$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5cf2d84-533f-325b-b505-edd0dab7d371.roa File: a5cf2d84-533f-325b-b505-edd0dab7d371.roa (raw, json) Hash identifier: ztdnq20txgCA31/hx+pkCL8H53xUHrPuadsl8VrJpNI= Subject key identifier: E1:00:BC:A8:0B:DC:1B:44:33:AA:B5:F5:DB:EA:20:B6:C9:05:57:CA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78530004F1EFFD60425B2E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5cf2d84-533f-325b-b505-edd0dab7d371.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 35.187.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:30:00:4f:1e:ff:d6:04:25:b2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=cb0e5a90-96eb-4a0c-b3f5-b5dea5ba0165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7a:cc:b3:61:23:7e:dd:49:31:3b:90:e9:84: 15:ff:8d:8c:39:37:95:82:0c:c5:15:14:87:6f:4a: 05:cc:c4:f5:ff:13:24:c5:76:38:24:4a:01:a5:bb: da:54:d4:4b:f9:aa:bc:07:52:29:e6:5b:78:b2:c2: 4e:d6:f4:c5:d9:5f:44:db:2c:62:7c:f1:89:da:91: 78:56:7b:c7:58:ba:ae:90:d0:7e:0d:b4:15:7d:61: 37:ad:72:17:ae:d3:9d:3c:52:56:e8:ba:57:c1:2f: f7:1b:87:60:8d:9f:fc:ea:4e:71:35:76:ca:5b:1b: 1a:e3:1f:02:13:3f:0f:bb:67:f0:08:09:08:01:69: 2c:b6:9a:25:c2:21:e7:cd:31:96:c1:ee:5a:05:da: 56:31:7e:38:d3:6a:5e:20:e9:92:1c:cf:fb:65:8b: ec:ed:50:c4:06:e6:81:af:0e:cc:c1:96:c5:65:7b: 92:46:7d:7c:59:ea:38:e8:c7:7d:02:18:e9:ef:88: f7:9d:d7:f2:cc:d7:ba:16:a8:6d:a8:d1:49:b4:8e: bd:62:5d:bb:67:3a:fd:2b:ab:2a:b5:34:08:1c:d6: da:94:b7:8a:43:3c:8e:1e:19:17:ab:dd:cc:4f:f5: 9e:73:df:21:40:44:c5:de:74:ca:20:fa:df:4e:02: 3c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:00:BC:A8:0B:DC:1B:44:33:AA:B5:F5:DB:EA:20:B6:C9:05:57:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5cf2d84-533f-325b-b505-edd0dab7d371.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.187.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:f3:e3:f8:c1:ad:a0:d1:69:64:d7:c7:0d:cb:1f:56:af:01: e2:71:04:71:a8:93:c0:42:a5:d6:aa:c4:ba:34:fa:03:df:bf: 14:90:1c:98:1e:3d:f9:8c:97:d5:44:9b:05:cd:cf:1f:f5:08: bf:3e:e7:0d:0b:61:6d:87:87:d1:ce:16:1d:60:61:55:7b:08: 8d:02:7e:bf:30:82:99:aa:5a:65:88:37:53:73:58:b6:26:c6: 10:73:2b:a6:b3:1d:47:b7:09:7a:01:0b:e5:7b:4e:74:f4:e4: 04:c2:e0:2c:b8:37:1d:10:7d:22:a3:5a:f7:b5:0c:96:9b:55: fb:66:e0:66:1e:fe:8e:69:0b:5d:20:50:78:b0:bb:a3:f2:66: 7f:b0:dc:4c:b1:b4:99:db:ce:ce:90:f4:e1:5f:10:00:82:98: c2:56:25:12:ea:3a:78:ea:91:32:e1:8d:ab:66:0f:fc:2c:2e: b5:d9:d7:45:34:e6:d9:06:5d:06:07:a5:52:ac:1b:c3:f0:7a: 8a:f3:a2:cf:e6:fc:d8:7b:4a:04:a6:db:8f:58:55:a6:31:cf: bf:46:6d:d8:c8:8d:c4:29:64:be:8b:8a:69:f8:72:32:bc:2d: 7f:e9:b9:0b:ff:b2:cf:c4:f9:e5:73:82:a5:f2:40:82:27:2a: 2c:c1:56:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTAATx7/1gQlsuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk Y2IwZTVhOTAtOTZlYi00YTBjLWIzZjUtYjVkZWE1YmEwMTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXrMs2Ejft1JMTuQ6YQV/42MOTeVggzFFRSH b0oFzMT1/xMkxXY4JEoBpbvaVNRL+aq8B1Ip5lt4ssJO1vTF2V9E2yxifPGJ2pF4 VnvHWLqukNB+DbQVfWE3rXIXrtOdPFJW6LpXwS/3G4dgjZ/86k5xNXbKWxsa4x8C Ez8Pu2fwCAkIAWkstpolwiHnzTGWwe5aBdpWMX4402peIOmSHM/7ZYvs7VDEBuaB rw7MwZbFZXuSRn18Weo46Md9Ahjp74j3ndfyzNe6FqhtqNFJtI69Yl27Zzr9K6sq tTQIHNbalLeKQzyOHhkXq93MT/Wec98hQETF3nTKIPrfTgI87wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOEAvKgL3BtEM6q19dvqILbJBVfKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTVjZjJkODQtNTMzZi0z MjViLWI1MDUtZWRkMGRhYjdkMzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFI7ugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/z4/jBraDRaWTXxw3LH1avAeJxBHGok8BCpdaqxLo0+gPfvxSQHJge PfmMl9VEmwXNzx/1CL8+5w0LYW2Hh9HOFh1gYVV7CI0Cfr8wgpmqWmWIN1NzWLYm xhBzK6azHUe3CXoBC+V7TnT05ATC4Cy4Nx0QfSKjWve1DJabVftm4GYe/o5pC10g UHiwu6PyZn+w3EyxtJnbzs6Q9OFfEACCmMJWJRLqOnjqkTLhjatmD/wsLrXZ10U0 5tkGXQYHpVKsG8Pweorzos/m/Nh7SgSm249YVaYxz79GbdjIjcQpZL6Limn4cjK8 LX/puQv/ss/E+eVzgqXyQIInKizBVs4= -----END CERTIFICATE-----Generated at Sat Apr 26 21:05:42 2025 by rpki-client