$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/340545f5-23a5-3b5e-a0f1-9742a9f83c8a.roa File: 340545f5-23a5-3b5e-a0f1-9742a9f83c8a.roa (raw, json) Hash identifier: j6k0JQILiwVB+8d6pmyMnpsZ/0AERLss+aNJxes+jHY= Subject key identifier: 49:37:2E:64:B7:45:36:73:7C:07:F0:BE:FC:CD:8A:F9:5F:D9:2D:9A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78525FDD6B72E8CFB94CF80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/340545f5-23a5-3b5e-a0f1-9742a9f83c8a.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.198.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:25:fd:d6:b7:2e:8c:fb:94:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=2c984453-3e41-4ad2-bf01-6aae31fe0d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:81:2f:fb:31:91:d5:ac:8c:3a:d7:d8:9f:68: 7c:80:31:91:9e:fe:f8:32:0f:17:0d:fc:c1:92:e6: ca:d3:da:f2:e9:de:87:21:b0:a9:64:f2:18:1e:e0: 53:76:5b:bf:d6:0f:13:6a:e0:ed:0a:39:cb:f2:0a: 01:bc:0e:a9:03:3a:35:3e:86:f1:fa:95:24:8e:21: 11:65:06:ab:f2:b2:52:65:f3:7a:eb:4a:73:45:cd: ba:5a:44:e1:77:9b:59:c3:6d:b9:b5:f1:72:4b:3b: fc:c7:b0:90:1d:34:c1:54:c9:3c:4e:36:e4:14:79: f8:39:41:d6:29:83:06:a6:42:a3:87:ed:84:eb:46: 57:ed:ff:26:b3:ca:ac:27:ec:0c:78:22:2c:73:00: 6c:a6:f5:73:f9:16:52:3b:34:41:aa:55:ef:1d:fc: 66:04:ea:29:d1:14:20:8b:3b:5f:69:e2:0d:77:cd: df:e6:6d:64:63:cb:a2:61:0d:10:88:a7:4a:8a:e9: cb:5b:7e:42:53:2e:23:c1:e1:12:4b:02:da:b9:4d: 24:1b:27:3c:e0:e0:c6:14:40:81:f1:ab:cf:d6:05: 39:d7:a2:31:22:36:e8:3c:eb:56:c2:67:87:0b:40: bf:92:9d:00:77:30:61:bf:fd:5e:fe:b6:2f:a3:17: dc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:37:2E:64:B7:45:36:73:7C:07:F0:BE:FC:CD:8A:F9:5F:D9:2D:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/340545f5-23a5-3b5e-a0f1-9742a9f83c8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.198.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:af:2d:02:cf:b7:05:0e:96:ca:2a:8e:69:12:8d:84:76:f5: cd:55:38:8d:07:4a:fa:c6:cd:03:b0:f8:e2:53:8b:d3:50:fa: e9:50:96:14:0c:49:69:31:85:5b:e9:c4:ac:30:3b:db:76:cb: cf:ce:dd:d3:ae:15:c5:36:c0:e8:37:2a:1a:da:a7:b0:10:a3: 04:a1:0a:b8:ad:eb:d9:de:5a:a0:f3:23:46:4e:6a:c6:12:62: 5e:1e:3d:2a:0f:d7:4c:c9:ed:0f:c4:5d:23:99:f0:75:8f:31: 46:b4:5f:35:81:7f:70:df:ae:2d:f5:60:58:da:67:5b:66:43: d8:4b:fd:50:81:1a:e0:99:5d:d9:8d:eb:c5:16:65:3b:10:2e: 84:37:a5:c2:6c:c4:55:3a:7c:85:09:ea:c4:de:68:7d:7f:c2: 6a:32:84:f6:35:c4:06:55:a0:db:4b:b4:47:c2:c3:37:ee:ad: 8f:43:29:c1:89:de:98:b8:d2:9f:12:ee:fe:65:6a:79:e7:9b: d4:9a:ba:8a:d4:00:12:b2:68:44:e3:55:8d:3c:08:f7:cd:e4: 90:ac:5f:1b:4f:0b:9d:fc:51:d4:dc:3d:dc:05:03:61:8f:71: 91:55:23:8e:9e:a8:d6:ed:34:b7:b2:01:c1:d4:90:15:ca:82: b0:28:6b:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhSX91rcujPuUz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MmM5ODQ0NTMtM2U0MS00YWQyLWJmMDEtNmFhZTMxZmUwZDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4Ev+zGR1ayMOtfYn2h8gDGRnv74Mg8XDfzB kubK09ry6d6HIbCpZPIYHuBTdlu/1g8TauDtCjnL8goBvA6pAzo1Pobx+pUkjiER ZQar8rJSZfN660pzRc26WkThd5tZw225tfFySzv8x7CQHTTBVMk8TjbkFHn4OUHW KYMGpkKjh+2E60ZX7f8ms8qsJ+wMeCIscwBspvVz+RZSOzRBqlXvHfxmBOop0RQg iztfaeINd83f5m1kY8uiYQ0QiKdKiunLW35CUy4jweESSwLauU0kGyc84ODGFECB 8avP1gU516IxIjboPOtWwmeHC0C/kp0AdzBhv/1e/rYvoxfc3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEk3LmS3RTZzfAfwvvzNivlf2S2aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzQwNTQ1ZjUtMjNhNS0z YjVlLWEwZjEtOTc0MmE5ZjgzYzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8ZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6vLQLPtwUOlsoqjmkSjYR29c1VOI0HSvrGzQOw+OJTi9NQ+ulQlhQM SWkxhVvpxKwwO9t2y8/O3dOuFcU2wOg3Khrap7AQowShCrit69neWqDzI0ZOasYS Yl4ePSoP10zJ7Q/EXSOZ8HWPMUa0XzWBf3Dfri31YFjaZ1tmQ9hL/VCBGuCZXdmN 68UWZTsQLoQ3pcJsxFU6fIUJ6sTeaH1/wmoyhPY1xAZVoNtLtEfCwzfurY9DKcGJ 3pi40p8S7v5lannnm9SauorUABKyaETjVY08CPfN5JCsXxtPC538UdTcPdwFA2GP cZFVI46eqNbtNLeyAcHUkBXKgrAoa5Y= -----END CERTIFICATE-----Generated at Sun May 4 18:23:05 2025 by rpki-client