$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f08dc628-fc39-375e-83da-194debef6da7.roa File: f08dc628-fc39-375e-83da-194debef6da7.roa (raw, json) Hash identifier: 3bwhHL5JUf/TM6OyLx7UlJ61s8CK2o20jTDwnoYpGMM= Subject key identifier: E2:1A:66:6A:58:34:1B:F1:51:CD:C9:76:A5:09:3B:4C:E3:46:7F:1D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7851BB78432A55565EC7240 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f08dc628-fc39-375e-83da-194debef6da7.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.193.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:1b:b7:84:32:a5:55:65:ec:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=ca77bd28-d058-400c-97a9-400914c62e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:02:1f:a9:59:3a:9d:b8:79:eb:a3:01:37:11: 82:e2:a8:27:66:09:2b:6d:3f:e5:58:9e:96:28:6b: 44:62:f2:1e:da:68:7c:a0:e8:eb:3c:e5:25:7f:0a: 17:62:89:ed:ea:27:2c:59:7f:84:cd:90:8c:17:86: 60:91:1b:91:80:2b:88:9d:32:cb:e2:3f:2d:77:a2: d5:05:df:82:91:c7:8b:e2:51:83:06:df:a9:5b:8c: 81:2e:9d:a4:14:66:bb:a4:82:d0:e1:74:aa:ce:fb: b7:6a:c6:c7:37:3e:11:5c:8e:1a:03:75:69:32:92: d5:53:32:17:e6:7c:88:01:98:22:f4:89:7a:d7:57: aa:62:72:9d:4c:f6:4c:0d:36:39:48:a7:12:b9:1d: 05:10:0e:02:75:03:85:90:87:dc:0f:18:64:28:e6: ca:bf:d9:d7:ab:88:7b:e5:a3:13:5e:58:a8:89:cc: 7e:27:e6:18:89:94:6c:83:b6:1e:58:96:fc:d6:2b: e5:ef:16:12:e6:5d:e3:1b:7b:5b:6a:28:4f:7f:21: 9b:b1:16:46:d3:e7:ef:ee:91:4b:ef:ac:e3:49:9c: 68:4f:e1:2f:c5:ee:0d:5a:9f:a1:a7:4b:8f:69:69: 13:24:6d:50:50:d3:42:8e:41:dc:6e:2b:a1:81:75: 2f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:1A:66:6A:58:34:1B:F1:51:CD:C9:76:A5:09:3B:4C:E3:46:7F:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f08dc628-fc39-375e-83da-194debef6da7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.193.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:96:df:50:c3:9d:1e:31:67:74:ee:b8:f7:6d:fa:52:f5:84: 7f:02:f9:9a:f7:a9:d7:50:4c:04:69:5c:6b:e3:ab:24:1f:c8: 63:45:4b:d8:01:a4:03:26:9e:41:33:cf:25:98:4f:96:4f:36: 64:47:47:73:c2:af:3c:19:7d:cb:8d:51:0e:d9:02:ba:93:28: 31:6d:8c:be:d5:19:7b:76:c5:b8:ba:6e:e3:55:ee:ce:c3:2c: 03:a8:e0:fb:f7:6e:aa:7b:32:be:87:73:81:f3:27:bc:c8:e4: b8:b5:0d:ba:0d:58:1f:51:78:20:e3:69:9f:dc:34:27:19:9d: 50:00:b9:e6:04:a8:4c:07:4a:70:08:b7:a1:3d:5d:2e:0c:04: 57:95:76:79:e4:86:3e:38:d8:69:bb:ce:7c:7a:7f:fe:a8:7a: 60:5a:ec:a9:1d:46:ec:e6:d2:ba:68:af:85:a6:eb:74:fd:c2: 22:69:5f:d2:3e:17:45:a8:d8:ff:59:fe:59:fd:22:f6:96:91: 37:f8:fa:8b:27:30:8d:ca:af:86:61:ca:75:b5:8b:87:b5:01: cb:c7:8b:77:7b:ab:1b:f3:03:c2:be:f2:d8:27:99:5d:54:b2: 6e:2a:0c:06:bf:e9:c7:cb:d5:82:09:fb:d4:72:f4:2f:59:32: 61:f0:be:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRu3hDKlVWXsckAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk Y2E3N2JkMjgtZDA1OC00MDBjLTk3YTktNDAwOTE0YzYyZTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQIfqVk6nbh566MBNxGC4qgnZgkrbT/lWJ6W KGtEYvIe2mh8oOjrPOUlfwoXYont6icsWX+EzZCMF4ZgkRuRgCuInTLL4j8td6LV Bd+CkceL4lGDBt+pW4yBLp2kFGa7pILQ4XSqzvu3asbHNz4RXI4aA3VpMpLVUzIX 5nyIAZgi9Il611eqYnKdTPZMDTY5SKcSuR0FEA4CdQOFkIfcDxhkKObKv9nXq4h7 5aMTXlioicx+J+YYiZRsg7YeWJb81ivl7xYS5l3jG3tbaihPfyGbsRZG0+fv7pFL 76zjSZxoT+Evxe4NWp+hp0uPaWkTJG1QUNNCjkHcbiuhgXUvzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIaZmpYNBvxUc3JdqUJO0zjRn8dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjA4ZGM2MjgtZmMzOS0z NzVlLTgzZGEtMTk0ZGViZWY2ZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8FgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiW31DDnR4xZ3TuuPdt+lL1hH8C+Zr3qddQTARpXGvjqyQfyGNFS9gB pAMmnkEzzyWYT5ZPNmRHR3PCrzwZfcuNUQ7ZArqTKDFtjL7VGXt2xbi6buNV7s7D LAOo4Pv3bqp7Mr6Hc4HzJ7zI5Li1DboNWB9ReCDjaZ/cNCcZnVAAueYEqEwHSnAI t6E9XS4MBFeVdnnkhj442Gm7znx6f/6oemBa7KkdRuzm0rpor4Wm63T9wiJpX9I+ F0Wo2P9Z/ln9IvaWkTf4+osnMI3Kr4ZhynW1i4e1AcvHi3d7qxvzA8K+8tgnmV1U sm4qDAa/6cfL1YIJ+9Ry9C9ZMmHwvjc= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:07 2025 by rpki-client