$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd785a08-19a6-36cf-adc5-b2567504ceab.roa File: dd785a08-19a6-36cf-adc5-b2567504ceab.roa (raw, json) Hash identifier: a9NZ1GQa2/Zw43vwsnyKpALiQkGO1BUwFja0UReRb4k= Subject key identifier: 87:23:CC:9D:BB:AD:80:38:F0:1C:98:2E:A5:0B:7B:F0:96:02:A2:60 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7852C79BF17FF6A5F66B980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd785a08-19a6-36cf-adc5-b2567504ceab.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.239.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:2c:79:bf:17:ff:6a:5f:66:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=473b859f-6267-4fb1-85b2-d13a130721f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:35:89:3c:41:45:82:6a:3f:17:6e:b5:63:2c: e3:dc:b8:dc:62:28:50:24:6c:c1:dc:76:b1:a1:e6: ce:ec:b3:c6:40:42:e0:51:dc:7f:65:14:4d:c1:62: 5f:e7:86:c9:0f:33:b1:42:0e:f1:3e:56:67:bd:90: 91:54:f9:0a:ce:f1:21:6c:91:d8:9e:a3:dd:c7:d4: 9f:93:d9:f9:68:1e:c4:c5:59:4b:5f:f3:08:41:60: 84:f1:e6:9e:6c:15:05:f7:b5:76:dc:13:65:2e:e4: ae:58:9e:fa:5c:46:84:4b:47:39:e7:b7:72:52:e3: 78:82:5a:39:02:fe:05:46:97:0e:91:f5:d5:05:64: 6b:4e:7f:39:22:42:71:69:fe:f4:32:2d:04:39:32: 98:26:4e:f8:68:a4:1c:8b:8a:f2:cc:dc:b0:e1:e7: 6f:14:96:bd:5f:40:5c:6e:18:8f:14:8b:e8:d1:35: 7e:2a:48:f6:0a:6e:60:b2:f8:b5:2b:3f:df:fd:c7: 85:14:13:36:7b:31:7c:80:11:58:41:f0:ea:d9:0e: 56:83:65:11:c2:2b:17:86:02:84:c1:18:8f:d6:11: b3:18:d8:3a:60:61:22:d1:24:9c:9d:54:b5:fa:30: f9:47:af:4d:61:63:34:d9:d5:2e:6c:cf:2f:ae:a1: a8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:23:CC:9D:BB:AD:80:38:F0:1C:98:2E:A5:0B:7B:F0:96:02:A2:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd785a08-19a6-36cf-adc5-b2567504ceab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.239.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:c8:a0:ce:6a:e2:e8:f9:39:13:87:fe:7e:61:11:98:96:06: bb:ea:8d:b6:e2:df:8c:9f:f2:f9:54:cd:5b:f7:d6:e9:1d:b3: 8e:3a:1a:41:d1:1d:ab:ad:65:16:d9:5d:23:d9:4a:95:14:49: 06:40:69:cd:f6:eb:5e:92:f7:10:5f:11:0d:45:77:31:31:7b: 18:a7:b8:67:ee:ab:d0:4c:e6:d5:8c:da:16:16:e7:83:3b:67: f9:31:d8:73:5d:95:cf:b1:1b:2e:11:8c:02:d2:3e:d1:71:8e: 99:d9:18:de:c7:b6:d6:71:2d:9a:c7:25:f7:a0:37:8c:16:2a: 54:19:f4:20:ee:e7:96:07:78:4c:ff:08:9c:8e:31:15:84:e7: f1:d2:5f:b1:25:5e:52:74:3b:58:4b:88:98:25:e2:03:87:1a: 98:a3:e0:a0:e3:04:80:9d:aa:c4:75:8d:ac:8c:a0:0e:8a:a5: 39:4f:be:44:33:1b:ca:94:c7:33:82:25:f0:50:c6:a5:a1:fd: c2:0e:cb:8f:20:64:40:fd:ac:d4:f5:b5:3e:f8:0d:17:bf:f3: 70:e2:7a:02:2a:ef:13:a2:82:7f:8c:4f:ba:46:14:2e:b5:d3: 46:01:7b:05:92:64:58:c2:ef:d1:27:94:f0:94:f4:f1:97:c0: 89:3b:a8:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhSx5vxf/al9muYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NDczYjg1OWYtNjI2Ny00ZmIxLTg1YjItZDEzYTEzMDcyMWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zWJPEFFgmo/F261Yyzj3LjcYihQJGzB3Hax oebO7LPGQELgUdx/ZRRNwWJf54bJDzOxQg7xPlZnvZCRVPkKzvEhbJHYnqPdx9Sf k9n5aB7ExVlLX/MIQWCE8eaebBUF97V23BNlLuSuWJ76XEaES0c557dyUuN4glo5 Av4FRpcOkfXVBWRrTn85IkJxaf70Mi0EOTKYJk74aKQci4ryzNyw4edvFJa9X0Bc bhiPFIvo0TV+Kkj2Cm5gsvi1Kz/f/ceFFBM2ezF8gBFYQfDq2Q5Wg2URwisXhgKE wRiP1hGzGNg6YGEi0SScnVS1+jD5R69NYWM02dUubM8vrqGoiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcjzJ27rYA48ByYLqULe/CWAqJgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGQ3ODVhMDgtMTlhNi0z NmNmLWFkYzUtYjI1Njc1MDRjZWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzIoM5q4uj5OROH/n5hEZiWBrvqjbbi34yf8vlUzVv31ukds446GkHR HautZRbZXSPZSpUUSQZAac32616S9xBfEQ1FdzExexinuGfuq9BM5tWM2hYW54M7 Z/kx2HNdlc+xGy4RjALSPtFxjpnZGN7HttZxLZrHJfegN4wWKlQZ9CDu55YHeEz/ CJyOMRWE5/HSX7ElXlJ0O1hLiJgl4gOHGpij4KDjBICdqsR1jayMoA6KpTlPvkQz G8qUxzOCJfBQxqWh/cIOy48gZED9rNT1tT74DRe/83DiegIq7xOign+MT7pGFC61 00YBewWSZFjC79EnlPCU9PGXwIk7qBk= -----END CERTIFICATE-----Generated at Sat Apr 26 19:05:27 2025 by rpki-client