$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b6b631c9-1d4d-3ea7-8a4c-a0c5635e1014.roa File: b6b631c9-1d4d-3ea7-8a4c-a0c5635e1014.roa (raw, json) Hash identifier: Z8aApltLt0oU9natiHDqwH3MlITJKS5GnRQn+jOcfTQ= Subject key identifier: 6B:6F:37:27:A9:6B:7D:01:90:5A:AF:1D:F7:73:62:C3:62:18:71:57 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78541B10BF6E8F02621B500 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b6b631c9-1d4d-3ea7-8a4c-a0c5635e1014.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.185.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:41:b1:0b:f6:e8:f0:26:21:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=d45ed5e7-22ed-4b7e-9559-bdc9e4d6b6a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2b:c5:3d:c0:89:83:1e:e8:11:a9:e2:c8:09: 11:61:41:d9:c2:cf:ec:d6:0a:fc:0a:ca:49:42:5a: 81:2a:1e:8e:0e:ef:83:76:c6:29:b4:2c:d5:37:07: 3b:c3:4b:21:c7:72:9b:cf:e4:45:e3:f0:68:5a:ab: 36:7b:2a:8d:bb:5d:fb:4c:f7:f5:05:f5:94:6a:4d: 93:d4:50:c0:a4:43:b9:2b:b3:4d:a0:db:3e:8c:9e: d1:5f:63:ff:e9:68:39:89:0a:6d:20:d5:c4:8a:fa: db:38:b2:d0:18:70:ba:36:9a:78:53:c3:e7:3f:3a: 0c:b4:1d:54:69:5f:e3:bf:0d:47:68:08:82:df:4a: dd:e4:34:b0:1f:7a:ad:5b:3e:8a:e6:8e:54:59:fa: c5:41:9c:2d:3c:d5:f4:8e:45:30:f0:f9:29:93:af: 6b:88:d5:42:13:94:59:52:1f:9c:8d:94:9d:e1:b3: c6:88:e4:73:39:16:70:a3:bb:02:19:0a:3c:f2:3a: bb:66:c8:6c:1d:a9:3b:be:af:41:00:02:af:92:a2: e7:cf:ee:68:77:8e:38:13:65:64:bc:62:1a:9e:3e: 0c:a6:96:4f:92:69:39:46:02:15:7e:1f:30:07:da: d1:96:db:88:d7:77:b3:e6:be:54:3c:07:70:59:db: 89:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:6F:37:27:A9:6B:7D:01:90:5A:AF:1D:F7:73:62:C3:62:18:71:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b6b631c9-1d4d-3ea7-8a4c-a0c5635e1014.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.185.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:2f:a3:08:81:03:79:70:cb:44:5f:9c:9e:13:b5:35:42:6a: 5f:d4:dc:51:98:23:c2:21:72:9f:6f:dd:c8:81:70:4d:3b:23: d6:03:5f:ad:c8:03:a8:c9:7f:ee:06:91:9f:f7:c1:29:7b:d7: 60:09:a1:d7:59:78:16:94:ac:ff:be:95:f4:e2:1e:e9:1f:28: 3b:cd:16:61:13:df:b0:5a:f4:37:74:81:19:ad:1d:49:93:06: ce:f4:60:82:8b:ea:97:82:ca:26:4a:03:bb:02:78:35:91:e3: eb:6a:d8:96:b3:3e:d8:80:c8:c5:c9:4b:6d:52:75:f4:b2:f2: 58:29:2b:01:75:fd:d1:32:0b:60:a9:5a:33:a8:3d:a6:60:18: 74:6f:e2:0c:ab:e8:c5:dd:e2:03:35:5d:86:48:c1:3b:76:20: 0c:a7:de:b7:05:b4:63:65:8d:00:9e:c0:85:a2:56:37:af:f7: 0f:c8:13:59:fa:6e:c6:ef:74:41:46:bd:be:c1:64:92:bb:f5: e6:f5:65:5f:fb:45:c4:f3:cb:07:22:5a:b3:51:e0:a5:7d:06: 2c:13:34:35:02:29:ed:1f:60:39:a9:ca:4e:f6:44:51:1b:58: 93:19:4e:24:f0:78:34:9d:df:dc:e1:9d:3e:c0:76:96:19:d4: 05:20:32:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhUGxC/bo8CYhtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZDQ1ZWQ1ZTctMjJlZC00YjdlLTk1NTktYmRjOWU0ZDZiNmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCvFPcCJgx7oEaniyAkRYUHZws/s1gr8CspJ QlqBKh6ODu+DdsYptCzVNwc7w0shx3Kbz+RF4/BoWqs2eyqNu137TPf1BfWUak2T 1FDApEO5K7NNoNs+jJ7RX2P/6Wg5iQptINXEivrbOLLQGHC6Npp4U8PnPzoMtB1U aV/jvw1HaAiC30rd5DSwH3qtWz6K5o5UWfrFQZwtPNX0jkUw8Pkpk69riNVCE5RZ Uh+cjZSd4bPGiORzORZwo7sCGQo88jq7ZshsHak7vq9BAAKvkqLnz+5od444E2Vk vGIanj4MppZPkmk5RgIVfh8wB9rRltuI13ez5r5UPAdwWduJRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtvNyepa30BkFqvHfdzYsNiGHFXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjZiNjMxYzktMWQ0ZC0z ZWE3LThhNGMtYTBjNTYzNWUxMDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7mQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUvowiBA3lwy0RfnJ4TtTVCal/U3FGYI8Ihcp9v3ciBcE07I9YDX63I A6jJf+4GkZ/3wSl712AJoddZeBaUrP++lfTiHukfKDvNFmET37Ba9Dd0gRmtHUmT Bs70YIKL6peCyiZKA7sCeDWR4+tq2JazPtiAyMXJS21SdfSy8lgpKwF1/dEyC2Cp WjOoPaZgGHRv4gyr6MXd4gM1XYZIwTt2IAyn3rcFtGNljQCewIWiVjev9w/IE1n6 bsbvdEFGvb7BZJK79eb1ZV/7RcTzywciWrNR4KV9BiwTNDUCKe0fYDmpyk72RFEb WJMZTiTweDSd39zhnT7AdpYZ1AUgMkQ= -----END CERTIFICATE-----Generated at Sat Apr 26 15:59:02 2025 by rpki-client