$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/250e2cfd-c568-3ff9-9fa9-8e5ed02e4541.roa File: 250e2cfd-c568-3ff9-9fa9-8e5ed02e4541.roa (raw, json) Hash identifier: kEbt/itnE/zpMj+ayasWvSKJE2ssgmz7A1pwx+jrZyg= Subject key identifier: 80:13:B8:64:5D:E2:19:74:48:96:BC:F1:42:7D:0F:C9:65:08:54:47 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785383C05D511577AE2CF00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/250e2cfd-c568-3ff9-9fa9-8e5ed02e4541.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.205.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:38:3c:05:d5:11:57:7a:e2:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=4d007202-2181-4dd3-afbf-5b32992b6cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:be:53:dc:7c:98:a2:7a:35:55:eb:bd:3a:89: 77:11:ea:4f:9a:a4:47:3b:85:ac:9f:f1:57:2b:5c: d0:b2:61:aa:c9:92:8d:e1:60:8e:26:e2:14:8e:09: f6:0c:6e:9c:19:59:bd:3c:ea:e3:7b:c3:39:59:bf: 1e:8a:bd:4d:ab:3b:2a:34:13:70:0a:1e:bb:17:de: 98:69:be:57:21:65:56:7f:90:ca:5d:85:12:21:43: 69:d1:6a:46:b4:70:a0:d4:82:4a:ae:a2:fd:6f:fa: 0c:2b:d7:ac:fb:cd:51:0f:f0:0c:71:56:e3:85:aa: 78:f3:61:49:20:2d:b9:f0:47:63:2b:f9:44:32:61: c4:bd:da:19:e4:74:0a:8f:09:45:d2:75:6b:37:4b: 0a:3a:f4:1b:97:df:15:45:a0:0a:8e:a7:a5:e7:ee: ca:d4:43:1f:35:b5:33:90:60:a5:e2:0c:d4:63:ac: 76:3c:41:b0:de:d6:e2:61:61:eb:12:5f:5f:84:1f: 72:2d:92:51:08:3f:e6:ec:a8:fb:93:ee:84:de:b6: 16:93:bd:ef:97:4e:6d:30:76:f4:ab:72:36:89:70: 44:fa:33:6f:6c:11:16:07:1b:ab:4f:bb:a2:52:54: 8c:c9:34:9f:16:ac:b5:5d:b0:92:c6:a9:35:c1:18: c6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:13:B8:64:5D:E2:19:74:48:96:BC:F1:42:7D:0F:C9:65:08:54:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/250e2cfd-c568-3ff9-9fa9-8e5ed02e4541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.205.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:89:ed:de:88:cb:40:81:1d:c2:1a:92:7c:d3:20:93:d2:e7: 24:c4:65:a3:73:c0:22:27:08:1a:4b:4b:a0:65:8e:5e:b3:ad: 98:63:41:a1:50:3b:c6:f2:32:40:f8:f5:5e:be:3d:3b:b1:0b: e2:30:cb:3f:26:60:89:6d:37:d3:cf:61:14:10:42:f0:43:8a: 90:50:f5:30:ec:a8:7c:dd:45:4a:24:d0:2a:df:8f:1c:2b:87: fe:c4:54:aa:7e:c6:80:7a:68:3e:60:82:88:91:3b:92:58:40: 79:54:d6:35:c7:13:a9:20:20:b6:87:bd:1a:61:99:54:d9:45: 08:12:66:39:83:5c:ae:2a:7b:3e:58:1a:23:86:29:a5:e3:9b: 56:c1:76:1b:5a:53:25:cc:7e:11:c5:4b:12:c1:c9:9d:35:15: 10:93:8f:0f:04:c8:42:4e:40:73:d6:96:31:af:7e:43:bd:93: c7:43:08:ca:e1:83:58:53:11:56:30:db:85:fb:ca:dc:3a:c5: 44:f0:38:8c:30:24:4e:23:3e:d4:83:2d:fd:56:1b:75:bb:45: a1:a4:df:7f:8d:01:1a:54:d4:05:e0:37:4b:98:6c:ab:b6:86: a5:19:07:29:7c:fd:b7:6b:b4:67:7d:46:26:a5:e3:dd:af:1a: 13:17:52:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTg8BdURV3rizwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NGQwMDcyMDItMjE4MS00ZGQzLWFmYmYtNWIzMjk5MmI2Y2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz75T3HyYono1Veu9Ool3EepPmqRHO4Wsn/FX K1zQsmGqyZKN4WCOJuIUjgn2DG6cGVm9POrje8M5Wb8eir1NqzsqNBNwCh67F96Y ab5XIWVWf5DKXYUSIUNp0WpGtHCg1IJKrqL9b/oMK9es+81RD/AMcVbjhap482FJ IC258EdjK/lEMmHEvdoZ5HQKjwlF0nVrN0sKOvQbl98VRaAKjqel5+7K1EMfNbUz kGCl4gzUY6x2PEGw3tbiYWHrEl9fhB9yLZJRCD/m7Kj7k+6E3rYWk73vl05tMHb0 q3I2iXBE+jNvbBEWBxurT7uiUlSMyTSfFqy1XbCSxqk1wRjGFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIATuGRd4hl0SJa88UJ9D8llCFRHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjUwZTJjZmQtYzU2OC0z ZmY5LTlmYTktOGU1ZWQwMmU0NTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI83gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeJ7d6Iy0CBHcIaknzTIJPS5yTEZaNzwCInCBpLS6Bljl6zrZhjQaFQ O8byMkD49V6+PTuxC+Iwyz8mYIltN9PPYRQQQvBDipBQ9TDsqHzdRUok0Crfjxwr h/7EVKp+xoB6aD5ggoiRO5JYQHlU1jXHE6kgILaHvRphmVTZRQgSZjmDXK4qez5Y GiOGKaXjm1bBdhtaUyXMfhHFSxLByZ01FRCTjw8EyEJOQHPWljGvfkO9k8dDCMrh g1hTEVYw24X7ytw6xUTwOIwwJE4jPtSDLf1WG3W7RaGk33+NARpU1AXgN0uYbKu2 hqUZByl8/bdrtGd9Rial492vGhMXUhM= -----END CERTIFICATE-----Generated at Sun May 4 19:38:21 2025 by rpki-client