$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e14865a5-e2dd-3b7f-aedb-2e0c41b27995.roa File: e14865a5-e2dd-3b7f-aedb-2e0c41b27995.roa (raw, json) Hash identifier: HdLM8c4CVU2MWz7tEFyF3GE5Psnnbqobdf5M/2ZPFTQ= Subject key identifier: 21:A3:64:F6:1C:2C:D1:E5:5F:C0:F3:B1:DC:C8:6C:F4:DA:8F:84:FB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784C64E6EEDF359FDB2C9C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e14865a5-e2dd-3b7f-aedb-2e0c41b27995.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.197.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:c6:4e:6e:ed:f3:59:fd:b2:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=895edd80-f1d6-45ee-9883-09dfccdbc513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bf:3d:90:32:33:ed:56:9c:5c:ad:c5:6a:d6: 4c:9e:58:1a:a0:58:1f:4f:07:c0:6a:a7:54:59:ab: af:a0:b0:6b:6e:94:d4:cf:33:d0:bb:d4:ae:2d:29: f8:f0:0e:73:cb:6b:eb:65:c4:26:47:12:b6:d9:d3: df:b0:26:a2:a3:69:25:f5:d3:bc:d7:d7:1e:f2:5f: eb:31:c6:b9:e5:2a:fb:e5:77:ec:e2:36:53:55:d3: 8a:0f:db:56:c6:0f:b1:80:71:64:3e:ee:2d:f0:8c: 6c:e7:0b:f9:66:50:d7:22:2a:9f:50:4f:a3:84:d6: 19:14:e7:5c:d4:a2:e3:81:a4:ed:14:17:89:50:82: 08:93:ee:49:d4:ae:bd:55:dd:c3:b2:85:74:63:92: 36:8a:a5:2f:45:85:5a:9a:46:3f:78:52:d1:c2:db: c2:7e:89:19:16:0b:b0:8b:34:02:fc:1b:b0:2b:0e: cf:98:44:23:51:9d:8d:12:2e:07:f5:1d:91:55:9d: 30:9e:ac:9a:78:0a:d4:a1:80:3c:f8:e8:4c:75:c9: c5:86:6e:45:ac:a4:b2:0a:ab:82:c4:0e:87:9c:f1: 60:f4:03:62:07:13:6a:d3:f0:4e:99:8b:b1:92:ca: da:65:65:ad:2f:9d:80:b6:1c:b8:52:f3:2b:91:be: d7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A3:64:F6:1C:2C:D1:E5:5F:C0:F3:B1:DC:C8:6C:F4:DA:8F:84:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e14865a5-e2dd-3b7f-aedb-2e0c41b27995.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.197.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:48:74:c8:1a:07:56:68:ad:d8:ae:be:97:5d:85:b4:ef:bc: ee:9e:bb:71:e4:81:fa:49:43:5a:6a:0b:9b:48:61:a6:95:56: c5:9b:0d:72:87:dc:d1:9a:ca:ff:b0:5d:97:0f:c2:94:24:8f: 9c:ee:2d:5c:d1:b6:2a:70:27:3d:41:bc:dc:56:b5:09:b0:e6: 7e:ae:ae:1c:25:3a:5f:ba:54:00:3c:17:63:9a:41:f0:b0:14: 23:42:22:69:59:60:77:14:a3:a7:8b:a6:4e:73:a8:a8:8f:88: 7d:e5:8f:0c:2b:49:c3:3b:5e:2b:73:15:6a:11:5c:8b:2f:9f: c2:46:db:b2:e7:8c:d1:85:10:3b:7e:03:ad:0c:df:03:49:27: e7:ce:bf:8e:d4:42:45:15:79:07:f1:f4:eb:cc:c9:ef:83:c7: 8c:46:78:11:71:cb:cc:64:1d:28:5b:2d:36:5f:29:a7:34:03: 89:ed:09:47:82:64:03:f4:92:a8:4b:fd:84:b2:76:2f:72:a6: e5:0b:cb:99:ca:4b:94:90:c3:e5:32:f1:3d:d4:c1:fd:91:a7: 0a:04:ce:1c:f0:a4:38:10:5c:3a:91:47:33:80:dd:0d:86:03: 83:fe:59:5f:db:8c:49:d5:be:3f:57:29:c8:8d:16:38:cb:ce: 72:4c:98:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMZObu3zWf2yycAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ODk1ZWRkODAtZjFkNi00NWVlLTk4ODMtMDlkZmNjZGJjNTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb89kDIz7VacXK3FatZMnlgaoFgfTwfAaqdU WauvoLBrbpTUzzPQu9SuLSn48A5zy2vrZcQmRxK22dPfsCaio2kl9dO819ce8l/r Mca55Sr75Xfs4jZTVdOKD9tWxg+xgHFkPu4t8Ixs5wv5ZlDXIiqfUE+jhNYZFOdc 1KLjgaTtFBeJUIIIk+5J1K69Vd3DsoV0Y5I2iqUvRYVamkY/eFLRwtvCfokZFguw izQC/BuwKw7PmEQjUZ2NEi4H9R2RVZ0wnqyaeArUoYA8+OhMdcnFhm5FrKSyCquC xA6HnPFg9ANiBxNq0/BOmYuxksraZWWtL52Athy4UvMrkb7XvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGjZPYcLNHlX8DzsdzIbPTaj4T7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTE0ODY1YTUtZTJkZC0z YjdmLWFlZGItMmUwYzQxYjI3OTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8UAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZIdMgaB1ZordiuvpddhbTvvO6eu3HkgfpJQ1pqC5tIYaaVVsWbDXKH 3NGayv+wXZcPwpQkj5zuLVzRtipwJz1BvNxWtQmw5n6urhwlOl+6VAA8F2OaQfCw FCNCImlZYHcUo6eLpk5zqKiPiH3ljwwrScM7XitzFWoRXIsvn8JG27LnjNGFEDt+ A60M3wNJJ+fOv47UQkUVeQfx9OvMye+Dx4xGeBFxy8xkHShbLTZfKac0A4ntCUeC ZAP0kqhL/YSydi9ypuULy5nKS5SQw+Uy8T3Uwf2RpwoEzhzwpDgQXDqRRzOA3Q2G A4P+WV/bjEnVvj9XKciNFjjLznJMmPE= -----END CERTIFICATE-----Generated at Sat Apr 26 16:01:00 2025 by rpki-client