$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0dad5b8e-2b6b-31fb-8d81-62875ac5a953.roa File: 0dad5b8e-2b6b-31fb-8d81-62875ac5a953.roa (raw, json) Hash identifier: 2o/qOlpOZW7ofp2ZqEqTqOftSTbCh1DpZOxNxEqSYhM= Subject key identifier: 4A:51:D1:DB:28:72:31:FD:BF:21:99:7E:D0:6E:50:A3:1C:91:71:1A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7852F5CA3415C33468B7F80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0dad5b8e-2b6b-31fb-8d81-62875ac5a953.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.228.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:2f:5c:a3:41:5c:33:46:8b:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=e570a82d-311d-4ba8-aea0-c890eed107d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:13:82:74:05:e3:53:ec:b1:89:a7:28:4c:02: b9:04:b9:11:46:54:fe:22:69:87:ba:bb:6d:69:c3: 37:a1:59:f7:c2:db:81:8d:9c:2a:bd:4a:1a:06:24: c2:43:1b:c8:8b:2d:ef:67:71:ef:f0:51:ef:b7:81: e4:c4:0b:91:ba:46:24:e5:a2:70:17:88:97:a2:bb: 07:ef:39:bf:c8:e2:8b:0c:54:b6:38:56:e7:c7:03: 12:5f:1b:6e:0a:c1:ed:49:25:c2:f1:42:fc:8d:21: 44:dc:95:a8:b2:88:b2:ee:18:bf:e0:2e:eb:4f:90: dd:8c:c6:b8:87:db:d3:38:82:8f:94:3d:be:6f:0e: 94:28:bf:de:c9:6b:1f:13:82:e0:3b:55:1f:45:03: cb:45:30:45:3f:cc:44:c4:8b:a8:e7:fd:17:70:ed: c7:98:0b:08:12:0d:ca:b3:e9:d1:b1:0e:05:23:4c: c0:17:09:9a:66:f3:6b:14:93:f1:f0:d7:ad:73:1c: e5:4c:ef:5b:c1:eb:9f:c5:14:37:12:3c:16:5b:aa: 9e:76:81:c1:11:3f:9c:e6:4e:b6:33:d1:cf:50:69: 45:28:eb:2e:48:68:f1:da:eb:db:ba:50:b3:bf:e2: 2b:1e:e6:01:fa:99:a7:92:92:8d:c1:16:3e:b7:39: 33:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:51:D1:DB:28:72:31:FD:BF:21:99:7E:D0:6E:50:A3:1C:91:71:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0dad5b8e-2b6b-31fb-8d81-62875ac5a953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.228.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:4e:2f:c5:6e:c4:30:9f:a8:d1:87:24:6f:f8:55:a9:21:90: 6c:34:a8:5b:40:3f:14:15:58:3e:68:67:85:f7:4c:47:b1:c8: 8b:4a:2a:d2:81:e4:51:e1:83:ee:cf:43:4c:c0:38:99:dd:04: a8:97:42:35:93:7c:06:2c:8a:c8:78:b9:05:be:58:2b:74:f3: ba:8b:74:21:f5:e5:0b:d5:fc:6f:2d:75:8f:c8:b0:4f:07:14: d7:40:a0:ce:1c:ac:0f:af:90:05:49:b4:cc:e6:21:55:09:14: be:0c:88:95:92:c1:3b:c1:ad:1f:ae:b5:14:b0:3a:3f:ec:2d: ab:f2:9f:71:f8:db:52:16:15:bf:a9:1e:8b:31:fe:a7:82:a5: 52:f7:6d:50:e5:da:16:af:4b:8a:36:61:17:6d:11:c8:b8:0f: d5:85:02:2d:4b:b9:f6:c2:e0:24:78:01:f0:70:f1:5d:6d:da: eb:86:13:aa:79:10:41:e2:6a:d6:ab:2a:25:0f:f3:3e:2d:1f: 4b:20:e9:36:8e:17:38:08:e8:62:8c:71:8a:8a:fe:1e:ea:71: b6:da:7a:1d:c7:6b:6e:a8:36:b0:b0:41:49:2c:05:a4:e2:81: fc:2b:40:8c:a1:51:f9:20:d5:33:66:7b:81:59:20:7e:f8:0e: cd:e2:0b:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhS9co0FcM0aLf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZTU3MGE4MmQtMzExZC00YmE4LWFlYTAtYzg5MGVlZDEwN2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtROCdAXjU+yxiacoTAK5BLkRRlT+ImmHurtt acM3oVn3wtuBjZwqvUoaBiTCQxvIiy3vZ3Hv8FHvt4HkxAuRukYk5aJwF4iXorsH 7zm/yOKLDFS2OFbnxwMSXxtuCsHtSSXC8UL8jSFE3JWosoiy7hi/4C7rT5DdjMa4 h9vTOIKPlD2+bw6UKL/eyWsfE4LgO1UfRQPLRTBFP8xExIuo5/0XcO3HmAsIEg3K s+nRsQ4FI0zAFwmaZvNrFJPx8NetcxzlTO9bweufxRQ3EjwWW6qedoHBET+c5k62 M9HPUGlFKOsuSGjx2uvbulCzv+IrHuYB+pmnkpKNwRY+tzkzswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpR0dsocjH9vyGZftBuUKMckXEaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGRhZDViOGUtMmI2Yi0z MWZiLThkODEtNjI4NzVhYzVhOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+RgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdOL8VuxDCfqNGHJG/4VakhkGw0qFtAPxQVWD5oZ4X3TEexyItKKtKB 5FHhg+7PQ0zAOJndBKiXQjWTfAYsish4uQW+WCt087qLdCH15QvV/G8tdY/IsE8H FNdAoM4crA+vkAVJtMzmIVUJFL4MiJWSwTvBrR+utRSwOj/sLavyn3H421IWFb+p Hosx/qeCpVL3bVDl2havS4o2YRdtEci4D9WFAi1LufbC4CR4AfBw8V1t2uuGE6p5 EEHiatarKiUP8z4tH0sg6TaOFzgI6GKMcYqK/h7qcbbaeh3Ha26oNrCwQUksBaTi gfwrQIyhUfkg1TNme4FZIH74Ds3iC6g= -----END CERTIFICATE-----Generated at Sun May 4 19:33:29 2025 by rpki-client