$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0280d272-3010-32e2-a9c6-9a6552888640.roa File: 0280d272-3010-32e2-a9c6-9a6552888640.roa (raw, json) Hash identifier: mdlGkCksGrDMYu7gd6wrhrYZ2Tpt5IlZT/bAO7/6y9I= Subject key identifier: 4D:5F:04:12:C5:30:C8:FA:25:1A:28:44:89:6C:0C:B4:00:FD:4E:4F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784D7FA42F7199BE3AACAC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0280d272-3010-32e2-a9c6-9a6552888640.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.239.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:d7:fa:42:f7:19:9b:e3:aa:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=1b4d7954-40bb-43b9-8122-302b5389ab25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:54:9f:8f:43:94:f9:54:aa:b4:87:1a:ae:6a: a2:26:f9:5a:30:71:47:61:50:ef:49:44:ae:49:f3: d9:1f:0d:96:07:fb:fc:24:03:52:3f:ad:0b:cb:9f: 3d:80:2a:66:5f:f4:ca:5a:70:0e:ec:66:69:44:eb: 98:61:ff:bb:1e:6f:b0:2f:9b:60:ff:3c:24:c5:07: 1d:f1:4e:0c:c3:9b:23:4b:0a:b9:a3:31:6f:77:de: 50:ee:ba:3f:9e:5d:4d:72:0d:19:f9:e2:f1:22:f3: f1:f5:54:dd:4d:2e:6a:40:17:62:d2:33:8c:75:a9: d1:f5:62:f1:c4:9e:47:fa:88:02:9a:6a:99:1d:55: 98:bf:1f:2f:c3:69:c9:20:83:e8:b4:cf:5b:94:8f: 3e:b7:13:0a:67:b8:4c:f6:60:9f:a2:69:74:60:33: d4:7b:36:46:79:db:5d:63:b4:aa:5d:b9:de:bd:7a: 97:14:d6:46:ea:11:b4:d7:86:9f:3a:d1:2c:b4:5c: 91:6d:a1:b1:de:20:8a:6b:07:cd:52:38:55:14:c1: 83:67:03:79:5f:41:a7:0a:25:3c:f7:b8:ce:92:7e: d5:1b:00:fe:b6:0d:ba:47:d4:f7:7d:f8:02:99:17: 1f:63:08:e4:76:c9:58:da:d7:7f:02:bd:8e:04:ac: e4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:5F:04:12:C5:30:C8:FA:25:1A:28:44:89:6C:0C:B4:00:FD:4E:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0280d272-3010-32e2-a9c6-9a6552888640.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.239.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:67:b2:b9:d0:6d:bb:8a:17:ab:63:7e:0f:8e:53:75:08:7b: 82:f8:5c:b4:e7:d6:83:66:75:49:31:c6:b5:e8:1e:a8:8b:fa: d9:6b:3a:67:71:31:93:6b:48:fe:44:30:35:b8:3d:27:a4:d4: 35:12:05:4c:6e:dc:2b:2a:c3:74:47:bb:8d:60:27:ee:17:ab: 85:46:ec:8c:72:e6:31:23:9c:66:ef:04:d1:96:80:f4:8d:74: 2f:4e:48:d8:36:a7:4f:33:fe:bc:be:5a:fe:2e:23:0d:43:11: bf:cd:eb:36:d0:a6:b2:1d:17:68:c3:a5:20:77:81:cd:1c:59: b6:c2:77:73:5d:40:fc:24:4d:35:8a:c1:47:22:84:29:cb:f4: c6:07:23:c2:3e:bc:27:94:7a:5a:90:f6:f6:c1:70:ce:ed:af: ad:9e:78:94:dc:2a:f0:31:22:36:32:b0:3a:43:00:ae:6f:df: ca:a2:13:a0:72:f1:81:f3:14:57:cf:e1:e3:59:b6:11:ea:66: ff:5a:1e:8b:62:05:ef:60:1c:57:5d:55:30:b7:4a:66:b3:c7: d1:ff:84:46:71:06:80:d4:f4:5d:81:f2:9e:d1:f6:ed:b1:99: 27:67:98:48:98:c7:3f:35:af:ba:f7:43:fd:db:f0:f3:e4:a6: 34:b3:1c:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNf6QvcZm+OqysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MWI0ZDc5NTQtNDBiYi00M2I5LTgxMjItMzAyYjUzODlhYjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1Sfj0OU+VSqtIcarmqiJvlaMHFHYVDvSUSu SfPZHw2WB/v8JANSP60Ly589gCpmX/TKWnAO7GZpROuYYf+7Hm+wL5tg/zwkxQcd 8U4Mw5sjSwq5ozFvd95Q7ro/nl1Ncg0Z+eLxIvPx9VTdTS5qQBdi0jOMdanR9WLx xJ5H+ogCmmqZHVWYvx8vw2nJIIPotM9blI8+txMKZ7hM9mCfoml0YDPUezZGedtd Y7SqXbnevXqXFNZG6hG014afOtEstFyRbaGx3iCKawfNUjhVFMGDZwN5X0GnCiU8 97jOkn7VGwD+tg26R9T3ffgCmRcfYwjkdslY2td/Ar2OBKzkLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1fBBLFMMj6JRooRIlsDLQA/U5PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDI4MGQyNzItMzAxMC0z MmUyLWE5YzYtOWE2NTUyODg4NjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+9wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRnsrnQbbuKF6tjfg+OU3UIe4L4XLTn1oNmdUkxxrXoHqiL+tlrOmdx MZNrSP5EMDW4PSek1DUSBUxu3Csqw3RHu41gJ+4Xq4VG7Ixy5jEjnGbvBNGWgPSN dC9OSNg2p08z/ry+Wv4uIw1DEb/N6zbQprIdF2jDpSB3gc0cWbbCd3NdQPwkTTWK wUcihCnL9MYHI8I+vCeUelqQ9vbBcM7tr62eeJTcKvAxIjYysDpDAK5v38qiE6By 8YHzFFfP4eNZthHqZv9aHotiBe9gHFddVTC3Smazx9H/hEZxBoDU9F2B8p7R9u2x mSdnmEiYxz81r7r3Q/3b8PPkpjSzHK0= -----END CERTIFICATE-----Generated at Sun May 4 19:45:50 2025 by rpki-client