$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cafc9d97-4121-3ff4-869e-d00ede385538.roa File: cafc9d97-4121-3ff4-869e-d00ede385538.roa (raw, json) Hash identifier: TRn5JtbZh4Bw3yNRlTskSSPTOkEakVmwNa87S8aW6ok= Subject key identifier: BB:D0:C1:F6:43:C2:E1:05:44:50:55:C6:09:1F:5A:71:29:35:84:02 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78519408A85965F51314C00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cafc9d97-4121-3ff4-869e-d00ede385538.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.198.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:19:40:8a:85:96:5f:51:31:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=0932a808-fce1-48d8-a210-de09582e4133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ef:fb:f5:1d:7a:00:a9:5f:1a:f7:a1:b0:8e: 6e:c6:17:66:75:24:a2:79:56:5d:51:84:c9:7a:0f: 8b:4b:ac:e0:56:16:95:42:c0:98:db:3b:ca:c7:f5: f3:4e:bf:96:81:6c:76:66:d5:38:55:a4:f2:f1:06: f2:17:ff:1c:a3:dc:e4:7e:00:01:39:9b:71:0f:9c: d2:39:61:ee:a5:cf:4c:13:15:a5:f7:c6:e6:2a:bd: 87:a2:a1:aa:f0:d4:5e:58:4d:bf:c8:64:a5:22:11: 47:18:9f:36:11:29:22:8e:3a:96:e0:2d:dc:4e:db: a0:de:51:a6:a2:eb:5d:de:77:29:22:3a:ca:ee:34: 95:b4:4f:fe:28:2d:5d:b7:87:6f:2f:80:df:c5:f5: 61:a7:08:77:52:55:eb:ab:eb:26:21:e1:f2:30:bc: f8:fe:3f:d1:62:4c:28:90:b6:53:73:a5:86:66:c7: 7c:e8:64:36:a1:0e:75:83:29:30:08:06:f4:a2:f3: 08:d5:47:18:17:1e:70:e7:5b:84:df:62:0c:36:fb: bc:e3:6c:0a:90:2c:96:b7:3e:1b:3a:1e:82:d1:16: ac:1d:e2:4d:a9:3b:7d:83:39:57:df:92:de:10:5f: e8:88:84:f4:99:6f:3b:cf:a4:2b:6d:c1:e4:70:12: 52:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D0:C1:F6:43:C2:E1:05:44:50:55:C6:09:1F:5A:71:29:35:84:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cafc9d97-4121-3ff4-869e-d00ede385538.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.198.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:1e:6e:dd:bd:09:bb:a2:93:33:f0:1e:eb:93:01:38:c6:a1: 2d:7a:df:6a:be:17:cf:94:0c:95:3d:d4:92:8b:ca:05:44:b1: 3e:5b:25:62:9f:a6:8b:61:ed:cc:da:42:d4:e9:d1:37:1c:37: 3c:dd:85:c7:32:30:ed:25:fc:60:c4:84:e3:99:da:f5:d3:72: 82:e0:b3:d2:22:81:e1:b0:22:2a:2b:e8:97:cf:2a:0b:d8:5b: 9d:e8:31:07:21:b3:53:41:c8:90:8d:4f:38:be:7a:2f:d8:8f: 0a:86:1b:e6:2a:e5:79:f1:55:a6:fe:62:a6:e2:15:2d:3b:40: 95:fd:df:a7:44:61:88:57:ae:75:0c:77:08:55:af:2b:f8:cc: 4b:80:32:ac:9c:2f:8b:a6:61:1a:7d:c8:6a:68:b1:b4:b9:f6: 51:1a:bb:60:de:3c:59:31:56:31:8f:10:c6:68:b0:d1:4d:04: 3a:65:cd:97:c1:1a:11:de:b9:89:d6:30:6f:8f:10:73:74:ab: 39:5b:dd:09:18:ed:3e:72:0a:0e:35:f4:83:87:68:c4:34:d3: c2:ee:ee:0f:d1:a0:a2:12:b5:01:ef:14:61:07:04:4c:c9:be: 43:26:00:51:cc:5a:b2:61:00:54:16:15:52:9d:71:76:1b:5c: 15:8c:e6:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRlAioWWX1ExTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MDkzMmE4MDgtZmNlMS00OGQ4LWEyMTAtZGUwOTU4MmU0MTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu/79R16AKlfGvehsI5uxhdmdSSieVZdUYTJ eg+LS6zgVhaVQsCY2zvKx/XzTr+WgWx2ZtU4VaTy8QbyF/8co9zkfgABOZtxD5zS OWHupc9MExWl98bmKr2HoqGq8NReWE2/yGSlIhFHGJ82ESkijjqW4C3cTtug3lGm outd3ncpIjrK7jSVtE/+KC1dt4dvL4DfxfVhpwh3UlXrq+smIeHyMLz4/j/RYkwo kLZTc6WGZsd86GQ2oQ51gykwCAb0ovMI1UcYFx5w51uE32IMNvu842wKkCyWtz4b Oh6C0RasHeJNqTt9gzlX35LeEF/oiIT0mW87z6QrbcHkcBJSXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvQwfZDwuEFRFBVxgkfWnEpNYQCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2FmYzlkOTctNDEyMS0z ZmY0LTg2OWUtZDAwZWRlMzg1NTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8agMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMebt29CbuikzPwHuuTATjGoS1632q+F8+UDJU91JKLygVEsT5bJWKf poth7czaQtTp0TccNzzdhccyMO0l/GDEhOOZ2vXTcoLgs9IigeGwIior6JfPKgvY W53oMQchs1NByJCNTzi+ei/YjwqGG+Yq5XnxVab+YqbiFS07QJX936dEYYhXrnUM dwhVryv4zEuAMqycL4umYRp9yGposbS59lEau2DePFkxVjGPEMZosNFNBDplzZfB GhHeuYnWMG+PEHN0qzlb3QkY7T5yCg419IOHaMQ008Lu7g/RoKIStQHvFGEHBEzJ vkMmAFHMWrJhAFQWFVKdcXYbXBWM5tc= -----END CERTIFICATE-----Generated at Sat Apr 26 16:40:11 2025 by rpki-client