$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2db31af-896d-33f2-82e1-aa74f4c05861.roa File: d2db31af-896d-33f2-82e1-aa74f4c05861.roa (raw, json) Hash identifier: 8rz0uTJjEh8vzBTdZcc4XyyI5KxWMCn7f0bux8LhcH0= Subject key identifier: A7:7D:79:7F:63:40:FB:90:52:F2:7F:D5:78:85:E3:DA:6A:57:77:24 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784D5FA8D2C1EA31B236300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2db31af-896d-33f2-82e1-aa74f4c05861.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.201.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:d5:fa:8d:2c:1e:a3:1b:23:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=01a79435-6f91-4ae4-b1b2-c1b50c97d1af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:39:c1:f1:4e:7e:dc:2d:3b:23:77:89:d6:20: 33:37:3a:4a:c1:47:d9:9c:8c:c3:5d:4a:c8:aa:60: 68:6c:d7:70:9b:3e:15:dd:f6:01:f4:13:59:b0:3c: b0:5e:ee:b9:bb:2d:6c:58:cd:67:f8:55:ba:3d:76: 1c:0c:e3:70:1c:e6:3f:de:90:46:25:95:41:e5:6d: d6:9f:16:aa:a2:49:e9:4c:72:97:00:15:61:84:19: 41:07:f0:b3:99:9c:f7:1f:34:fc:29:3b:86:31:d8: a1:80:54:7e:b6:1f:29:ff:48:84:54:a4:98:29:a4: 24:09:fb:f2:b2:49:4f:50:f7:ba:25:16:2a:97:46: fe:20:ed:5e:1a:34:95:69:24:ad:2b:b2:f7:64:b6: 19:02:2c:a0:c6:52:d0:5d:db:bc:3e:31:f4:ba:38: 7d:dd:d9:0f:29:ba:05:fb:f4:4c:37:4e:0e:80:16: 1d:ce:e5:7b:a9:e1:e8:50:cb:aa:1d:99:1d:ea:3a: 9e:f7:a3:19:5b:be:87:1c:4b:0a:c1:b3:c5:a2:26: 65:9f:5a:6a:bd:fd:d6:ac:ac:e9:f5:20:37:d4:90: d4:e8:bb:88:8e:f1:ca:e7:ea:81:09:b9:36:8a:7d: 72:2d:1f:9b:a7:c7:12:20:c1:3d:1d:12:5d:d8:e0: 73:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7D:79:7F:63:40:FB:90:52:F2:7F:D5:78:85:E3:DA:6A:57:77:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d2db31af-896d-33f2-82e1-aa74f4c05861.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.201.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:04:0a:8b:23:d7:2d:38:80:4a:1b:a0:02:88:df:f5:e5:58: d4:22:fe:f0:c1:8e:14:26:6a:c8:33:37:c8:3b:8d:05:ee:2e: 73:fd:b9:c2:2d:f0:31:87:e4:90:08:a3:b5:77:86:94:fa:2f: 5b:cc:71:71:76:85:c0:9b:18:ef:4c:a9:3d:23:2f:ee:e1:0d: 5a:c5:3e:54:09:05:cb:56:a8:6c:a9:59:ad:df:e8:52:d4:12: 05:73:af:2c:48:9a:2c:bf:b9:cf:d7:60:37:79:c2:ae:8f:05: 4f:c7:15:8c:93:d9:d2:ae:68:3d:5f:8c:c9:8f:56:0b:2d:a8: 87:e2:ac:34:b2:8d:6f:3f:c1:e7:43:5a:8f:ef:47:85:b5:5d: 8f:62:c8:2d:c1:81:24:44:7d:30:01:1e:14:f3:21:07:91:9b: 86:fe:a5:59:aa:36:c3:a0:26:36:65:2c:e3:dd:60:dd:0f:8f: b2:a2:d3:e3:23:ff:75:c0:6d:0c:e9:5c:11:b5:85:8c:94:35: b7:af:a8:de:01:9d:2e:31:b7:8c:37:f0:c3:04:a8:5e:0c:66: ea:50:61:3c:ba:b4:a8:be:fb:02:c5:24:be:24:13:38:84:4d: ec:ea:57:82:6c:0a:bb:18:5f:0a:6e:e5:4c:b0:ed:e1:a4:2d: 44:43:0c:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNX6jSweoxsjYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MDFhNzk0MzUtNmY5MS00YWU0LWIxYjItYzFiNTBjOTdkMWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDnB8U5+3C07I3eJ1iAzNzpKwUfZnIzDXUrI qmBobNdwmz4V3fYB9BNZsDywXu65uy1sWM1n+FW6PXYcDONwHOY/3pBGJZVB5W3W nxaqoknpTHKXABVhhBlBB/CzmZz3HzT8KTuGMdihgFR+th8p/0iEVKSYKaQkCfvy sklPUPe6JRYql0b+IO1eGjSVaSStK7L3ZLYZAiygxlLQXdu8PjH0ujh93dkPKboF +/RMN04OgBYdzuV7qeHoUMuqHZkd6jqe96MZW76HHEsKwbPFoiZln1pqvf3WrKzp 9SA31JDU6LuIjvHK5+qBCbk2in1yLR+bp8cSIME9HRJd2OBz4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKd9eX9jQPuQUvJ/1XiF49pqV3ckMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDJkYjMxYWYtODk2ZC0z M2YyLTgyZTEtYWE3NGY0YzA1ODYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8kwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsECosj1y04gEoboAKI3/XlWNQi/vDBjhQmasgzN8g7jQXuLnP9ucIt 8DGH5JAIo7V3hpT6L1vMcXF2hcCbGO9MqT0jL+7hDVrFPlQJBctWqGypWa3f6FLU EgVzryxImiy/uc/XYDd5wq6PBU/HFYyT2dKuaD1fjMmPVgstqIfirDSyjW8/wedD Wo/vR4W1XY9iyC3BgSREfTABHhTzIQeRm4b+pVmqNsOgJjZlLOPdYN0Pj7Ki0+Mj /3XAbQzpXBG1hYyUNbevqN4BnS4xt4w38MMEqF4MZupQYTy6tKi++wLFJL4kEziE TezqV4JsCrsYXwpu5Uyw7eGkLURDDMA= -----END CERTIFICATE-----Generated at Sat Apr 26 16:18:03 2025 by rpki-client