$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b50938cb-9f50-364b-8769-74d96745db1a.roa File: b50938cb-9f50-364b-8769-74d96745db1a.roa (raw, json) Hash identifier: Hh0UuFs5CHxw2Q5opUq0Vt/4dkABD0As4ZyYDrTIMAM= Subject key identifier: 36:71:3A:68:11:D5:B4:AD:7E:8F:43:77:63:B0:2D:CA:91:27:01:E9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7852EAD8436B2F3E5974D80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b50938cb-9f50-364b-8769-74d96745db1a.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.204.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:2e:ad:84:36:b2:f3:e5:97:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=07acb700-bab0-489a-b506-d5dbb7945c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:79:8d:82:a1:d5:d6:ab:e7:6b:fe:57:a4:90: 9f:d8:77:80:25:fc:02:7d:1d:4b:5a:a4:86:1d:8c: 22:22:da:70:0c:c2:5f:2f:50:b6:c0:03:88:10:9f: 28:f6:5d:6e:e2:6a:bb:b3:cd:da:0e:ad:48:37:02: fc:37:b3:ae:4b:73:87:cd:0e:bb:eb:a8:89:2a:69: 0d:f6:17:7c:d5:df:81:9a:da:e6:a3:06:83:7c:61: 56:de:a9:c4:ee:15:20:e7:7e:4b:a8:0e:ab:83:ad: 1e:fa:ac:62:a8:5b:c4:3c:43:3c:68:bd:d3:b0:23: 35:36:3f:c5:d0:35:39:0c:d2:13:b0:c3:fc:d9:0b: 71:f4:06:5c:ec:03:0d:aa:f6:94:a2:21:5e:8d:d5: 6b:fe:14:8e:bf:fd:e2:7b:aa:ee:d4:53:64:d9:19: b1:6e:f3:a2:43:33:c4:3c:ef:9e:3c:ed:e5:fd:ea: 68:55:41:8d:a1:ba:3e:ae:e4:fd:83:c7:48:fb:12: 4b:a7:b7:e6:17:3d:2b:9b:04:10:1e:bb:8a:77:7e: aa:3b:d2:1b:b6:3d:f2:75:90:fe:b5:1c:86:0c:d3: ae:94:95:bf:26:9e:ea:28:10:47:6c:cb:f8:92:89: 62:19:3f:f5:69:05:74:a0:e1:bc:21:1c:46:1a:d6: a0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:71:3A:68:11:D5:B4:AD:7E:8F:43:77:63:B0:2D:CA:91:27:01:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b50938cb-9f50-364b-8769-74d96745db1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.204.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:3f:44:d3:89:a6:63:68:d7:1e:91:4a:87:e5:0c:7a:58:03: 7a:15:10:2c:aa:6d:c5:57:d5:62:77:8d:d5:37:df:b2:72:2e: 3b:f6:af:aa:85:b3:73:d3:2c:82:fe:b4:c5:14:d7:21:ec:1c: c3:12:ef:56:9f:ff:48:38:da:34:bf:93:13:14:20:e6:cc:d1: 6d:87:67:ad:49:02:c7:9e:06:f7:59:10:db:2a:ab:48:23:b7: b7:51:c8:d6:ef:f4:d6:e8:8e:4e:ed:0f:46:88:92:3b:23:9d: 2e:41:3f:1a:d7:7a:5c:c1:10:f5:68:9d:a1:ed:2f:86:a7:61: fe:4e:76:b0:21:5a:73:4c:ac:fe:65:ef:7d:ad:fa:bd:2d:ed: 2f:f9:c9:75:9b:59:38:e1:6e:41:0e:a0:e6:07:c1:02:03:90: ed:17:1b:cd:12:30:f2:f7:f6:ee:7c:08:61:ad:33:9d:fb:3d: f6:cc:82:f7:f6:7c:59:15:3e:ca:ff:95:77:0e:f2:3d:00:2d: 9e:6b:35:e3:af:66:3c:03:be:43:85:7a:35:da:87:91:98:03: d1:81:29:41:93:a8:1a:83:7a:1b:71:33:fc:9d:90:e0:a2:4e: 8c:63:79:54:93:3f:48:ed:dd:3a:9d:ab:9c:2b:f1:49:57:59: 7e:e0:ea:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhS6thDay8+WXTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MDdhY2I3MDAtYmFiMC00ODlhLWI1MDYtZDVkYmI3OTQ1YzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nmNgqHV1qvna/5XpJCf2HeAJfwCfR1LWqSG HYwiItpwDMJfL1C2wAOIEJ8o9l1u4mq7s83aDq1INwL8N7OuS3OHzQ6766iJKmkN 9hd81d+BmtrmowaDfGFW3qnE7hUg535LqA6rg60e+qxiqFvEPEM8aL3TsCM1Nj/F 0DU5DNITsMP82Qtx9AZc7AMNqvaUoiFejdVr/hSOv/3ie6ru1FNk2RmxbvOiQzPE PO+ePO3l/epoVUGNobo+ruT9g8dI+xJLp7fmFz0rmwQQHruKd36qO9Ibtj3ydZD+ tRyGDNOulJW/Jp7qKBBHbMv4koliGT/1aQV0oOG8IRxGGtagLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZxOmgR1bStfo9Dd2OwLcqRJwHpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjUwOTM4Y2ItOWY1MC0z NjRiLTg3NjktNzRkOTY3NDVkYjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEE/RNOJpmNo1x6RSoflDHpYA3oVECyqbcVX1WJ3jdU337JyLjv2r6qF s3PTLIL+tMUU1yHsHMMS71af/0g42jS/kxMUIObM0W2HZ61JAseeBvdZENsqq0gj t7dRyNbv9Nbojk7tD0aIkjsjnS5BPxrXelzBEPVonaHtL4anYf5OdrAhWnNMrP5l 732t+r0t7S/5yXWbWTjhbkEOoOYHwQIDkO0XG80SMPL39u58CGGtM537PfbMgvf2 fFkVPsr/lXcO8j0ALZ5rNeOvZjwDvkOFejXah5GYA9GBKUGTqBqDehtxM/ydkOCi ToxjeVSTP0jt3Tqdq5wr8UlXWX7g6tY= -----END CERTIFICATE-----Generated at Sat Apr 26 14:59:21 2025 by rpki-client