$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afa8bcd3-b419-3678-be0e-fb0871e49b99.roa File: afa8bcd3-b419-3678-be0e-fb0871e49b99.roa (raw, json) Hash identifier: mVpoye6unJ98BMOlUZjylqtERi9P6aWru5Mph+23cFg= Subject key identifier: 3B:4C:EC:DF:C1:CF:56:F0:53:ED:FA:A9:0F:96:6D:A2:0E:E3:9A:D7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784D2DDA4F7BB1819B3DE00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afa8bcd3-b419-3678-be0e-fb0871e49b99.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.201.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:d2:dd:a4:f7:bb:18:19:b3:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=f1af2886-2a8e-4a70-82b2-cbe08a3de014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d0:93:69:61:a1:9c:1c:91:37:76:83:22:04: 7a:0a:25:5e:23:c9:b6:05:b0:b9:a8:52:25:71:33: 3d:cb:a4:a4:b8:2c:dc:91:ed:eb:88:4c:4e:27:1e: 69:b6:70:58:52:10:c9:ac:30:71:b6:ec:14:99:b9: 7f:1e:4e:a1:ab:f3:82:cf:b0:a9:a1:bc:11:e1:d1: ad:92:11:cb:a9:b3:3a:c7:04:00:6b:fe:cf:23:c5: a8:e3:f2:be:d3:05:1f:b1:2d:42:96:11:5a:e8:f2: be:f9:d4:11:3b:cf:4a:80:26:b5:bd:02:65:d7:f2: 42:c7:b4:84:f4:85:77:fb:2d:1e:5e:0c:78:99:0d: b6:29:b0:83:68:0a:50:f0:79:fb:ee:16:0a:44:bf: c7:bc:64:e1:8f:7a:0f:73:f3:7e:6e:f6:74:61:ab: 47:41:5e:7d:ab:bd:84:ea:9e:b0:2c:37:72:f8:22: f8:28:8a:a3:56:4f:ae:51:fb:ee:60:30:c3:e2:86: e4:8b:25:eb:25:eb:04:a7:1c:56:d2:c3:92:4f:17: a1:de:aa:a6:24:eb:ca:5e:ac:5a:9f:3f:e3:cd:47: d5:3b:1e:4e:01:f7:d3:b9:b2:55:44:50:73:19:72: c6:2c:71:f7:77:83:d5:fb:12:a6:03:f0:fa:c6:4f: e1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4C:EC:DF:C1:CF:56:F0:53:ED:FA:A9:0F:96:6D:A2:0E:E3:9A:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afa8bcd3-b419-3678-be0e-fb0871e49b99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.201.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:19:ea:22:9a:4b:23:2f:74:b5:a9:00:2b:e7:e0:56:32:66: d2:3a:3f:32:2f:8b:a2:db:c1:e3:29:dc:c7:0f:df:e6:9a:aa: ff:11:7e:26:a8:67:0b:f7:de:fe:71:28:00:45:3c:7b:4c:89: 82:53:41:52:61:c9:21:a2:ed:88:0f:29:f2:f4:04:bc:f8:28: 0c:eb:b9:71:c9:12:74:dd:e0:ee:3c:69:a9:f4:95:86:15:eb: a5:e0:02:e1:d0:60:67:5a:0b:48:13:6b:db:fc:30:fc:34:d3: d1:23:e3:30:bb:78:8b:b8:16:4f:70:cb:89:2c:2e:8e:13:5c: 21:fa:24:d0:c5:47:af:40:78:9a:b6:7e:fc:a6:eb:b4:a9:bc: 01:84:f7:47:00:39:15:a0:5d:95:64:a9:dd:7c:93:b1:24:29: dd:83:60:7a:44:54:17:cd:26:6a:ea:6a:34:c5:9a:06:43:e2: f2:1a:b3:aa:3f:b9:d0:cd:f1:3c:fb:83:ec:81:2a:3c:4b:1c: 76:14:e5:44:9a:0b:67:f2:72:0b:70:71:f2:ff:95:21:8a:bc: ee:4d:5e:b4:ca:3d:56:82:a9:15:48:c9:43:32:f8:0a:36:bc: 89:12:2c:f3:ff:ce:13:bd:98:d9:09:8c:7f:3a:ac:02:0d:7a: ff:fb:2a:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNLdpPe7GBmz3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZjFhZjI4ODYtMmE4ZS00YTcwLTgyYjItY2JlMDhhM2RlMDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNCTaWGhnByRN3aDIgR6CiVeI8m2BbC5qFIl cTM9y6SkuCzcke3riExOJx5ptnBYUhDJrDBxtuwUmbl/Hk6hq/OCz7CpobwR4dGt khHLqbM6xwQAa/7PI8Wo4/K+0wUfsS1ClhFa6PK++dQRO89KgCa1vQJl1/JCx7SE 9IV3+y0eXgx4mQ22KbCDaApQ8Hn77hYKRL/HvGThj3oPc/N+bvZ0YatHQV59q72E 6p6wLDdy+CL4KIqjVk+uUfvuYDDD4obkiyXrJesEpxxW0sOSTxeh3qqmJOvKXqxa nz/jzUfVOx5OAffTubJVRFBzGXLGLHH3d4PV+xKmA/D6xk/hZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtM7N/Bz1bwU+36qQ+WbaIO45rXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWZhOGJjZDMtYjQxOS0z Njc4LWJlMGUtZmIwODcxZTQ5Yjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8nQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgZ6iKaSyMvdLWpACvn4FYyZtI6PzIvi6LbweMp3McP3+aaqv8Rfiao Zwv33v5xKABFPHtMiYJTQVJhySGi7YgPKfL0BLz4KAzruXHJEnTd4O48aan0lYYV 66XgAuHQYGdaC0gTa9v8MPw009Ej4zC7eIu4Fk9wy4ksLo4TXCH6JNDFR69AeJq2 fvym67SpvAGE90cAORWgXZVkqd18k7EkKd2DYHpEVBfNJmrqajTFmgZD4vIas6o/ udDN8Tz7g+yBKjxLHHYU5USaC2fycgtwcfL/lSGKvO5NXrTKPVaCqRVIyUMy+Ao2 vIkSLPP/zhO9mNkJjH86rAINev/7Kkc= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:28 2025 by rpki-client