$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf77e286-2b1d-361e-a555-28cbd4739836.roa File: bf77e286-2b1d-361e-a555-28cbd4739836.roa (raw, json) Hash identifier: n+x9a9sCHwccsBNXCpJhThynNgWIgNM32qegbGfn6/E= Subject key identifier: EC:95:FF:1A:2E:EC:DF:B0:CD:0D:56:2B:AA:EA:8A:D0:5D:6F:CF:CC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7851691ADF0A1D16E308100 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf77e286-2b1d-361e-a555-28cbd4739836.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.197.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:16:91:ad:f0:a1:d1:6e:30:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=303000a4-e788-4417-90d0-69d0cb34f585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c1:f1:3f:e8:53:e5:42:b5:d4:28:cf:5e:cf: 1b:4a:d5:df:3d:ba:e6:49:cf:44:f6:dd:f4:a8:de: e4:44:bd:a6:89:7a:b2:5c:13:0a:39:1d:46:05:f1: 97:0e:34:70:16:94:92:f8:db:5e:47:0a:38:43:89: 4e:7a:fd:2c:cf:99:47:11:50:12:84:75:2d:77:6c: a3:11:3d:57:6d:b7:86:b6:20:39:77:7a:72:a8:d6: e2:29:97:c1:09:d9:76:8b:85:05:5b:f3:a5:ca:bd: f2:f0:6d:15:cf:ff:df:6b:07:bf:46:18:2f:60:69: 25:b5:e6:50:a1:50:58:84:21:88:4b:37:e5:d8:06: 5b:56:52:20:5f:ef:78:56:fd:2f:2c:05:7f:4f:ae: 44:95:bd:71:d1:43:d8:60:8f:2a:bd:52:ae:dd:19: 61:23:71:43:99:b5:b7:83:83:94:e7:4d:bd:b3:4a: 43:f3:ee:47:18:ba:29:1c:d0:80:3b:ba:d1:d3:1d: cb:9a:3e:0f:57:25:95:e2:f5:79:2e:ee:42:68:f9: ea:a2:c3:a8:74:e1:57:c7:6c:1c:a6:c2:3c:02:d7: bf:7a:8b:b2:c8:ca:75:91:b9:17:2d:c1:c8:db:2f: 72:b8:74:17:3a:94:50:7b:43:58:90:a4:66:68:c5: d8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:95:FF:1A:2E:EC:DF:B0:CD:0D:56:2B:AA:EA:8A:D0:5D:6F:CF:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf77e286-2b1d-361e-a555-28cbd4739836.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.197.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:1c:e0:8b:b2:78:ef:88:25:ce:80:4d:c8:9a:ba:09:66:cf: e2:12:3f:e6:84:a5:cc:66:06:38:66:45:11:52:fb:dd:b6:fd: ac:77:e1:82:85:bc:b4:a8:01:77:3e:14:15:f0:27:1a:06:36: a7:2e:89:40:6c:dd:e7:6b:bf:5c:d0:bf:60:3c:9b:86:ee:10: 8a:ee:8b:a0:24:60:eb:87:1b:f5:af:cd:05:a1:fa:ed:0d:49: d4:03:8d:a6:01:66:b4:e8:e5:f6:85:72:ab:c9:bd:57:71:9f: 2f:02:49:eb:b4:2a:30:29:49:ea:2f:e3:48:65:de:70:e0:4d: d2:02:ba:4c:26:08:c7:28:80:76:06:b6:f6:79:99:d2:eb:a4: 9c:38:41:be:1e:64:31:77:2f:5c:eb:a4:d6:21:2e:5b:7c:d4: f0:8c:2e:b0:63:b8:c8:d7:bb:1d:fc:66:ab:c6:2b:0e:61:66: 42:ed:9d:e0:83:d4:9e:bf:89:77:4a:26:39:c2:9b:00:d4:95: 4b:5c:09:62:98:b9:e4:94:79:41:59:07:f4:a9:1a:09:7f:d0: ab:c8:8e:31:92:67:9c:13:22:e8:7d:91:6b:1c:fc:bc:d6:06: b2:f3:9d:75:08:f1:ec:75:bf:b8:17:28:94:0b:bd:ca:3e:2a: 26:75:0c:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRaRrfCh0W4wgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MzAzMDAwYTQtZTc4OC00NDE3LTkwZDAtNjlkMGNiMzRmNTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssHxP+hT5UK11CjPXs8bStXfPbrmSc9E9t30 qN7kRL2miXqyXBMKOR1GBfGXDjRwFpSS+NteRwo4Q4lOev0sz5lHEVAShHUtd2yj ET1XbbeGtiA5d3pyqNbiKZfBCdl2i4UFW/Olyr3y8G0Vz//fawe/RhgvYGklteZQ oVBYhCGISzfl2AZbVlIgX+94Vv0vLAV/T65Elb1x0UPYYI8qvVKu3RlhI3FDmbW3 g4OU5029s0pD8+5HGLopHNCAO7rR0x3Lmj4PVyWV4vV5Lu5CaPnqosOodOFXx2wc psI8Ate/eouyyMp1kbkXLcHI2y9yuHQXOpRQe0NYkKRmaMXY6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOyV/xou7N+wzQ1WK6rqitBdb8/MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmY3N2UyODYtMmIxZC0z NjFlLWE1NTUtMjhjYmQ0NzM5ODM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8XwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcc4IuyeO+IJc6ATciauglmz+ISP+aEpcxmBjhmRRFS+922/ax34YKF vLSoAXc+FBXwJxoGNqcuiUBs3edrv1zQv2A8m4buEIrui6AkYOuHG/WvzQWh+u0N SdQDjaYBZrTo5faFcqvJvVdxny8CSeu0KjApSeov40hl3nDgTdICukwmCMcogHYG tvZ5mdLrpJw4Qb4eZDF3L1zrpNYhLlt81PCMLrBjuMjXux38ZqvGKw5hZkLtneCD 1J6/iXdKJjnCmwDUlUtcCWKYueSUeUFZB/SpGgl/0KvIjjGSZ5wTIuh9kWsc/LzW BrLznXUI8ex1v7gXKJQLvco+KiZ1DC8= -----END CERTIFICATE-----Generated at Sat Apr 26 16:34:57 2025 by rpki-client