$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cbb7dca7-1741-3540-a935-2d758ae7ce55.roa File: cbb7dca7-1741-3540-a935-2d758ae7ce55.roa (raw, json) Hash identifier: hLpqzyWjfA32XMOy1gypuu6L5O0fypHWqBk+aH8+m1g= Subject key identifier: D8:98:AA:56:06:6C:EF:D5:81:67:3D:DD:62:2D:0A:62:EC:73:93:14 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784D816773F9D412BE69680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cbb7dca7-1741-3540-a935-2d758ae7ce55.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.240.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:d8:16:77:3f:9d:41:2b:e6:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=a96128ad-4c24-4a1e-a3be-fd390ae91d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:78:0c:4d:ae:29:d5:a2:93:c3:d5:40:3e:14: fd:b5:a9:ba:5e:86:07:90:7d:4b:c7:c5:71:c6:fe: f1:19:fc:0f:75:84:ad:92:e4:da:4e:7f:9b:ce:fe: 77:aa:d5:bb:c7:ba:c8:e9:7a:24:7c:40:a4:13:4e: c1:06:46:d1:27:8f:72:77:eb:49:a1:b7:fe:ea:38: dd:f6:96:aa:5d:e7:31:86:68:51:2a:71:dd:ed:86: c9:c0:d1:b3:83:97:c8:60:c9:c8:3f:5a:03:5e:eb: 76:3c:e8:6d:04:6d:8e:d4:cd:6a:8e:b6:01:84:f7: d0:67:f7:12:97:9c:d9:49:ff:57:65:e2:87:67:cf: 18:f9:7c:6b:82:5e:5c:71:d4:12:01:38:89:e4:47: 4f:17:22:b4:65:2e:0b:8c:b6:38:38:80:8f:0d:f6: 39:c5:ff:6f:64:b3:ff:e8:cc:3c:e0:c0:b5:4f:c2: 7a:ed:89:17:f9:0b:65:50:1c:ed:f2:b3:ff:81:80: 43:af:48:c9:ac:bb:ca:33:2e:ee:31:b4:e8:b3:ec: 2c:61:49:2c:e4:b5:ed:81:c0:6f:1b:38:cf:44:65: 21:71:eb:4a:2e:40:c3:1e:dc:47:ec:ad:56:45:ae: d1:c0:6e:94:16:d8:91:a3:fa:ca:88:35:96:b8:3f: 28:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:98:AA:56:06:6C:EF:D5:81:67:3D:DD:62:2D:0A:62:EC:73:93:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cbb7dca7-1741-3540-a935-2d758ae7ce55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.240.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:2a:43:c7:28:62:95:78:b6:83:b3:ef:f9:b0:aa:e9:74:1b: e9:a7:b1:79:64:ba:1f:a2:19:19:98:8c:c5:5c:86:ae:7a:7c: 85:42:46:09:7c:cc:ab:c4:3b:6e:ca:ae:74:7d:2a:e7:15:c3: d7:c0:80:93:1b:f6:0d:36:1e:88:0c:c6:b7:0e:01:22:a6:83: 60:19:63:95:cb:6a:e4:e1:4d:f4:06:53:b0:52:30:ca:c6:91: 89:a6:7e:9a:3d:8c:9f:85:9e:b7:3a:04:88:f1:9f:20:fd:56: 2f:fb:b5:74:b3:6d:16:86:02:c1:16:79:88:72:b0:ee:5f:f6: 8a:7a:b7:ef:06:aa:9d:87:27:ba:29:1a:b3:74:79:30:d6:b6: 23:a3:50:90:1a:21:c3:11:38:4e:60:17:39:7d:21:99:13:af: 2c:39:ce:17:22:2d:f1:f3:07:5d:ef:f4:08:c6:b9:c5:81:b5: f0:5e:d0:d8:c9:21:10:97:d0:6e:9c:67:6a:b9:fe:3f:e6:86: 98:72:28:04:6b:8a:1c:e9:a6:9c:4c:c6:33:89:e7:b0:ba:3b: b3:3c:a8:04:d7:81:83:ad:c5:b0:53:d5:a8:9b:91:00:9a:bf: 2b:23:46:56:51:60:47:b2:4a:19:c5:55:11:05:1e:6e:9f:98: ad:3f:8e:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNgWdz+dQSvmloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YTk2MTI4YWQtNGMyNC00YTFlLWEzYmUtZmQzOTBhZTkxZDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3gMTa4p1aKTw9VAPhT9tam6XoYHkH1Lx8Vx xv7xGfwPdYStkuTaTn+bzv53qtW7x7rI6XokfECkE07BBkbRJ49yd+tJobf+6jjd 9paqXecxhmhRKnHd7YbJwNGzg5fIYMnIP1oDXut2POhtBG2O1M1qjrYBhPfQZ/cS l5zZSf9XZeKHZ88Y+Xxrgl5ccdQSATiJ5EdPFyK0ZS4LjLY4OICPDfY5xf9vZLP/ 6Mw84MC1T8J67YkX+QtlUBzt8rP/gYBDr0jJrLvKMy7uMbTos+wsYUks5LXtgcBv GzjPRGUhcetKLkDDHtxH7K1WRa7RwG6UFtiRo/rKiDWWuD8oWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNiYqlYGbO/VgWc93WItCmLsc5MUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2JiN2RjYTctMTc0MS0z NTQwLWE5MzUtMmQ3NThhZTdjZTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/AgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4qQ8coYpV4toOz7/mwqul0G+mnsXlkuh+iGRmYjMVchq56fIVCRgl8 zKvEO27KrnR9KucVw9fAgJMb9g02HogMxrcOASKmg2AZY5XLauThTfQGU7BSMMrG kYmmfpo9jJ+Fnrc6BIjxnyD9Vi/7tXSzbRaGAsEWeYhysO5f9op6t+8Gqp2HJ7op GrN0eTDWtiOjUJAaIcMROE5gFzl9IZkTryw5zhciLfHzB13v9AjGucWBtfBe0NjJ IRCX0G6cZ2q5/j/mhphyKARrihzpppxMxjOJ57C6O7M8qATXgYOtxbBT1aibkQCa vysjRlZRYEeyShnFVREFHm6fmK0/jsk= -----END CERTIFICATE-----Generated at Sat Apr 26 14:55:43 2025 by rpki-client