$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4c3dd650-6351-3caa-9d08-0da687654f78.roa File: 4c3dd650-6351-3caa-9d08-0da687654f78.roa (raw, json) Hash identifier: 8ndY20sdFt2yc6hfe7S+cV0VQhDGev2//4sY/XlNhNE= Subject key identifier: D9:07:55:40:F4:49:A8:AC:44:8C:8A:57:C3:07:AA:35:D5:55:F8:E7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78531D6535255884FD15D00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4c3dd650-6351-3caa-9d08-0da687654f78.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.201.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:31:d6:53:52:55:88:4f:d1:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=0bcff33d-e3b8-411e-b4ae-c3eb142ee64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:eb:c3:d7:34:cb:af:52:f0:21:51:3f:8f:e0: d6:91:6a:ff:74:c2:70:17:a2:39:c3:d7:33:af:05: 4e:95:78:a1:77:4b:b7:35:c8:90:9a:ef:10:be:aa: 30:af:de:46:db:f6:db:af:41:89:75:f8:99:8b:38: c5:a8:5c:e1:e7:40:a9:2e:a5:6b:fd:9e:48:da:dd: e0:1a:1f:6b:e3:b0:a3:c7:a1:54:16:b6:d3:b0:4d: 82:ad:56:d3:71:48:17:e3:12:77:ea:60:ca:8b:d5: 60:f6:83:a2:e1:ed:23:39:4f:2b:a5:b0:e7:90:8d: c3:a7:78:bc:2a:be:d2:f3:7b:e2:6d:21:19:63:2b: 22:32:45:2a:0c:f2:51:14:43:8b:cf:83:cf:08:7f: 28:4f:99:76:5f:d2:38:12:05:1c:3f:b6:f1:5f:0d: 7a:53:d5:14:61:2a:c5:b0:74:4a:04:0d:61:3d:b7: e3:ff:1d:4f:11:ae:12:08:17:13:47:7b:1f:54:9f: 47:2e:10:e4:98:48:c2:ed:c1:4f:76:b4:ec:ac:cc: 6b:36:8f:37:aa:92:43:3f:32:c0:a1:29:09:2b:25: e0:16:f1:c9:0b:46:3e:fc:7b:0b:76:04:bd:10:bf: 59:93:43:0a:13:23:c6:86:8e:ad:46:e9:a9:0e:97: 27:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:07:55:40:F4:49:A8:AC:44:8C:8A:57:C3:07:AA:35:D5:55:F8:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4c3dd650-6351-3caa-9d08-0da687654f78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.201.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:44:75:b5:ce:53:15:c2:1d:1b:77:29:ef:ed:d6:c5:86:7c: 64:b0:23:1d:f7:15:91:b1:31:32:de:d9:97:88:f2:a4:67:17: d1:14:ef:88:1b:d2:e2:11:b0:c0:ad:41:14:2d:23:99:da:a8: 9c:e7:9f:df:82:de:d7:68:2d:ff:e0:c6:0e:c8:86:b6:1d:de: 6b:5c:dc:ae:39:82:c9:5c:10:e7:37:bc:97:d0:b6:d9:82:5e: 13:a1:62:9b:f6:06:9e:f7:c4:cd:16:15:f1:08:64:0e:79:d6: e6:d6:70:51:28:b8:5f:09:db:3e:8d:8e:5f:a7:7c:ba:10:f2: 07:48:a0:21:c2:f2:0e:8b:30:69:89:05:a8:47:20:33:ef:63: 15:88:f3:51:f8:9e:94:14:d4:56:27:bd:73:fd:66:a8:a6:ab: 04:f6:f3:da:63:7a:8e:20:14:91:4b:4d:8b:da:76:0f:6a:30: 90:4d:9c:d4:44:c3:72:24:16:d1:89:ce:ca:a2:28:d0:2d:93: e5:c5:b4:dd:26:b7:ce:8e:44:58:96:91:a0:85:e0:cf:26:ec: 61:c3:31:0a:92:02:de:af:b3:64:06:32:c7:34:7b:05:ea:8c: 4e:30:de:37:81:87:9e:24:7c:77:3e:df:37:70:4c:a7:5f:84: 39:2a:00:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTHWU1JViE/RXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MGJjZmYzM2QtZTNiOC00MTFlLWI0YWUtYzNlYjE0MmVlNjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+vD1zTLr1LwIVE/j+DWkWr/dMJwF6I5w9cz rwVOlXihd0u3NciQmu8Qvqowr95G2/bbr0GJdfiZizjFqFzh50CpLqVr/Z5I2t3g Gh9r47Cjx6FUFrbTsE2CrVbTcUgX4xJ36mDKi9Vg9oOi4e0jOU8rpbDnkI3Dp3i8 Kr7S83vibSEZYysiMkUqDPJRFEOLz4PPCH8oT5l2X9I4EgUcP7bxXw16U9UUYSrF sHRKBA1hPbfj/x1PEa4SCBcTR3sfVJ9HLhDkmEjC7cFPdrTsrMxrNo83qpJDPzLA oSkJKyXgFvHJC0Y+/HsLdgS9EL9Zk0MKEyPGho6tRumpDpcnzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkHVUD0SaisRIyKV8MHqjXVVfjnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGMzZGQ2NTAtNjM1MS0z Y2FhLTlkMDgtMGRhNjg3NjU0Zjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8mwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJEdbXOUxXCHRt3Ke/t1sWGfGSwIx33FZGxMTLe2ZeI8qRnF9EU74gb 0uIRsMCtQRQtI5naqJznn9+C3tdoLf/gxg7IhrYd3mtc3K45gslcEOc3vJfQttmC XhOhYpv2Bp73xM0WFfEIZA551ubWcFEouF8J2z6Njl+nfLoQ8gdIoCHC8g6LMGmJ BahHIDPvYxWI81H4npQU1FYnvXP9ZqimqwT289pjeo4gFJFLTYvadg9qMJBNnNRE w3IkFtGJzsqiKNAtk+XFtN0mt86ORFiWkaCF4M8m7GHDMQqSAt6vs2QGMsc0ewXq jE4w3jeBh54kfHc+3zdwTKdfhDkqAKE= -----END CERTIFICATE-----Generated at Mon May 5 00:16:53 2025 by rpki-client