$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d79033ae-0861-31c6-bc37-ca7eda9c4b53.roa File: d79033ae-0861-31c6-bc37-ca7eda9c4b53.roa (raw, json) Hash identifier: 1wXKYfpyW7RPVeDJlVPr5O+C52cT4sAVlFxOdtVEKno= Subject key identifier: 39:CE:D9:5F:85:B6:05:99:6B:D0:C2:1B:EA:47:08:9F:C5:D4:FD:AC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784F27C48AAF062A15FFAC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d79033ae-0861-31c6-bc37-ca7eda9c4b53.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.193.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:f2:7c:48:aa:f0:62:a1:5f:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=af98c9a6-96ae-4e13-adc8-788f4c92bbb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:12:8f:24:ab:1b:94:2b:26:0f:25:9a:4c:d3: 40:01:35:05:bc:df:03:f1:ba:1c:71:6d:7b:d8:88: 3d:74:15:34:77:18:30:af:77:ce:71:2a:c1:30:5c: 74:b1:48:a7:44:66:cf:b7:a6:b8:1a:d6:ad:49:a7: c7:33:63:1d:24:45:4c:4d:2c:7d:64:ae:de:3c:c8: 29:a6:01:ed:96:5a:a3:4c:fe:09:0f:be:8f:b1:ac: 5c:1b:e7:56:ce:0d:9b:c4:06:e1:a7:5b:c0:c3:d7: 09:16:c1:27:8d:a5:a8:a8:99:fe:8f:cf:1a:2e:9b: 09:9b:fb:d8:4b:c4:7b:f6:49:f7:11:08:bd:5e:25: 35:4c:3b:37:d1:1e:a4:4f:ef:be:4a:8e:83:9b:5f: 45:a4:f4:2e:7b:bb:25:88:08:dd:10:ce:ce:93:4d: f0:92:8e:9e:bc:45:2f:7a:dd:d3:97:de:57:b4:6c: 83:c3:7b:ff:ca:e8:2c:d3:a9:a6:39:9d:d4:89:a8: 83:2f:c4:0d:ec:99:5b:c7:c7:2f:ff:f2:0b:ca:42: 1d:1e:17:3f:f0:63:8f:3f:8a:bf:db:2a:19:1b:6b: 35:d5:c5:09:51:90:01:f3:db:24:17:b1:01:d3:e9: c9:c1:44:c2:30:2d:26:35:23:89:8f:c0:83:7b:f2: 19:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CE:D9:5F:85:B6:05:99:6B:D0:C2:1B:EA:47:08:9F:C5:D4:FD:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d79033ae-0861-31c6-bc37-ca7eda9c4b53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.193.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:9d:f8:63:4e:5f:17:9d:6a:6a:e3:53:09:84:af:5e:64:a6: 61:b7:f0:ff:78:2f:f7:ff:50:ce:ac:cc:36:b7:87:21:c3:68: 17:cd:c2:0d:58:81:a3:c9:2d:1b:d6:9b:96:80:cb:79:f0:1c: e0:11:9d:8e:36:c8:1f:46:df:44:f2:ba:50:54:57:ed:c1:4b: 49:ef:b5:13:17:fc:b7:aa:a5:a0:d0:25:91:b8:c6:ad:34:f8: a0:be:38:79:eb:3c:92:d3:a6:89:3f:59:fb:38:fc:aa:32:8d: 26:b1:34:29:c6:9f:41:ab:c1:02:c9:a6:d3:08:a9:4a:c0:e0: 0b:89:22:52:ab:a7:31:df:b0:0b:b4:80:bd:93:37:38:8a:66: dc:21:69:e8:1f:a6:b5:c9:ca:b7:db:f1:de:47:f6:a5:90:55: bd:cf:5b:44:41:2c:3c:53:f2:2b:cb:db:48:0d:94:fa:da:28: b5:ba:9b:65:fd:f3:6a:89:ca:55:08:82:cf:bb:3f:f5:7c:fc: f7:5e:b2:e1:6b:3b:b6:02:13:fa:ff:d2:d2:ab:11:c2:16:05: ee:02:56:60:27:69:a5:cf:55:45:97:db:8c:dc:b7:31:bb:03: f3:11:1c:e0:10:f2:8c:47:2d:6a:a8:5c:4b:69:99:94:5f:fc: f7:a9:94:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPJ8SKrwYqFf+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YWY5OGM5YTYtOTZhZS00ZTEzLWFkYzgtNzg4ZjRjOTJiYmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhKPJKsblCsmDyWaTNNAATUFvN8D8boccW17 2Ig9dBU0dxgwr3fOcSrBMFx0sUinRGbPt6a4GtatSafHM2MdJEVMTSx9ZK7ePMgp pgHtllqjTP4JD76PsaxcG+dWzg2bxAbhp1vAw9cJFsEnjaWoqJn+j88aLpsJm/vY S8R79kn3EQi9XiU1TDs30R6kT+++So6Dm19FpPQue7sliAjdEM7Ok03wko6evEUv et3Tl95XtGyDw3v/yugs06mmOZ3UiaiDL8QN7Jlbx8cv//ILykIdHhc/8GOPP4q/ 2yoZG2s11cUJUZAB89skF7EB0+nJwUTCMC0mNSOJj8CDe/IZ2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnO2V+FtgWZa9DCG+pHCJ/F1P2sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDc5MDMzYWUtMDg2MS0z MWM2LWJjMzctY2E3ZWRhOWM0YjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8GAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2d+GNOXxedamrjUwmEr15kpmG38P94L/f/UM6szDa3hyHDaBfNwg1Y gaPJLRvWm5aAy3nwHOARnY42yB9G30TyulBUV+3BS0nvtRMX/LeqpaDQJZG4xq00 +KC+OHnrPJLTpok/Wfs4/KoyjSaxNCnGn0GrwQLJptMIqUrA4AuJIlKrpzHfsAu0 gL2TNziKZtwhaegfprXJyrfb8d5H9qWQVb3PW0RBLDxT8ivL20gNlPraKLW6m2X9 82qJylUIgs+7P/V8/PdesuFrO7YCE/r/0tKrEcIWBe4CVmAnaaXPVUWX24zctzG7 A/MRHOAQ8oxHLWqoXEtpmZRf/PeplMY= -----END CERTIFICATE-----Generated at Sat Apr 26 14:58:29 2025 by rpki-client