$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/49f8cbcd-31ba-35f1-be9e-572aa2c7ad5e.roa File: 49f8cbcd-31ba-35f1-be9e-572aa2c7ad5e.roa (raw, json) Hash identifier: rP21ccYeCLtMEjFvmVbbMKd47CH6RjBSSAsU4i4E8NQ= Subject key identifier: 5B:1F:97:EE:C7:CE:13:99:A6:68:20:C9:2F:BC:1E:EA:5D:EC:80:93 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785197B118D977FAEEFB9A0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/49f8cbcd-31ba-35f1-be9e-572aa2c7ad5e.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.238.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:19:7b:11:8d:97:7f:ae:ef:b9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=3fb016f3-e6cf-43ba-b0cb-0b98ebcaa389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ce:b3:83:ba:34:a8:0e:94:f1:bb:39:79:59: eb:f9:9c:a0:b0:d3:ca:95:4e:59:2c:3f:57:be:cc: 6f:5b:51:b9:b1:76:70:70:27:e1:3a:e9:06:3f:7b: 0b:e3:e4:6e:35:78:95:21:37:80:f5:d7:e7:0c:d5: 0d:50:b8:3a:4d:c7:90:12:88:87:f0:01:c0:5d:d7: 6e:bb:c7:63:54:01:7b:ef:c8:64:27:2a:d0:30:25: 9c:4a:c0:c8:e9:89:13:10:61:59:fd:cd:78:09:0c: af:ec:2b:44:67:0e:f2:12:79:86:bb:04:c8:72:26: 59:c3:c5:05:a0:6b:cb:9e:57:08:82:01:d6:8b:b9: 7c:a8:a0:c4:a6:1d:c8:f5:bd:1a:aa:1d:d5:62:71: ed:48:1f:05:44:e2:12:7b:e5:65:2d:73:60:5e:9a: 9c:c5:06:10:e5:d3:4c:65:9c:1c:64:79:9f:51:32: ca:f5:22:36:9a:8f:b9:d0:41:1b:e9:7a:6b:37:17: 87:ee:ee:74:9c:6d:26:ed:ff:f8:a3:8b:ee:ed:f0: 62:84:c4:b5:2a:ad:8b:c4:f5:c1:bc:4e:d2:f1:cf: 97:b6:38:a2:44:07:c8:92:cb:da:d0:47:0e:e5:34: 37:ae:d2:df:c1:8f:94:15:a9:9e:1f:8d:4c:bc:12: a8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:1F:97:EE:C7:CE:13:99:A6:68:20:C9:2F:BC:1E:EA:5D:EC:80:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/49f8cbcd-31ba-35f1-be9e-572aa2c7ad5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:fc:1a:f2:47:63:fc:c9:be:cc:ec:b2:28:0c:91:b5:e2:0e: 70:b3:36:a5:b2:9f:57:7d:75:52:2b:eb:ab:44:76:33:1b:43: 9a:f5:23:b9:2f:cc:97:00:db:11:3f:92:2b:69:1c:48:a4:5e: 12:9d:d0:1b:e7:cb:28:93:7a:a8:4c:c9:7c:ae:30:1e:0d:0b: d5:88:36:e5:38:c7:a4:c1:50:5d:d2:0b:45:3f:7b:99:22:1f: 72:34:fa:9d:d5:55:e6:09:76:06:e0:c1:b3:f7:55:14:44:b8: c0:0c:58:90:f1:01:cc:44:9e:e3:b8:2d:cb:02:53:7c:7a:5a: ea:cf:97:f0:73:d1:19:32:5e:1d:5b:3c:d3:87:9e:cb:ac:14: 65:5c:a2:a4:84:f0:73:53:f9:e5:f2:73:45:33:56:96:06:09: 83:45:a6:7c:f9:6c:5c:70:48:59:44:a2:ec:9b:50:f5:5b:45: 2a:da:19:b1:31:72:d5:27:3a:41:90:1f:c5:04:9d:f0:a8:26: bf:83:a9:fe:1f:3f:0d:a0:78:de:7b:db:bb:8d:c8:1d:6d:47: 67:77:8f:cd:24:66:09:e4:db:72:d2:60:16:35:9f:8b:0e:d8: 38:29:66:5b:c5:a1:9a:91:c2:52:96:41:be:4d:68:0a:be:4d: 82:02:7a:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRl7EY2Xf67vuaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk M2ZiMDE2ZjMtZTZjZi00M2JhLWIwY2ItMGI5OGViY2FhMzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc6zg7o0qA6U8bs5eVnr+ZygsNPKlU5ZLD9X vsxvW1G5sXZwcCfhOukGP3sL4+RuNXiVITeA9dfnDNUNULg6TceQEoiH8AHAXddu u8djVAF778hkJyrQMCWcSsDI6YkTEGFZ/c14CQyv7CtEZw7yEnmGuwTIciZZw8UF oGvLnlcIggHWi7l8qKDEph3I9b0aqh3VYnHtSB8FROISe+VlLXNgXpqcxQYQ5dNM ZZwcZHmfUTLK9SI2mo+50EEb6XprNxeH7u50nG0m7f/4o4vu7fBihMS1Kq2LxPXB vE7S8c+XtjiiRAfIksva0EcO5TQ3rtLfwY+UFameH41MvBKojQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsfl+7HzhOZpmggyS+8Hupd7ICTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDlmOGNiY2QtMzFiYS0z NWYxLWJlOWUtNTcyYWEyYzdhZDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAED8GvJHY/zJvszssigMkbXiDnCzNqWyn1d9dVIr66tEdjMbQ5r1I7kv zJcA2xE/kitpHEikXhKd0BvnyyiTeqhMyXyuMB4NC9WINuU4x6TBUF3SC0U/e5ki H3I0+p3VVeYJdgbgwbP3VRREuMAMWJDxAcxEnuO4LcsCU3x6WurPl/Bz0RkyXh1b PNOHnsusFGVcoqSE8HNT+eXyc0UzVpYGCYNFpnz5bFxwSFlEouybUPVbRSraGbEx ctUnOkGQH8UEnfCoJr+Dqf4fPw2geN5727uNyB1tR2d3j80kZgnk23LSYBY1n4sO 2DgpZlvFoZqRwlKWQb5NaAq+TYICelU= -----END CERTIFICATE-----Generated at Sun May 4 19:08:08 2025 by rpki-client