$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/09765b9f-4274-33a9-93b8-d13c20327288.roa File: 09765b9f-4274-33a9-93b8-d13c20327288.roa (raw, json) Hash identifier: bhXseSlwUOCVz8L2vfsMc0i3HjPCQMDE8Bl21xT4G2Q= Subject key identifier: 46:3F:DD:2C:09:57:0D:4D:FC:B0:54:85:83:C2:74:D0:F3:11:41:E8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784F28D123EC136590BE848 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/09765b9f-4274-33a9-93b8-d13c20327288.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.240.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:f2:8d:12:3e:c1:36:59:0b:e8:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=b88a21f9-3dd3-4b71-8254-8693db29d07e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0f:1a:06:8b:48:59:45:6b:ae:f1:66:3d:f1: bb:12:d5:f6:20:02:85:88:9e:cf:82:c3:a8:3d:00: 41:87:0b:f3:08:86:2b:20:3a:19:15:ac:2a:7b:ce: 7f:0a:dd:f5:fd:71:d4:b0:c9:9d:33:4c:61:02:64: d1:fa:32:5c:49:f0:c1:b5:ac:00:ad:f5:1e:ee:84: 20:29:b9:83:cc:a9:f3:de:71:da:82:d3:f9:98:d5: af:3d:23:6c:c7:59:c2:be:53:19:d4:79:56:45:16: 76:60:bf:8b:1a:01:43:2b:e2:8a:ac:03:38:fd:cb: c1:5d:6b:d8:57:43:06:8d:bd:19:c6:a9:47:f0:4f: 12:af:a7:7a:b9:38:60:4a:5f:50:4d:2f:24:55:d0: 13:39:37:18:6f:4d:ad:61:b9:24:a4:07:cd:ea:8e: 71:91:b0:1e:8a:eb:cc:fa:27:ff:ed:25:24:bc:37: cc:8d:b5:a5:db:84:6e:ba:99:22:8d:fb:9c:ff:8c: 0c:c0:63:cf:8f:fa:c3:aa:b6:8f:dc:52:52:ee:be: 13:1f:f0:68:0f:00:8d:2d:af:f2:99:63:54:3b:13: 8f:83:13:96:37:ee:10:ff:7d:0d:36:d8:23:44:6f: d6:eb:ba:55:c3:ce:3f:9c:fd:c4:3e:51:c6:25:6e: 88:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:3F:DD:2C:09:57:0D:4D:FC:B0:54:85:83:C2:74:D0:F3:11:41:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/09765b9f-4274-33a9-93b8-d13c20327288.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.240.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:1e:4e:cd:b9:47:65:25:6f:de:47:ce:64:99:32:5a:05:f7: ae:59:73:0d:cd:10:81:ee:1a:35:fc:20:76:b9:e6:ba:22:77: e4:da:1d:a9:3f:80:6e:6d:32:40:22:c2:1a:2a:32:65:fa:4a: 40:bd:bc:d3:0b:07:5f:fa:3b:df:02:d8:64:d3:34:aa:64:24: 1e:ef:63:ba:0b:af:a0:ab:86:9a:1d:5d:23:d8:f4:9a:c0:2a: eb:45:36:5e:23:9d:83:48:3d:a4:1b:73:eb:33:ec:45:e4:bd: 63:e1:a3:2d:6f:b9:9d:b4:5b:4f:d0:3b:0c:ab:fa:dd:06:7b: 38:87:c5:31:fe:7e:e1:c8:3c:e5:cc:49:45:65:54:91:98:0b: c0:52:ba:24:15:63:13:a5:b1:f5:dd:8b:b5:4c:fc:b6:89:d3: f3:47:c1:95:bb:02:0c:f0:80:8e:78:86:7b:8a:cc:c1:5c:27: fa:50:0e:ab:78:0f:b4:4e:fd:e5:b6:4e:9c:57:ed:5b:2c:75: 95:66:81:9d:1f:aa:cd:49:d0:1d:64:81:a2:4e:82:53:03:86: d6:0e:b5:71:66:13:f8:dd:c8:fc:76:bb:3e:e2:48:0b:0c:08: 5a:58:46:53:d9:cb:30:c6:a7:9d:a0:72:a0:86:d9:3e:90:2e: 8f:ca:64:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPKNEj7BNlkL6EgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk Yjg4YTIxZjktM2RkMy00YjcxLTgyNTQtODY5M2RiMjlkMDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w8aBotIWUVrrvFmPfG7EtX2IAKFiJ7PgsOo PQBBhwvzCIYrIDoZFawqe85/Ct31/XHUsMmdM0xhAmTR+jJcSfDBtawArfUe7oQg KbmDzKnz3nHagtP5mNWvPSNsx1nCvlMZ1HlWRRZ2YL+LGgFDK+KKrAM4/cvBXWvY V0MGjb0ZxqlH8E8Sr6d6uThgSl9QTS8kVdATOTcYb02tYbkkpAfN6o5xkbAeiuvM +if/7SUkvDfMjbWl24Ruupkijfuc/4wMwGPPj/rDqraP3FJS7r4TH/BoDwCNLa/y mWNUOxOPgxOWN+4Q/30NNtgjRG/W67pVw84/nP3EPlHGJW6IdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEY/3SwJVw1N/LBUhYPCdNDzEUHoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDk3NjViOWYtNDI3NC0z M2E5LTkzYjgtZDEzYzIwMzI3Mjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/CQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0eTs25R2Ulb95HzmSZMloF965Zcw3NEIHuGjX8IHa55roid+TaHak/ gG5tMkAiwhoqMmX6SkC9vNMLB1/6O98C2GTTNKpkJB7vY7oLr6CrhpodXSPY9JrA KutFNl4jnYNIPaQbc+sz7EXkvWPhoy1vuZ20W0/QOwyr+t0GeziHxTH+fuHIPOXM SUVlVJGYC8BSuiQVYxOlsfXdi7VM/LaJ0/NHwZW7AgzwgI54hnuKzMFcJ/pQDqt4 D7RO/eW2TpxX7VssdZVmgZ0fqs1J0B1kgaJOglMDhtYOtXFmE/jdyPx2uz7iSAsM CFpYRlPZyzDGp52gcqCG2T6QLo/KZIE= -----END CERTIFICATE-----Generated at Sun May 4 19:28:01 2025 by rpki-client