$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f9367672-f988-306b-a750-cc43436dbe3a.roa File: f9367672-f988-306b-a750-cc43436dbe3a.roa (raw, json) Hash identifier: UfWgROiz0OJ2/e/qUZH6oety78sV5SsgyqqUEl7Kvfg= Subject key identifier: 02:A8:39:8D:6A:1F:6D:D4:DE:57:3F:D1:85:76:0C:D7:85:7D:29:88 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7852F40703C7860674D9A80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f9367672-f988-306b-a750-cc43436dbe3a.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.204.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:2f:40:70:3c:78:60:67:4d:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=b0181a68-4cc9-4596-8b32-b5c42083fa80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:15:b9:14:51:d0:df:09:d0:67:0a:57:4d:d4: e7:67:96:5f:d5:ab:4b:79:a7:07:fa:9c:56:ab:53: e6:11:45:9f:6a:66:3e:fb:fc:58:cf:b6:fa:34:da: 5c:e0:e0:c9:0d:09:85:51:b2:23:17:b3:51:dd:99: 14:3e:65:cf:4f:8e:6d:2c:2a:b7:e5:b1:8d:f0:e3: 0f:1f:55:58:95:79:78:b5:de:ee:a7:4a:f1:36:3c: 31:81:9a:c8:20:1b:31:c0:11:0a:95:6c:f7:85:18: 44:19:6c:8f:61:96:b2:d1:95:4b:9f:b7:34:72:41: 34:12:8b:ee:e9:18:2e:10:52:9c:57:56:6e:50:1c: a7:fb:b5:d1:9e:02:03:ae:2c:9b:b6:ee:69:b7:61: 3f:4a:20:c5:2b:80:87:8f:a0:32:bb:9c:7a:23:8c: 20:2d:3f:b4:bb:e6:78:98:ed:de:09:cc:82:24:d1: 5e:fe:4e:7e:81:98:27:53:30:0e:c1:06:d2:60:ff: cd:d7:ab:5c:46:47:b4:4c:b1:48:45:0f:ed:f7:2f: e1:6c:af:ed:bd:39:77:c0:5a:7a:6d:ed:c4:84:00: aa:86:7e:69:2b:af:a5:93:4a:92:ec:77:d9:0f:a1: f5:32:44:05:a4:06:de:89:bb:12:92:33:7b:e8:9f: 8e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A8:39:8D:6A:1F:6D:D4:DE:57:3F:D1:85:76:0C:D7:85:7D:29:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f9367672-f988-306b-a750-cc43436dbe3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.204.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:a6:7d:96:f4:0e:4e:95:c9:72:d7:da:c7:70:ce:2b:a2:74: 98:0a:0f:8b:35:66:03:53:be:5d:ce:f0:3b:7d:5d:39:3e:4f: e1:c8:b0:f8:9c:68:ae:7f:61:80:6d:e5:b0:f6:94:17:55:0d: 02:6b:48:ba:af:44:c6:24:29:bc:65:7f:bf:40:9f:f1:27:c7: 94:d5:55:69:28:e8:a2:59:a6:d2:25:77:f8:1e:b8:c6:17:36: 6e:01:93:b3:c9:a6:7e:c6:09:b2:a3:e6:df:bb:a2:ec:c2:51: 4d:b8:74:05:e8:db:aa:12:82:e2:e0:3a:9b:d3:7f:83:08:74: 89:28:76:da:50:89:a3:f2:67:36:9f:64:75:06:d3:8e:29:fe: e2:87:69:b5:37:36:f7:91:07:2d:d8:3c:02:42:1e:4a:f2:8b: 31:2a:77:8e:bb:05:61:a1:84:05:09:68:7d:eb:e4:9c:0f:6e: 2a:92:2d:37:b9:42:77:31:15:47:33:42:9b:a4:1c:a8:52:5b: 99:70:70:71:3b:e2:30:c3:25:30:ec:d2:64:32:51:ab:28:b8: 18:fc:ac:7c:b6:00:9d:13:76:42:83:8c:b3:e6:f9:23:44:34: a6:a8:b0:1e:41:bf:44:71:11:0b:56:44:51:a2:47:6a:40:6d: 91:a6:5e:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhS9AcDx4YGdNmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YjAxODFhNjgtNGNjOS00NTk2LThiMzItYjVjNDIwODNmYTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRW5FFHQ3wnQZwpXTdTnZ5Zf1atLeacH+pxW q1PmEUWfamY++/xYz7b6NNpc4ODJDQmFUbIjF7NR3ZkUPmXPT45tLCq35bGN8OMP H1VYlXl4td7up0rxNjwxgZrIIBsxwBEKlWz3hRhEGWyPYZay0ZVLn7c0ckE0Eovu 6RguEFKcV1ZuUByn+7XRngIDriybtu5pt2E/SiDFK4CHj6Ayu5x6I4wgLT+0u+Z4 mO3eCcyCJNFe/k5+gZgnUzAOwQbSYP/N16tcRke0TLFIRQ/t9y/hbK/tvTl3wFp6 be3EhACqhn5pK6+lk0qS7HfZD6H1MkQFpAbeibsSkjN76J+O/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKoOY1qH23U3lc/0YV2DNeFfSmIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjkzNjc2NzItZjk4OC0z MDZiLWE3NTAtY2M0MzQzNmRiZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8zwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSmfZb0Dk6VyXLX2sdwziuidJgKD4s1ZgNTvl3O8Dt9XTk+T+HIsPic aK5/YYBt5bD2lBdVDQJrSLqvRMYkKbxlf79An/Enx5TVVWko6KJZptIld/geuMYX Nm4Bk7PJpn7GCbKj5t+7ouzCUU24dAXo26oSguLgOpvTf4MIdIkodtpQiaPyZzaf ZHUG044p/uKHabU3NveRBy3YPAJCHkryizEqd467BWGhhAUJaH3r5JwPbiqSLTe5 QncxFUczQpukHKhSW5lwcHE74jDDJTDs0mQyUasouBj8rHy2AJ0TdkKDjLPm+SNE NKaosB5Bv0RxEQtWRFGiR2pAbZGmXoQ= -----END CERTIFICATE-----Generated at Sat Apr 26 16:40:28 2025 by rpki-client