$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbd91504-9e29-35de-9f03-000178d01c9a.roa File: bbd91504-9e29-35de-9f03-000178d01c9a.roa (raw, json) Hash identifier: dCdJDbr1N/EK8X+fFCCq3ojBRO2siLKXZgB9jh+dYj8= Subject key identifier: AA:8A:3C:DC:7E:30:6B:A8:4E:83:8F:1D:FC:0D:BE:34:7B:A0:D0:89 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78523D67B3B397955F6B3C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbd91504-9e29-35de-9f03-000178d01c9a.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.239.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:23:d6:7b:3b:39:79:55:f6:b3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=f22120c0-503c-49e6-88f7-b8d056c2e72c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3c:f2:28:aa:7e:ba:a3:aa:21:54:27:72:df: 9e:d9:d6:ed:a2:dc:be:27:e8:a5:ee:c2:09:ba:2a: 9e:0d:9d:08:e0:d9:be:44:8d:bf:b7:d4:0e:fc:7d: ee:e6:7e:bd:0b:84:6a:4a:3a:82:e2:ba:70:8e:0a: cc:3f:e6:48:03:04:0c:a1:5e:5a:e5:c8:6c:fa:5d: 35:ee:39:79:14:6f:94:97:d0:da:67:ef:b8:ba:56: 12:ff:88:8f:37:3f:b6:b1:ee:00:e3:d6:b3:9a:0a: f0:d7:87:0a:bc:55:ed:3d:c5:9a:cb:f5:95:f0:d9: d5:f7:56:54:1f:c1:8c:b1:76:27:12:9f:07:0a:4e: 83:fc:3f:c2:9a:cc:bd:a5:6f:73:1e:4a:d4:5a:1a: 76:61:f3:12:85:21:95:31:0d:3e:d9:66:73:b0:a8: 09:23:85:33:20:bd:42:8c:65:23:7f:29:c3:9d:b8: 5e:0c:5b:44:b4:81:46:c7:d3:1f:f7:08:e1:a5:44: dc:7c:e0:91:4e:63:ff:8b:79:84:35:4c:50:ff:cb: 62:a9:fb:1d:49:3a:f7:98:5a:ce:09:b8:09:78:71: 3c:59:6f:8e:9f:42:d0:b8:fa:a6:1c:65:00:61:74: 00:f9:c1:fb:33:3b:a6:81:2b:af:3a:80:94:41:b6: ab:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:8A:3C:DC:7E:30:6B:A8:4E:83:8F:1D:FC:0D:BE:34:7B:A0:D0:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbd91504-9e29-35de-9f03-000178d01c9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.239.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:c2:31:80:cf:3d:9b:f3:f8:cb:55:72:34:19:6a:fb:37:3f: 4c:a2:29:23:2c:94:02:1d:1a:31:30:d9:7e:f9:0a:0c:a2:fd: 2b:52:86:42:52:14:d1:f7:a4:85:1f:ee:ed:7a:1a:f1:6e:22: 83:37:c6:a7:9b:58:e6:07:2c:25:ab:cc:8c:c7:d3:98:82:1d: f0:fd:9d:bd:6d:8b:3a:e1:97:b7:95:c9:81:2c:28:8b:67:a8: 16:bb:60:2d:86:a5:22:2b:44:8e:aa:d6:14:f8:24:01:5d:fb: 97:dc:56:28:9d:50:fb:b0:b8:f8:c7:58:c6:29:9f:e7:be:40: 64:ad:fe:df:f5:3d:a8:cb:c1:99:f9:ce:c7:e6:5a:52:ed:45: 07:6b:e0:af:08:5f:d6:b8:a6:c8:0c:d8:56:44:e0:a3:6d:d9: 5e:4d:67:0e:9f:dd:f8:fa:d7:f0:ff:ab:a6:cc:3b:88:72:e1: 17:0c:ac:23:d7:9f:b7:06:de:69:ed:7f:32:f5:93:fe:7f:fc: f9:e3:31:64:99:e5:ad:17:51:41:f0:8a:db:04:41:20:fd:1e: 4a:64:60:ce:59:b5:59:89:a4:98:e2:b4:2b:5b:32:89:17:ba: 78:71:ce:3b:b2:e1:9c:d0:32:7e:1f:97:51:05:72:de:2e:f4: c3:de:f7:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhSPWezs5eVX2s8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZjIyMTIwYzAtNTAzYy00OWU2LTg4ZjctYjhkMDU2YzJlNzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTzyKKp+uqOqIVQnct+e2dbtoty+J+il7sIJ uiqeDZ0I4Nm+RI2/t9QO/H3u5n69C4RqSjqC4rpwjgrMP+ZIAwQMoV5a5chs+l01 7jl5FG+Ul9DaZ++4ulYS/4iPNz+2se4A49azmgrw14cKvFXtPcWay/WV8NnV91ZU H8GMsXYnEp8HCk6D/D/Cmsy9pW9zHkrUWhp2YfMShSGVMQ0+2WZzsKgJI4UzIL1C jGUjfynDnbheDFtEtIFGx9Mf9wjhpUTcfOCRTmP/i3mENUxQ/8tiqfsdSTr3mFrO CbgJeHE8WW+On0LQuPqmHGUAYXQA+cH7MzumgSuvOoCUQbar6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqKPNx+MGuoToOPHfwNvjR7oNCJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmJkOTE1MDQtOWUyOS0z NWRlLTlmMDMtMDAwMTc4ZDAxYzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErCMYDPPZvz+MtVcjQZavs3P0yiKSMslAIdGjEw2X75Cgyi/StShkJS FNH3pIUf7u16GvFuIoM3xqebWOYHLCWrzIzH05iCHfD9nb1tizrhl7eVyYEsKItn qBa7YC2GpSIrRI6q1hT4JAFd+5fcViidUPuwuPjHWMYpn+e+QGSt/t/1PajLwZn5 zsfmWlLtRQdr4K8IX9a4psgM2FZE4KNt2V5NZw6f3fj61/D/q6bMO4hy4RcMrCPX n7cG3mntfzL1k/5//PnjMWSZ5a0XUUHwitsEQSD9HkpkYM5ZtVmJpJjitCtbMokX unhxzjuy4ZzQMn4fl1EFct4u9MPe9x4= -----END CERTIFICATE-----Generated at Sat Apr 26 19:25:31 2025 by rpki-client