$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fc43d608-467b-38f4-9011-5f72b099f833.roa File: fc43d608-467b-38f4-9011-5f72b099f833.roa (raw, json) Hash identifier: y/YGoFCC0XsHlZO4oWvQpayiDt0H0OzR0/hxo9NAjhY= Subject key identifier: 09:A3:AB:C3:D6:DB:7D:1F:66:E7:B2:CD:D3:90:E4:EA:FE:4E:6C:9C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784F60D348DB08D252ED380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fc43d608-467b-38f4-9011-5f72b099f833.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.246.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:f6:0d:34:8d:b0:8d:25:2e:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=c55523c8-6e40-4b7c-b4e7-e6142d98e47b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e6:d8:f8:98:1d:d5:67:7e:9f:b0:8d:d8:e7: d5:ba:62:35:27:6c:11:ab:53:e4:16:6e:5b:70:3c: 48:a7:57:33:67:74:5d:6d:b4:b2:db:78:ca:63:22: 39:74:60:a7:8a:47:fa:0b:1a:b5:c7:d1:ba:3e:98: eb:25:c8:a3:3a:a2:87:7e:c2:cf:89:d3:8a:7c:0d: e9:84:45:a7:f2:6c:87:0e:42:a9:81:ed:f9:b8:05: e1:e3:7c:e5:b1:a2:e4:7f:ae:ae:23:68:99:89:54: 46:ad:a0:56:b2:09:ef:37:a3:4e:ac:27:bf:a7:41: d0:e6:b7:d4:db:f2:c8:50:86:29:4c:3f:1e:39:b8: 52:a6:d9:89:cd:fa:61:6b:c2:59:2b:63:09:49:01: e7:97:cd:ca:fe:33:f7:3a:0e:e6:27:0d:ef:e4:4b: 22:96:6f:6b:6a:70:2e:bd:7c:66:c2:2d:88:10:77: 9a:39:85:e8:52:b4:3b:7d:fc:3a:fa:3c:fd:ef:ba: 42:3f:27:fe:a9:25:1b:a6:86:0f:9b:87:36:bc:7c: 74:ec:5c:52:78:c8:6a:24:af:72:7e:65:3c:d3:ca: a2:2a:70:e9:5f:4d:85:96:8e:4f:0a:41:50:e1:7f: 52:80:71:d2:93:47:19:e9:b6:04:cc:58:42:d5:2f: be:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A3:AB:C3:D6:DB:7D:1F:66:E7:B2:CD:D3:90:E4:EA:FE:4E:6C:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fc43d608-467b-38f4-9011-5f72b099f833.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.246.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:82:4a:98:15:79:ba:7a:0c:5f:70:67:e2:63:79:9f:db:0b: bc:60:70:d6:35:5d:03:c0:fe:af:19:43:dd:48:5f:42:14:8f: 6c:58:85:0a:80:d0:1c:5c:d1:a8:a0:34:bf:50:5c:88:a7:ce: 1f:4c:8c:7e:93:ed:e1:25:d0:7a:29:62:55:d3:06:a1:1e:60: 2e:99:2a:b3:66:66:1a:2f:f0:83:1c:be:3c:9a:86:a9:20:fc: 0b:60:01:d0:8e:df:cd:2d:17:55:a2:e4:f7:cb:80:4c:c0:7d: 35:ae:d5:1c:88:7a:02:23:33:17:01:8c:e6:97:25:26:08:e0: a3:b8:06:0b:b1:88:14:e9:94:35:81:93:51:01:b2:56:48:9d: 28:0b:e0:54:a1:d5:08:31:40:dc:44:c2:96:63:0f:09:3d:66: c9:99:93:21:21:ff:a5:7a:8a:b7:b8:d2:2e:6b:6c:8c:05:cc: 29:6a:53:f2:06:25:92:82:36:59:1b:18:68:f5:15:2c:1b:67: 29:20:48:30:eb:c3:fb:25:00:7b:f4:22:eb:a5:64:51:5d:71: 21:e6:6b:a3:b3:23:89:2a:23:b2:71:f4:bb:7d:e4:2a:e8:9c: 7d:3b:59:fb:d7:fd:cb:00:54:ed:88:a5:76:33:d4:79:7c:06: 5b:76:e9:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPYNNI2wjSUu04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YzU1NTIzYzgtNmU0MC00YjdjLWI0ZTctZTYxNDJkOThlNDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtebY+Jgd1Wd+n7CN2OfVumI1J2wRq1PkFm5b cDxIp1czZ3RdbbSy23jKYyI5dGCnikf6Cxq1x9G6PpjrJcijOqKHfsLPidOKfA3p hEWn8myHDkKpge35uAXh43zlsaLkf66uI2iZiVRGraBWsgnvN6NOrCe/p0HQ5rfU 2/LIUIYpTD8eObhSptmJzfpha8JZK2MJSQHnl83K/jP3Og7mJw3v5Esilm9ranAu vXxmwi2IEHeaOYXoUrQ7ffw6+jz977pCPyf+qSUbpoYPm4c2vHx07FxSeMhqJK9y fmU808qiKnDpX02Flo5PCkFQ4X9SgHHSk0cZ6bYEzFhC1S++1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmjq8PW230fZueyzdOQ5Or+TmycMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmM0M2Q2MDgtNDY3Yi0z OGY0LTkwMTEtNWY3MmIwOTlmODMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/bAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGCSpgVebp6DF9wZ+JjeZ/bC7xgcNY1XQPA/q8ZQ91IX0IUj2xYhQqA 0Bxc0aigNL9QXIinzh9MjH6T7eEl0HopYlXTBqEeYC6ZKrNmZhov8IMcvjyahqkg /AtgAdCO380tF1Wi5PfLgEzAfTWu1RyIegIjMxcBjOaXJSYI4KO4BguxiBTplDWB k1EBslZInSgL4FSh1QgxQNxEwpZjDwk9ZsmZkyEh/6V6ire40i5rbIwFzClqU/IG JZKCNlkbGGj1FSwbZykgSDDrw/slAHv0IuulZFFdcSHma6OzI4kqI7Jx9Lt95Cro nH07WfvX/csAVO2IpXYz1Hl8Blt26WE= -----END CERTIFICATE-----Generated at Sat Apr 26 14:59:38 2025 by rpki-client