$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d2de0d1-3a28-38e7-8757-604e4013cfe4.roa File: 8d2de0d1-3a28-38e7-8757-604e4013cfe4.roa (raw, json) Hash identifier: 5boUxGDkARm1cMd40Se350YyFYSRM+h00LzVMpLq+Hk= Subject key identifier: AC:D4:A4:A3:AC:06:29:65:F4:E9:1F:A1:1A:B8:ED:36:2A:F6:78:F0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78520920ABD6BA6476CDB80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d2de0d1-3a28-38e7-8757-604e4013cfe4.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.200.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:20:92:0a:bd:6b:a6:47:6c:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=1a7b5d9a-d4ca-4930-aa25-bc66001bdc6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:99:a4:d2:58:42:9f:35:f7:4e:0a:74:ba:b0: 35:55:d1:e0:d3:8e:49:7a:6d:ef:7f:63:0e:8b:41: 66:3f:a1:39:48:45:50:36:1b:6a:e2:fe:f5:11:ac: 3f:c3:f9:79:91:c2:61:19:c5:56:73:3a:b1:8e:31: 6e:c4:b6:a6:35:38:67:32:ea:17:11:94:14:25:e0: 77:1f:f3:ac:92:a2:45:3a:78:0e:87:13:98:9b:41: 5e:f2:59:0c:c1:0d:f2:ac:f3:a5:cf:b2:93:6a:04: 2c:39:fd:6d:ff:40:b0:7b:77:d5:de:68:2c:2a:e4: 80:f9:55:31:98:8d:56:09:e0:3c:d7:b3:2e:37:18: 63:1d:7c:da:cc:b7:ec:fa:fb:1b:8c:6d:4d:79:bd: 8c:c3:f5:5f:f7:e7:50:36:bc:94:9e:25:f2:df:07: 4a:f2:b7:4a:ee:fe:af:36:08:fc:ae:cf:f4:34:97: 84:de:d1:b7:44:06:3c:20:64:af:7c:68:06:f9:7a: d0:f6:55:c1:ed:af:0b:24:fc:bb:50:41:6f:34:3b: be:2a:8c:6c:94:73:aa:f1:9a:31:c4:76:62:70:7b: 88:fc:76:24:f7:b1:05:db:ac:65:3e:8d:0b:77:8c: 87:76:2b:f2:d6:40:2d:b5:87:59:57:4f:97:60:c2: 54:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D4:A4:A3:AC:06:29:65:F4:E9:1F:A1:1A:B8:ED:36:2A:F6:78:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d2de0d1-3a28-38e7-8757-604e4013cfe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.200.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:ef:d5:80:80:c7:07:b8:02:f6:5a:5b:62:ec:0c:58:b5:01: f5:da:27:72:60:b8:66:11:73:da:8a:0c:66:39:6c:eb:8e:0d: a4:e6:68:f0:7b:19:77:f3:4e:30:6a:45:16:f4:8e:b4:e7:29: a4:c1:31:1b:18:80:93:56:5e:6e:a9:75:3a:5b:f2:74:e0:b6: f5:13:99:d9:f3:84:8e:21:36:c9:21:78:1f:40:41:54:0f:7e: 9b:70:ce:c0:92:a4:f9:d2:38:d3:4c:07:45:2d:44:0b:6f:2e: fa:ea:ff:4f:da:d1:6e:88:dc:a4:02:5f:54:1e:3a:2c:96:41: ea:f3:67:08:53:bc:96:9c:5a:72:99:6e:02:db:0e:be:9e:eb: 83:c2:2a:66:e5:5d:88:ff:1b:09:ff:1a:9e:65:79:f5:31:80: f5:38:18:ed:84:53:9b:6c:b0:65:1a:33:6a:19:fc:57:a6:ca: b0:4d:f0:11:1a:6c:31:3e:05:12:bf:51:68:61:16:dd:70:07: c6:9d:94:5f:ce:b0:1e:8c:ad:36:10:20:a5:d6:c3:05:18:1b: c0:ed:bc:98:48:49:0e:b2:e6:69:89:43:1a:02:2b:26:84:c0: ac:17:5d:ae:d3:0f:36:d3:c4:20:1b:bd:e2:7d:4a:15:7a:5d: 7c:8f:3a:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhSCSCr1rpkds24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MWE3YjVkOWEtZDRjYS00OTMwLWFhMjUtYmM2NjAwMWJkYzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZmk0lhCnzX3Tgp0urA1VdHg045Jem3vf2MO i0FmP6E5SEVQNhtq4v71Eaw/w/l5kcJhGcVWczqxjjFuxLamNThnMuoXEZQUJeB3 H/OskqJFOngOhxOYm0Fe8lkMwQ3yrPOlz7KTagQsOf1t/0Cwe3fV3mgsKuSA+VUx mI1WCeA817MuNxhjHXzazLfs+vsbjG1Neb2Mw/Vf9+dQNryUniXy3wdK8rdK7v6v Ngj8rs/0NJeE3tG3RAY8IGSvfGgG+XrQ9lXB7a8LJPy7UEFvNDu+KoxslHOq8Zox xHZicHuI/HYk97EF26xlPo0Ld4yHdivy1kAttYdZV0+XYMJUYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzUpKOsBill9OkfoRq47TYq9njwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGQyZGUwZDEtM2EyOC0z OGU3LTg3NTctNjA0ZTQwMTNjZmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8hAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXv1YCAxwe4AvZaW2LsDFi1AfXaJ3JguGYRc9qKDGY5bOuODaTmaPB7 GXfzTjBqRRb0jrTnKaTBMRsYgJNWXm6pdTpb8nTgtvUTmdnzhI4hNskheB9AQVQP fptwzsCSpPnSONNMB0UtRAtvLvrq/0/a0W6I3KQCX1QeOiyWQerzZwhTvJacWnKZ bgLbDr6e64PCKmblXYj/Gwn/Gp5lefUxgPU4GO2EU5tssGUaM2oZ/FemyrBN8BEa bDE+BRK/UWhhFt1wB8adlF/OsB6MrTYQIKXWwwUYG8DtvJhISQ6y5mmJQxoCKyaE wKwXXa7TDzbTxCAbveJ9ShV6XXyPOp0= -----END CERTIFICATE-----Generated at Sun May 4 19:33:44 2025 by rpki-client