$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db37a99b-a1a1-3f66-98e6-d6c1d96ecf61.roa File: db37a99b-a1a1-3f66-98e6-d6c1d96ecf61.roa (raw, json) Hash identifier: B3RhxfgO025B+o0uhHwY8b5gFiqiXnAibxWM7YW3vJs= Subject key identifier: 7E:26:82:37:C3:47:0E:BB:57:1C:61:E1:EA:6F:EB:65:37:8B:EE:74 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784E36DF292FE44EECED740 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db37a99b-a1a1-3f66-98e6-d6c1d96ecf61.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.187.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e3:6d:f2:92:fe:44:ee:ce:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=34f3cfd4-e94a-4aef-adbc-3c726d840e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a9:de:d0:a4:78:78:cc:3a:5e:0c:61:5e:41: 46:2d:79:e3:42:37:e6:bc:c3:bd:c3:70:b8:39:55: 99:ca:df:05:a9:f8:10:e7:c3:c3:42:a9:97:1b:a1: f0:4a:4a:5f:0b:8a:6e:fc:05:74:fd:c5:cb:87:0b: 51:f7:36:40:ae:1a:06:97:de:c8:e6:7b:7d:a8:b7: 83:c5:69:93:ee:45:78:36:ab:92:0c:93:17:21:95: f4:f5:0b:9b:44:f8:31:2d:71:f8:5c:88:7b:45:df: f1:d0:ba:94:86:78:7b:85:f9:14:fd:57:f0:07:db: 4d:9e:04:3e:8e:3a:a1:a5:6a:67:8c:0c:5c:e6:07: 23:7c:1b:4d:59:4d:f7:90:84:7e:96:2e:44:de:a0: 48:12:60:7c:54:40:10:40:b1:da:21:35:ec:71:3c: 71:d3:64:9f:45:ca:18:8c:b5:28:14:f6:df:97:d8: db:a2:50:26:18:fa:29:18:3b:ea:cf:9f:d9:fd:02: 46:b0:40:23:7f:cc:43:b5:73:c2:5e:29:32:1c:7a: 66:2c:f1:bf:37:69:33:6e:5e:d3:53:54:9b:bb:32: 32:9e:03:14:b6:84:de:8f:16:90:51:b1:0c:44:79: fe:5f:ae:eb:2b:c2:37:16:d3:a5:78:72:c9:45:8b: 77:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:26:82:37:C3:47:0E:BB:57:1C:61:E1:EA:6F:EB:65:37:8B:EE:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db37a99b-a1a1-3f66-98e6-d6c1d96ecf61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.187.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:4b:92:2a:71:aa:10:1c:b8:94:f7:b4:3f:74:8b:86:fc:a1: d6:9e:a5:af:47:6a:79:3b:f3:c0:04:cf:a5:a7:33:5d:ac:79: 0d:6e:48:0e:cb:a9:f9:bd:73:8f:40:dd:f9:38:9d:5f:c9:48: 0d:99:2e:83:14:2d:a7:4b:f3:77:4b:a6:5d:1c:7a:9f:b7:41: a7:dc:42:12:28:a3:b4:70:66:a7:3f:ca:fe:81:7a:62:d8:7f: cf:a1:31:ff:b5:f4:50:21:0f:7c:0f:2e:0b:41:8b:8c:c2:c1: 46:b4:ab:81:d0:5f:00:d9:e6:d5:cd:c9:e4:a4:e6:1d:02:6c: cb:dc:05:c7:14:05:10:f4:43:1c:d6:b1:5a:15:37:71:ac:41: b5:e8:d7:3a:bc:52:26:f5:5b:08:9b:02:6d:de:69:10:f4:1c: 04:18:21:62:c2:0f:ef:5d:11:b2:f9:51:8d:cd:54:ed:2d:ef: da:cf:eb:71:14:57:3a:b0:32:70:6e:44:c6:b3:16:b8:c8:7e: dd:d5:fe:d1:e3:a0:c2:43:26:ec:17:37:80:c7:a1:04:b5:12: 61:c0:b0:53:a8:45:aa:4b:15:97:9c:f0:ef:e5:c2:69:2f:6b: dd:f5:9e:d1:c7:2c:98:ff:2b:9c:b3:f9:8a:52:e3:e1:c9:c3: 5f:ed:b6:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhONt8pL+RO7O10AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MzRmM2NmZDQtZTk0YS00YWVmLWFkYmMtM2M3MjZkODQwZTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6ne0KR4eMw6XgxhXkFGLXnjQjfmvMO9w3C4 OVWZyt8FqfgQ58PDQqmXG6HwSkpfC4pu/AV0/cXLhwtR9zZArhoGl97I5nt9qLeD xWmT7kV4NquSDJMXIZX09QubRPgxLXH4XIh7Rd/x0LqUhnh7hfkU/VfwB9tNngQ+ jjqhpWpnjAxc5gcjfBtNWU33kIR+li5E3qBIEmB8VEAQQLHaITXscTxx02SfRcoY jLUoFPbfl9jbolAmGPopGDvqz5/Z/QJGsEAjf8xDtXPCXikyHHpmLPG/N2kzbl7T U1SbuzIyngMUtoTejxaQUbEMRHn+X67rK8I3FtOleHLJRYt3xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4mgjfDRw67Vxxh4epv62U3i+50MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGIzN2E5OWItYTFhMS0z ZjY2LTk4ZTYtZDZjMWQ5NmVjZjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7twMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdLkipxqhAcuJT3tD90i4b8odaepa9Hank788AEz6WnM12seQ1uSA7L qfm9c49A3fk4nV/JSA2ZLoMULadL83dLpl0cep+3QafcQhIoo7RwZqc/yv6BemLY f8+hMf+19FAhD3wPLgtBi4zCwUa0q4HQXwDZ5tXNyeSk5h0CbMvcBccUBRD0QxzW sVoVN3GsQbXo1zq8Uib1WwibAm3eaRD0HAQYIWLCD+9dEbL5UY3NVO0t79rP63EU VzqwMnBuRMazFrjIft3V/tHjoMJDJuwXN4DHoQS1EmHAsFOoRapLFZec8O/lwmkv a931ntHHLJj/K5yz+YpS4+HJw1/ttlM= -----END CERTIFICATE-----Generated at Sat Apr 26 15:57:35 2025 by rpki-client