$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5afa1ee4-4b8e-3e7d-ae84-5c31a2418089.roa File: 5afa1ee4-4b8e-3e7d-ae84-5c31a2418089.roa (raw, json) Hash identifier: 6rwRC+1nd21NDA8rN3/RRpjCvsM9Un/1s1cYC1QYr7M= Subject key identifier: 60:16:8A:EA:80:B4:76:5E:EE:BF:66:E3:8B:17:0E:EC:50:67:A3:60 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784FAA1C5852357B7A12600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5afa1ee4-4b8e-3e7d-ae84-5c31a2418089.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.202.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:fa:a1:c5:85:23:57:b7:a1:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=6f34ef59-c2f2-43ea-8f15-f39895099b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8d:b5:31:66:14:80:9a:18:3a:01:9b:7e:95: dc:36:04:d4:90:a1:bb:bb:70:6d:e1:07:15:43:02: c8:10:f0:67:b5:32:ef:04:d3:0f:f0:60:34:a5:4e: e6:69:f2:9a:08:31:8d:5d:0b:b2:9a:7f:47:f5:b1: f8:7d:c1:f0:ec:1b:02:78:ac:f1:f1:56:ba:4c:e1: e4:bd:a5:23:c2:14:90:ae:8e:68:55:75:02:05:51: 22:26:97:dd:37:f9:16:40:1c:12:e0:55:e4:d2:81: 5d:99:b7:3f:05:4b:97:0e:f6:2c:97:06:03:18:e2: 5c:5e:bf:11:64:f2:ff:48:74:49:e5:4a:0f:8a:28: 8c:e1:99:a6:85:4c:db:74:45:9e:fc:79:65:eb:6b: cd:36:85:95:68:41:be:18:bd:f5:1a:5c:e6:ac:b8: 45:73:40:14:bc:a6:6f:0f:f1:4e:ec:89:ff:42:7c: e6:ef:60:37:b0:62:12:1f:d3:35:ae:9f:ac:69:57: cb:1d:7a:53:cc:66:d1:16:c3:2d:3a:b2:9b:fb:48: ff:53:e2:55:97:1d:1c:f8:e7:d0:a6:ac:4d:42:f8: 15:b3:5f:5e:f2:8d:77:18:66:c4:64:50:bb:ca:43: 46:ec:50:8d:dd:9c:88:93:95:92:c5:91:02:28:b3: 4c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:16:8A:EA:80:B4:76:5E:EE:BF:66:E3:8B:17:0E:EC:50:67:A3:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5afa1ee4-4b8e-3e7d-ae84-5c31a2418089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.202.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:a6:c6:14:b9:cc:50:f1:be:36:5c:16:35:56:89:ab:06:85: a6:2e:84:e5:57:bb:14:6e:f5:98:d2:20:1d:91:f5:05:d2:33: cd:eb:bd:f1:4b:85:46:0c:73:1e:7e:cb:9d:ac:f4:74:6b:2e: 59:73:de:6f:55:e2:0c:a2:77:24:45:59:15:66:4d:bc:9e:87: 0f:c0:dc:ba:ac:02:32:97:2d:9a:94:58:2a:7c:b1:6f:13:24: fd:8c:34:68:0f:61:19:16:04:17:81:1c:3c:71:d5:23:32:37: 86:ff:0e:ae:06:ad:6c:26:bc:f2:27:7d:77:22:43:d5:77:bd: 3e:9d:73:cf:9f:94:e6:63:13:f3:0a:e3:8c:ee:32:6d:83:cc: 3f:ed:70:72:35:9a:1f:c0:8b:53:ac:0f:91:e7:ba:c7:2e:b8: 0a:0d:b2:d6:d7:df:c6:7a:73:f2:58:e9:e2:de:71:69:be:f7: 21:ba:4b:8e:8d:62:c6:59:79:e1:c2:1b:95:10:a7:1a:ea:26: 6a:18:fd:41:b0:54:95:5c:64:86:33:ae:ff:3f:bb:c1:05:91: 87:1e:6f:c5:97:7c:ba:15:71:75:f4:04:d1:8e:22:11:ee:7b: f4:15:f7:72:8b:da:5c:72:f5:23:06:b1:ef:e6:9b:02:18:fe: 9a:27:2e:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPqhxYUjV7ehJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NmYzNGVmNTktYzJmMi00M2VhLThmMTUtZjM5ODk1MDk5YjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg421MWYUgJoYOgGbfpXcNgTUkKG7u3Bt4QcV QwLIEPBntTLvBNMP8GA0pU7mafKaCDGNXQuymn9H9bH4fcHw7BsCeKzx8Va6TOHk vaUjwhSQro5oVXUCBVEiJpfdN/kWQBwS4FXk0oFdmbc/BUuXDvYslwYDGOJcXr8R ZPL/SHRJ5UoPiiiM4ZmmhUzbdEWe/Hll62vNNoWVaEG+GL31GlzmrLhFc0AUvKZv D/FO7In/Qnzm72A3sGISH9M1rp+saVfLHXpTzGbRFsMtOrKb+0j/U+JVlx0c+OfQ pqxNQvgVs19e8o13GGbEZFC7ykNG7FCN3ZyIk5WSxZECKLNMbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAWiuqAtHZe7r9m44sXDuxQZ6NgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWFmYTFlZTQtNGI4ZS0z ZTdkLWFlODQtNWMzMWEyNDE4MDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8oAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSmxhS5zFDxvjZcFjVWiasGhaYuhOVXuxRu9ZjSIB2R9QXSM83rvfFL hUYMcx5+y52s9HRrLllz3m9V4gyidyRFWRVmTbyehw/A3LqsAjKXLZqUWCp8sW8T JP2MNGgPYRkWBBeBHDxx1SMyN4b/Dq4GrWwmvPInfXciQ9V3vT6dc8+flOZjE/MK 44zuMm2DzD/tcHI1mh/Ai1OsD5HnuscuuAoNstbX38Z6c/JY6eLecWm+9yG6S46N YsZZeeHCG5UQpxrqJmoY/UGwVJVcZIYzrv8/u8EFkYceb8WXfLoVcXX0BNGOIhHu e/QV93KL2lxy9SMGse/mmwIY/ponLiE= -----END CERTIFICATE-----Generated at Sun May 4 19:16:29 2025 by rpki-client