$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f72c679a-76d5-3fe3-8831-eaf3706daf50.roa File: f72c679a-76d5-3fe3-8831-eaf3706daf50.roa (raw, json) Hash identifier: 3uoxACLD44zueTPZsdoK1+zM2OSK2mFNGVnZ6fJ53PY= Subject key identifier: 58:24:F5:BF:52:99:16:1A:67:A3:17:9D:B0:16:2A:78:D5:82:96:69 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7852ADDB6558E0F48E40570 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f72c679a-76d5-3fe3-8831-eaf3706daf50.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.247.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:2a:dd:b6:55:8e:0f:48:e4:05:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=98e4a65b-7465-4506-941c-493b94249bf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e7:b8:cf:ef:43:ed:ed:df:39:59:d2:9a:e9: a0:9a:da:4a:d4:32:af:ba:60:9b:06:6b:34:4b:ee: cc:cf:07:68:a0:d8:b7:74:87:00:7d:e6:f1:27:23: 08:e9:00:e5:5c:ce:89:95:dc:4d:67:90:e7:65:fe: e0:8c:cd:f6:73:68:b1:79:59:36:d0:1c:c4:1e:ff: 91:8f:c3:1c:c8:ca:e5:cc:be:f7:27:b5:eb:1b:2d: 16:11:e3:d0:8a:1f:5e:ef:67:b7:1d:5f:69:19:8b: 78:55:50:8e:14:26:13:b1:ad:18:67:63:41:94:bd: f3:42:69:72:77:5d:6a:38:17:b4:89:58:a1:b1:fa: bc:c9:33:9b:dd:5f:e6:56:d8:99:d4:0f:18:50:e0: 30:bb:00:a8:eb:f6:cf:f5:09:89:6a:c5:7a:3e:be: 07:33:2b:73:73:78:f2:03:f1:05:3f:4b:a9:b1:41: f1:19:9f:1b:f9:ea:58:76:85:e8:34:d8:f8:ac:a8: bc:5e:3b:e5:96:1e:40:a9:f9:4d:20:91:7f:41:71: 4b:f9:67:03:94:6f:cc:d2:85:bd:ce:64:6a:df:79: 76:ba:96:d0:59:4c:9f:6e:87:d6:a3:49:45:cf:79: f6:d1:d2:ce:79:a1:f6:91:e7:5f:80:bb:97:9d:c4: 46:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:24:F5:BF:52:99:16:1A:67:A3:17:9D:B0:16:2A:78:D5:82:96:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f72c679a-76d5-3fe3-8831-eaf3706daf50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.247.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:97:47:07:42:cc:ad:9c:4b:cf:5a:8e:83:4e:e8:6a:f3:f1: 6f:ba:81:f0:04:27:8c:57:57:d6:2f:32:eb:ae:b5:73:8d:28: c8:15:1a:a9:1e:3f:57:cf:08:4a:f8:26:c1:c9:54:01:31:ba: 68:13:69:6e:a5:a4:ae:79:cf:81:e2:cf:3b:45:9e:57:22:fc: b8:64:71:21:f6:e9:ce:29:b0:34:8a:78:6c:3f:63:04:b8:30: 03:65:34:43:03:e4:47:e6:13:d9:18:ba:5c:b8:8c:8b:9c:5b: 3d:45:a4:88:97:44:57:90:9f:72:0f:3a:25:9d:b1:66:1c:81: db:b2:1d:15:e2:33:e1:e6:87:1e:78:80:f4:9c:e6:3a:1d:a5: 64:36:64:a0:70:78:0c:e6:44:c1:d9:14:3e:3b:ca:62:d0:a1: 1b:e1:22:fb:7d:8a:e4:fd:24:b4:e3:95:1d:9a:d5:f5:25:fe: 16:7a:f0:7b:d9:ed:f2:fa:54:ee:e9:32:56:14:97:71:c1:27: 07:65:5b:1a:53:61:cb:be:0f:24:7b:0e:0f:03:19:fa:72:21: 06:01:b2:b5:60:c3:58:97:a8:33:28:41:ed:52:aa:9f:02:1e: 7a:58:9a:e0:aa:4c:f4:75:e8:4d:59:0a:9b:0e:30:d9:af:0c: 4e:74:9f:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhSrdtlWOD0jkBXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OThlNGE2NWItNzQ2NS00NTA2LTk0MWMtNDkzYjk0MjQ5YmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+e4z+9D7e3fOVnSmumgmtpK1DKvumCbBms0 S+7MzwdooNi3dIcAfebxJyMI6QDlXM6JldxNZ5DnZf7gjM32c2ixeVk20BzEHv+R j8McyMrlzL73J7XrGy0WEePQih9e72e3HV9pGYt4VVCOFCYTsa0YZ2NBlL3zQmly d11qOBe0iVihsfq8yTOb3V/mVtiZ1A8YUOAwuwCo6/bP9QmJasV6Pr4HMytzc3jy A/EFP0upsUHxGZ8b+epYdoXoNNj4rKi8Xjvllh5AqflNIJF/QXFL+WcDlG/M0oW9 zmRq33l2upbQWUyfbofWo0lFz3n20dLOeaH2kedfgLuXncRGXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgk9b9SmRYaZ6MXnbAWKnjVgpZpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjcyYzY3OWEtNzZkNS0z ZmUzLTg4MzEtZWFmMzcwNmRhZjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/ewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2XRwdCzK2cS89ajoNO6Grz8W+6gfAEJ4xXV9YvMuuutXONKMgVGqke P1fPCEr4JsHJVAExumgTaW6lpK55z4HizztFnlci/LhkcSH26c4psDSKeGw/YwS4 MANlNEMD5EfmE9kYuly4jIucWz1FpIiXRFeQn3IPOiWdsWYcgduyHRXiM+Hmhx54 gPSc5jodpWQ2ZKBweAzmRMHZFD47ymLQoRvhIvt9iuT9JLTjlR2a1fUl/hZ68HvZ 7fL6VO7pMlYUl3HBJwdlWxpTYcu+DyR7Dg8DGfpyIQYBsrVgw1iXqDMoQe1Sqp8C HnpYmuCqTPR16E1ZCpsOMNmvDE50nwk= -----END CERTIFICATE-----Generated at Tue Apr 29 13:31:59 2025 by rpki-client