$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4014bde3-a8e8-373b-8393-2c3ff8cf4db9.roa File: 4014bde3-a8e8-373b-8393-2c3ff8cf4db9.roa (raw, json) Hash identifier: usWWAaYGfBBGOd5+wBz5OKb+ru/3saeCuwGTxcI/aHY= Subject key identifier: 36:61:E8:32:4E:AE:D6:F8:94:D9:DA:93:07:26:5D:61:A0:D7:16:BC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7852C1574B8FB21373F2F00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4014bde3-a8e8-373b-8393-2c3ff8cf4db9.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.243.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:2c:15:74:b8:fb:21:37:3f:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=7891e09f-427b-40ed-bc7e-3b877cd32dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e1:72:0a:bc:64:51:9d:bb:a1:57:3f:b7:ad: 8f:82:2c:fc:a4:9b:ba:76:12:85:e9:33:f5:20:ff: ed:c9:5c:87:12:0e:6b:b7:ad:b7:ec:66:a1:b9:37: eb:e5:80:35:00:1f:93:99:78:06:68:02:85:4e:1a: 5f:14:ee:10:90:56:e0:0b:2d:1a:bd:0e:67:be:95: e9:db:b7:57:18:b4:64:4d:07:bb:e1:72:25:9d:f9: f1:b0:5c:e4:26:26:a9:1f:ec:18:25:50:f4:45:31: d7:7c:d5:df:85:94:6e:75:ea:af:db:42:0b:da:98: 9b:d1:33:a7:ec:b8:eb:06:81:6b:bd:7a:70:e2:84: 1f:cb:43:30:9b:ff:0e:64:0a:d6:e6:2a:a8:85:c9: 35:60:f4:a4:aa:e0:5f:60:d9:75:3a:f7:10:45:46: 9d:5d:32:b0:0b:5d:89:fb:cf:84:cd:9b:43:40:ae: 95:b8:f8:02:51:98:bf:39:92:a4:87:30:d8:de:61: ef:70:cb:62:e1:83:a7:d4:44:3b:a8:db:7e:a7:ae: 1e:e7:66:2f:c5:2a:96:a2:55:62:07:a4:de:1f:e3: d9:3f:50:7d:1d:f0:a3:34:73:71:79:f1:ad:d9:58: c6:10:c6:cc:9f:ee:ca:dc:4f:5f:18:3c:b9:50:1c: e3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:61:E8:32:4E:AE:D6:F8:94:D9:DA:93:07:26:5D:61:A0:D7:16:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4014bde3-a8e8-373b-8393-2c3ff8cf4db9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.243.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:3f:ac:76:0a:88:e4:f9:de:83:ab:ad:02:c7:b6:dc:fb:86: 7b:e8:f9:8e:46:2b:d0:2e:79:c2:e2:73:27:7d:fd:98:45:a1: 70:fc:49:cd:92:09:7c:36:b4:43:79:40:97:0c:38:17:67:c5: d0:75:83:4d:41:8b:6a:54:4b:18:31:86:d3:d6:da:7f:00:5c: 29:42:1e:a7:ca:0c:53:24:fe:ac:9b:9e:7f:e5:ee:dc:38:ef: 04:23:e0:9e:0e:fe:92:8e:dc:a5:74:2e:a0:06:d7:a6:c5:ce: 1f:26:44:42:74:04:1a:1c:18:30:f7:d6:f2:bc:7f:59:fe:09: 1d:1b:c6:be:1d:8d:cd:50:05:92:19:c4:04:aa:bb:89:b7:86: 7d:40:0d:41:75:4a:be:ce:f7:98:8f:43:d1:de:8b:17:bb:28: d6:39:8a:63:26:b7:16:59:7e:12:ee:11:81:fa:4e:a5:83:04: 05:df:59:e2:e8:18:5f:9f:2c:8c:bf:e9:3b:2a:78:62:0b:07: 3f:3b:6e:a6:9e:e7:34:5e:17:89:34:d1:f9:b6:9a:fc:58:92: b2:76:4c:20:35:5d:c2:bb:95:7e:4c:ac:b9:26:f8:ee:9d:99: 72:8e:37:be:0e:2f:da:c6:5f:66:72:41:1f:6f:6c:00:2d:cb: 3f:21:a5:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhSwVdLj7ITc/LwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk Nzg5MWUwOWYtNDI3Yi00MGVkLWJjN2UtM2I4NzdjZDMyZGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uFyCrxkUZ27oVc/t62Pgiz8pJu6dhKF6TP1 IP/tyVyHEg5rt6237GahuTfr5YA1AB+TmXgGaAKFThpfFO4QkFbgCy0avQ5nvpXp 27dXGLRkTQe74XIlnfnxsFzkJiapH+wYJVD0RTHXfNXfhZRudeqv20IL2pib0TOn 7LjrBoFrvXpw4oQfy0Mwm/8OZArW5iqohck1YPSkquBfYNl1OvcQRUadXTKwC12J +8+EzZtDQK6VuPgCUZi/OZKkhzDY3mHvcMti4YOn1EQ7qNt+p64e52YvxSqWolVi B6TeH+PZP1B9HfCjNHNxefGt2VjGEMbMn+7K3E9fGDy5UBzjywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZh6DJOrtb4lNnakwcmXWGg1xa8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDAxNGJkZTMtYThlOC0z NzNiLTgzOTMtMmMzZmY4Y2Y0ZGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/NAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQ/rHYKiOT53oOrrQLHttz7hnvo+Y5GK9AuecLicyd9/ZhFoXD8Sc2S CXw2tEN5QJcMOBdnxdB1g01Bi2pUSxgxhtPW2n8AXClCHqfKDFMk/qybnn/l7tw4 7wQj4J4O/pKO3KV0LqAG16bFzh8mREJ0BBocGDD31vK8f1n+CR0bxr4djc1QBZIZ xASqu4m3hn1ADUF1Sr7O95iPQ9Heixe7KNY5imMmtxZZfhLuEYH6TqWDBAXfWeLo GF+fLIy/6TsqeGILBz87bqae5zReF4k00fm2mvxYkrJ2TCA1XcK7lX5MrLkm+O6d mXKON74OL9rGX2ZyQR9vbAAtyz8hpa0= -----END CERTIFICATE-----Generated at Sun May 4 19:19:17 2025 by rpki-client