$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/238329cc-9d7c-33bd-9ca1-6eeaa3939f31.roa File: 238329cc-9d7c-33bd-9ca1-6eeaa3939f31.roa (raw, json) Hash identifier: nSvSQkNKwNrZf6tlbwqWYY18Zcbh6KgyCs81m8vRyVQ= Subject key identifier: 1B:AF:15:73:5C:2C:30:BB:7E:01:BB:FE:39:02:C8:93:35:C0:49:93 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784CCC11FAB5BF893FDC8C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/238329cc-9d7c-33bd-9ca1-6eeaa3939f31.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.204.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:cc:c1:1f:ab:5b:f8:93:fd:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=19c4a00e-375c-4e1e-a03b-8ad788f56012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:24:9e:1e:72:fe:21:f3:9a:55:96:fe:27:b8: 45:d1:c9:67:80:fd:23:f9:3c:1d:a9:48:c7:65:04: fb:6b:21:31:20:4d:7c:aa:29:e7:b8:ee:4e:bd:11: e2:19:63:f6:6b:2c:f4:04:60:99:5e:dd:59:45:05: 14:01:7e:5f:3b:ef:1a:db:ab:c5:3c:e0:00:7b:4a: b7:ec:bd:a0:02:e8:22:c2:ef:02:d1:1e:89:b9:69: 6b:0a:c9:7f:2f:7b:84:1e:9a:1d:00:c3:d0:8e:24: 35:4d:7d:db:5a:8c:65:2b:7e:e7:bd:e4:99:b7:12: 5a:e6:b7:54:1d:fc:12:08:8c:4e:fc:07:2b:98:80: 59:e6:87:2f:2c:18:a5:71:17:bd:05:5c:0a:a7:04: b1:8f:55:1e:e4:e1:13:99:71:ba:44:26:d0:a8:59: 43:1f:2b:13:df:f0:5a:9c:d2:dd:85:36:44:93:0a: d3:55:87:87:4d:e1:d9:3d:a6:9c:e1:8a:79:76:f3: b0:9a:3b:d2:f0:82:36:2f:6c:3a:77:ab:63:e7:00: a5:98:c3:91:a4:32:13:5f:4e:18:ba:48:cd:81:c9: b5:29:ae:a6:e4:b9:3b:aa:12:49:53:d3:d4:c3:d0: 6f:90:03:7b:d4:8d:99:e8:ee:0d:46:12:61:96:8a: 2d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:AF:15:73:5C:2C:30:BB:7E:01:BB:FE:39:02:C8:93:35:C0:49:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/238329cc-9d7c-33bd-9ca1-6eeaa3939f31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.204.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:56:c8:eb:7a:23:a4:b4:50:cc:16:b2:59:b0:a9:f9:35:4a: 8a:6d:56:90:f8:84:46:06:67:d6:93:fc:77:9e:4f:8b:cf:e9: d8:ef:90:55:bc:30:97:a4:e4:be:15:98:a7:72:52:e2:a0:dd: f9:73:a5:ed:ed:67:5a:8c:ee:d9:7f:cf:35:79:d0:1a:97:1d: 8d:a6:66:39:87:d2:6f:a3:ba:35:2c:4f:56:91:47:32:67:0f: bc:eb:9b:55:ec:a8:45:04:95:c5:a8:18:c4:5f:04:aa:a8:4e: e1:f3:02:bd:cd:29:a0:2a:4c:fa:09:b6:10:df:12:f8:03:8f: ee:29:b7:c6:c4:e3:9d:21:35:e6:b3:20:f5:cd:c4:c1:20:24: 33:6f:96:81:cf:c1:9d:2f:95:5c:89:c3:e9:45:d6:a8:76:bb: 70:5c:04:1c:13:13:a5:d1:18:68:cb:e0:66:99:03:06:99:4f: ed:35:30:03:6d:9a:99:64:04:73:70:a1:1a:3a:76:74:0b:db: e8:cf:c4:e6:bc:cc:f3:75:a7:03:6d:99:98:ff:24:4a:49:fb: b0:31:3e:40:2c:db:77:3f:fc:b7:22:f4:1e:d3:86:fb:9f:69: 0b:90:df:98:c0:65:58:1c:df:6b:0d:4c:81:18:59:b4:3f:70: ea:ee:d7:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMzBH6tb+JP9yMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MTljNGEwMGUtMzc1Yy00ZTFlLWEwM2ItOGFkNzg4ZjU2MDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjySeHnL+IfOaVZb+J7hF0clngP0j+TwdqUjH ZQT7ayExIE18qinnuO5OvRHiGWP2ayz0BGCZXt1ZRQUUAX5fO+8a26vFPOAAe0q3 7L2gAugiwu8C0R6JuWlrCsl/L3uEHpodAMPQjiQ1TX3bWoxlK37nveSZtxJa5rdU HfwSCIxO/AcrmIBZ5ocvLBilcRe9BVwKpwSxj1Ue5OETmXG6RCbQqFlDHysT3/Ba nNLdhTZEkwrTVYeHTeHZPaac4Yp5dvOwmjvS8II2L2w6d6tj5wClmMORpDITX04Y ukjNgcm1Ka6m5Lk7qhJJU9PUw9BvkAN71I2Z6O4NRhJhloot6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuvFXNcLDC7fgG7/jkCyJM1wEmTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjM4MzI5Y2MtOWQ3Yy0z M2JkLTljYTEtNmVlYWEzOTM5ZjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8zgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBWyOt6I6S0UMwWslmwqfk1SoptVpD4hEYGZ9aT/HeeT4vP6djvkFW8 MJek5L4VmKdyUuKg3flzpe3tZ1qM7tl/zzV50BqXHY2mZjmH0m+jujUsT1aRRzJn D7zrm1XsqEUElcWoGMRfBKqoTuHzAr3NKaAqTPoJthDfEvgDj+4pt8bE450hNeaz IPXNxMEgJDNvloHPwZ0vlVyJw+lF1qh2u3BcBBwTE6XRGGjL4GaZAwaZT+01MANt mplkBHNwoRo6dnQL2+jPxOa8zPN1pwNtmZj/JEpJ+7AxPkAs23c//Lci9B7Thvuf aQuQ35jAZVgc32sNTIEYWbQ/cOru1zM= -----END CERTIFICATE-----Generated at Sat May 10 05:08:03 2025 by rpki-client