$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5f090dd-7752-3520-b324-111195cf61b3.roa File: b5f090dd-7752-3520-b324-111195cf61b3.roa (raw, json) Hash identifier: KJQD/KZIW/uM2QzBd85GcWTQKIFq2FNxl2XGgQMac20= Subject key identifier: 48:01:0B:87:CE:2D:B1:AC:2C:C1:4C:D4:D6:E0:4A:B5:6D:38:E6:AB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78536EADAF6628E60F2F780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5f090dd-7752-3520-b324-111195cf61b3.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.228.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:36:ea:da:f6:62:8e:60:f2:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=cdf298c1-9c48-4c1b-9e11-6cdba2fb4497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d1:aa:8b:e2:c5:13:da:1b:3d:a5:43:cc:d4: 58:6a:76:ba:d8:14:4e:8a:b1:65:32:9a:f3:f6:e8: 67:6c:0f:57:8c:4c:5d:1b:6b:e7:62:d1:37:81:45: 4a:65:e3:cb:d6:08:88:b2:fc:99:85:c1:04:c8:45: 93:c7:c8:af:c2:db:16:40:b9:01:23:cd:a8:a1:4a: f1:20:4b:9c:84:9c:cd:d1:97:6a:3d:0e:80:ca:6d: cb:99:61:18:07:c7:e8:e0:fc:f4:2c:e5:ad:b2:9c: f1:f4:b0:f5:88:f7:4a:37:e4:2f:c6:a5:a0:07:89: a5:73:0e:1a:d6:7c:f3:da:f8:6a:ad:94:69:0f:4b: 1b:d1:b9:a1:75:4e:0a:fe:96:03:fe:8b:c1:a3:c3: 8e:c3:5a:ef:b3:21:bc:16:cb:8d:e6:ce:ef:73:36: be:84:78:a3:76:58:1d:61:38:6d:44:c0:52:e6:a4: 30:b0:d1:48:b7:69:4b:e1:09:0a:65:4d:e1:2a:4e: 4c:38:03:27:cb:7e:90:d2:f3:d6:b4:f0:aa:8d:cd: 93:39:ae:b1:40:73:ba:5d:51:83:c9:5b:7c:77:73: 63:94:ee:69:76:06:16:78:f4:9d:c9:0b:3c:65:85: 1b:e8:bc:7d:3f:a7:74:76:27:5c:35:e7:1a:13:de: 40:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:01:0B:87:CE:2D:B1:AC:2C:C1:4C:D4:D6:E0:4A:B5:6D:38:E6:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5f090dd-7752-3520-b324-111195cf61b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.228.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:00:eb:0c:98:a2:db:37:6e:f8:ee:8c:26:63:02:93:c7:b7: 6a:01:d3:c2:10:29:45:ff:d5:ed:c9:2c:20:be:0e:4a:cf:86: 78:bb:99:e9:b4:5d:c7:bd:6c:fc:8e:d8:45:3c:de:73:6a:d9: fe:91:d0:86:2f:41:20:7e:aa:b5:8f:5d:0f:a5:2e:cc:ca:27: af:55:95:c5:27:55:e7:a9:d4:e4:91:35:3d:98:80:31:4f:0c: 5a:cd:ad:2b:3b:72:77:f9:6f:ba:50:1b:c4:a7:c5:64:a8:15: 53:01:91:72:3c:f8:52:84:33:1f:e9:ee:b1:83:6d:31:e8:e4: 6e:c9:6c:42:b6:4a:14:04:d0:7a:a8:4f:e1:c0:08:3a:14:28: fd:c7:2a:32:aa:54:c3:36:f2:99:cf:97:8f:db:49:62:e3:74: 0c:50:b3:fd:33:ba:a7:36:cd:ee:8c:6a:95:c8:8f:3a:b7:0a: 84:bc:51:70:40:fb:bd:4e:e2:a0:08:f1:70:b5:68:48:f8:f8: 0f:32:c8:c8:4b:fd:64:2a:30:b8:d3:fb:6f:bf:bf:8d:90:e5: f7:e0:cf:35:eb:1c:58:94:6f:bc:39:f5:a7:19:87:4d:f8:d6: 29:a8:50:f7:5f:3b:aa:70:87:a6:38:49:f5:54:30:b2:9f:db: 75:e9:66:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTbq2vZijmDy94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk Y2RmMjk4YzEtOWM0OC00YzFiLTllMTEtNmNkYmEyZmI0NDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9Gqi+LFE9obPaVDzNRYana62BROirFlMprz 9uhnbA9XjExdG2vnYtE3gUVKZePL1giIsvyZhcEEyEWTx8ivwtsWQLkBI82ooUrx IEuchJzN0ZdqPQ6Aym3LmWEYB8fo4Pz0LOWtspzx9LD1iPdKN+QvxqWgB4mlcw4a 1nzz2vhqrZRpD0sb0bmhdU4K/pYD/ovBo8OOw1rvsyG8FsuN5s7vcza+hHijdlgd YThtRMBS5qQwsNFIt2lL4QkKZU3hKk5MOAMny36Q0vPWtPCqjc2TOa6xQHO6XVGD yVt8d3NjlO5pdgYWePSdyQs8ZYUb6Lx9P6d0didcNecaE95ADwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgBC4fOLbGsLMFM1NbgSrVtOOarMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjVmMDkwZGQtNzc1Mi0z NTIwLWIzMjQtMTExMTk1Y2Y2MWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+QwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAA6wyYots3bvjujCZjApPHt2oB08IQKUX/1e3JLCC+DkrPhni7mem0 Xce9bPyO2EU83nNq2f6R0IYvQSB+qrWPXQ+lLszKJ69VlcUnVeep1OSRNT2YgDFP DFrNrSs7cnf5b7pQG8SnxWSoFVMBkXI8+FKEMx/p7rGDbTHo5G7JbEK2ShQE0Hqo T+HACDoUKP3HKjKqVMM28pnPl4/bSWLjdAxQs/0zuqc2ze6MapXIjzq3CoS8UXBA +71O4qAI8XC1aEj4+A8yyMhL/WQqMLjT+2+/v42Q5ffgzzXrHFiUb7w59acZh034 1imoUPdfO6pwh6Y4SfVUMLKf23XpZkQ= -----END CERTIFICATE-----Generated at Sat Apr 26 14:58:53 2025 by rpki-client