$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b91c42b3-810d-3a8e-ad11-4be0356a8939.roa File: b91c42b3-810d-3a8e-ad11-4be0356a8939.roa (raw, json) Hash identifier: qplpps/4hIEMbc2B3WIdPEpf82FNHlskDdq+wyc/rIE= Subject key identifier: 3E:EB:4C:07:25:90:B6:07:51:E3:0F:3D:4F:DC:16:D1:26:17:31:9C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784F1F0FCC6C8C2C3907F80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b91c42b3-810d-3a8e-ad11-4be0356a8939.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.188.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:f1:f0:fc:c6:c8:c2:c3:90:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=3ca26414-a01a-441c-9fe4-d08fb1761de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4b:5b:2d:d3:67:47:c5:e1:ff:15:a5:17:7b: 90:e6:e0:8f:cb:92:1d:5b:d7:98:e3:52:ef:6e:eb: 36:d1:21:fe:30:1a:a4:cb:d7:e5:ac:73:67:34:d5: 81:b6:d7:45:5d:26:90:c1:c3:be:04:fe:98:fb:23: af:2f:a1:f1:6c:fb:69:14:f1:9c:19:29:3a:e9:ff: b2:10:8c:8d:1e:d8:22:19:72:94:5b:45:ef:a8:f6: 61:11:5f:20:fd:e5:c2:06:be:eb:d5:58:08:2d:38: 26:d8:66:9e:e2:cb:b6:ff:a1:df:5b:86:a7:0d:bb: a8:fc:69:93:4d:ff:ac:25:dc:1d:60:3a:13:2a:4e: e8:f1:da:1c:b7:11:23:66:e2:51:33:a4:fd:4f:f7: 35:d6:3a:aa:6b:04:e7:7a:28:d8:bd:5d:17:ed:65: 26:99:42:0a:2d:82:cd:5e:74:b1:a2:3b:b9:22:91: 36:78:71:94:b4:31:f3:e3:38:31:53:99:d0:b2:56: 5d:e3:95:06:94:98:d0:cc:a6:06:32:0c:fb:6d:e2: 32:a1:41:ae:14:37:8a:0f:37:dc:29:5a:54:65:d5: 10:a9:15:b5:c7:88:b6:3c:5c:fe:19:d4:9b:53:af: a4:b2:3c:0c:1e:f1:eb:9e:2f:40:a2:94:79:d9:3a: fb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EB:4C:07:25:90:B6:07:51:E3:0F:3D:4F:DC:16:D1:26:17:31:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b91c42b3-810d-3a8e-ad11-4be0356a8939.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.188.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:b2:e9:1a:f0:81:d7:a2:b3:3e:7c:c9:ed:24:7e:60:d2:c6: cb:7e:29:35:4a:4d:6e:42:ff:b1:c3:2e:c9:d9:f0:d2:34:1b: 64:16:e0:d2:72:66:14:5c:59:01:26:5a:5f:ad:22:a1:e1:53: ef:13:68:60:f0:15:d8:0d:cd:15:03:d0:bf:d0:3f:ed:18:ce: 2a:40:0c:f4:7b:84:4e:c0:07:34:b2:d8:c7:7f:6f:62:64:dc: be:b6:86:44:13:dd:ae:b2:5e:ad:03:7c:cc:89:0b:20:2f:ff: 6a:bd:b6:15:39:a9:e1:50:72:8b:13:b7:91:31:4c:a1:e2:af: 0d:f4:ea:6f:5a:98:70:3b:7b:24:e9:aa:a3:c0:42:c2:b3:7d: bc:4c:3e:31:ca:da:70:5d:f0:bd:8c:4a:e5:6b:b6:eb:a7:69: 09:d3:77:26:83:01:cc:4a:8a:c9:82:80:4a:db:27:d2:69:e2: ea:75:84:fd:2c:59:14:2d:3d:95:b8:f4:ca:be:db:1b:39:51: 3f:15:fc:63:c2:18:c4:9d:2d:e6:a8:7f:cd:9a:f0:ce:59:1a: 5e:e2:80:75:cb:77:29:e3:e7:da:26:71:63:31:4a:08:36:86: b2:30:9f:68:ee:fa:b9:87:13:a9:e8:95:e5:6d:23:32:1e:63: cc:0b:56:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPHw/MbIwsOQf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk M2NhMjY0MTQtYTAxYS00NDFjLTlmZTQtZDA4ZmIxNzYxZGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUtbLdNnR8Xh/xWlF3uQ5uCPy5IdW9eY41Lv bus20SH+MBqky9flrHNnNNWBttdFXSaQwcO+BP6Y+yOvL6HxbPtpFPGcGSk66f+y EIyNHtgiGXKUW0XvqPZhEV8g/eXCBr7r1VgILTgm2Gae4su2/6HfW4anDbuo/GmT Tf+sJdwdYDoTKk7o8doctxEjZuJRM6T9T/c11jqqawTneijYvV0X7WUmmUIKLYLN XnSxoju5IpE2eHGUtDHz4zgxU5nQslZd45UGlJjQzKYGMgz7beIyoUGuFDeKDzfc KVpUZdUQqRW1x4i2PFz+GdSbU6+ksjwMHvHrni9AopR52Tr7DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7rTAclkLYHUeMPPU/cFtEmFzGcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjkxYzQyYjMtODEwZC0z YThlLWFkMTEtNGJlMDM1NmE4OTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7xgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGy6Rrwgdeisz58ye0kfmDSxst+KTVKTW5C/7HDLsnZ8NI0G2QW4NJy ZhRcWQEmWl+tIqHhU+8TaGDwFdgNzRUD0L/QP+0YzipADPR7hE7ABzSy2Md/b2Jk 3L62hkQT3a6yXq0DfMyJCyAv/2q9thU5qeFQcosTt5ExTKHirw306m9amHA7eyTp qqPAQsKzfbxMPjHK2nBd8L2MSuVrtuunaQnTdyaDAcxKismCgErbJ9Jp4up1hP0s WRQtPZW49Mq+2xs5UT8V/GPCGMSdLeaof82a8M5ZGl7igHXLdynj59omcWMxSgg2 hrIwn2ju+rmHE6noleVtIzIeY8wLVp4= -----END CERTIFICATE-----Generated at Sat Apr 26 16:07:06 2025 by rpki-client