:d4:37:ab:ad:d9:f0:83:28:a6:db:49:9b: 95:90:85:e0:81:a5:b2:7a:93:b1:50:ff:71:2d:e7:da:ae:e7: 8e:03:f3:63:fa:1f:e3:fb:ad:30:a5:f1:31:c1:96:dc:77:de: 8c:46:a3:c2:28:89:86:4e:97:58:e0:82:23:c6:c8:30:a3:1b: 0d:1a:f8:a2:d2:e2:68:52:1f:9e:44:bb:b8:ff:59:12:4f:28: 00:00:ab:d5:ce:c0:8d:71:3c:68:96:97:37:b3:92:ad:65:a3: 60:c0:1f:01:13:f8:aa:dd:fe:ec:b6:5c:45:e6:48:da:93:21: 14:17:33:87:da:7e:38:ef:05:a2:c5:26:c8:a4:2a:3c:ff:e3: b8:b2:25:f3:33:86:fd:20:bd:db:13:27:af:4a:b6:6e:c0:cc: d2:76:97:5f:d2:49:65:48:df:ff:3b:78:ea:5c:2e:7d:46:ce: 1c:8c:af:d8:4c:fd:36:83:ab:21:a4:f6:b2:b0:56:0e:2e:ab: 9c:1b:df:3e:de:ea:27:0e:41:0b:52:47:eb:49:37:a2:e8:3f: b1:f9:07:64:33:01:94:c9:60:07:85:f9:a6:79:21:ad:11:44: e3:8d:1e:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMwp4xE5IGMSRkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MWNlOWZkMDItOTAzZC00MDdiLTlhMmYtNGMwYjQxMDk4MGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkbE7Vm2ZF3wZodUk6t2b7EK7G6Qg+1ncdxH xqYs7EINk4BbK7RQ708ivDFIirY//APyA5vWyzVMxZqic5gcDT53nrMAku211cCv vE6ci1bxAx29OhMXaC1xh3Ax1THP1E3325xkYpxeLvDxzjJjlszUepokgiqAc6tm pmOzIzGcIJaKhMQaRQX8myAwxvhgZMsCSi/FSr0YVTQxl2+p1jaNwQSSV3wd6udA TxGblyaoRCe//ZaC1rFZ5IoeisRIeCEo8Zs3rd94eYzq7AUlvGmGWyzMtr7cExZl pQUz4uNrm74hteTgbTg86FBnyQl2m5kaCeR1Z1hNN59d44izUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsYMTM1ymlZgrjsbtmrzCCzg/mQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTVhYWYwNTgtOWZiYy0z NmQ3LTg3N2EtMWE0MjdhYTFlNGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQJvq4C4h2D1i3L9IicRTehsMcCQVjaeNQ3q63Z8IMopttJm5WQheCB pbJ6k7FQ/3Et59qu544D82P6H+P7rTCl8THBltx33oxGo8IoiYZOl1jggiPGyDCj Gw0a+KLS4mhSH55Eu7j/WRJPKAAAq9XOwI1xPGiWlzezkq1lo2DAHwET+Krd/uy2 XEXmSNqTIRQXM4fafjjvBaLFJsikKjz/47iyJfMzhv0gvdsTJ69Ktm7AzNJ2l1/S SWVI3/87eOpcLn1GzhyMr9hM/TaDqyGk9rKwVg4uq5wb3z7e6icOQQtSR+tJN6Lo P7H5B2QzAZTJYAeF+aZ5Ia0RROONHgo= -----END CERTIFICATE-----Generated at Sat Apr 26 18:10:14 2025 by rpki-client