$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d58deba-f83d-3ef3-a26b-54605727f7f9.roa File: 8d58deba-f83d-3ef3-a26b-54605727f7f9.roa (raw, json) Hash identifier: /9auwYl03HhJqKTERQCz0C9L81INudDc88gibHZgGgw= Subject key identifier: 15:F0:5E:0A:3D:E2:B5:4C:1C:11:73:D0:83:61:B9:21:FA:D2:80:95 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785069447392718A7F53A80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d58deba-f83d-3ef3-a26b-54605727f7f9.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.197.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:06:94:47:39:27:18:a7:f5:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=b1275f67-2c83-4983-be04-d5f3c7a5ae78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f6:c3:e2:65:3a:18:66:be:fa:01:f6:9b:0f: f4:6b:26:79:ee:99:2c:ce:71:dd:0d:39:5b:05:f4: 11:d3:f7:01:55:e8:8d:8a:2d:bb:b8:18:54:ea:4e: 8c:e1:34:28:1e:54:5e:c3:46:77:4c:fe:7e:fb:15: 25:49:f7:76:37:ea:37:fe:33:bc:d1:b7:c1:e4:8b: 3e:e6:ca:44:9e:f5:49:19:82:2a:c7:24:39:91:64: 18:53:e7:d2:ca:4e:a2:f6:a1:66:00:44:ef:97:bc: 1e:4e:8d:68:21:5a:23:62:a6:7c:92:7f:66:f2:1d: fc:65:20:c3:97:66:e5:61:cd:fe:50:55:59:96:77: 09:13:d2:b0:c7:66:3b:1e:68:f2:d8:42:fe:6e:49: 52:89:81:17:e4:01:98:e6:13:96:95:5f:e6:68:95: 67:10:bb:0f:6f:eb:b2:7e:91:7b:8b:16:47:76:56: c2:9a:75:3b:66:e1:1f:e9:c4:a7:aa:99:78:b4:df: 2f:34:ea:75:39:69:96:a6:42:ca:3b:0e:7a:6b:90: 62:d7:c3:93:51:11:e2:24:1d:0c:b0:39:91:41:70: 21:af:13:3e:8d:0c:d2:41:5f:96:8c:f5:39:e2:f4: 9d:bd:db:2f:28:7f:f4:80:63:ef:97:6c:7b:ee:6d: 68:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F0:5E:0A:3D:E2:B5:4C:1C:11:73:D0:83:61:B9:21:FA:D2:80:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d58deba-f83d-3ef3-a26b-54605727f7f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.197.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:4d:7a:f1:a0:ca:ed:1b:57:27:33:4c:2d:e1:b2:f1:af:91: 53:e1:54:5a:10:90:d3:a3:e0:e1:02:03:3b:bc:91:e8:8c:50: 83:20:42:1b:a1:82:12:68:4d:66:4e:df:18:ea:c6:d2:c7:d9: 48:d6:09:62:4e:40:4b:65:3c:81:f6:95:19:53:48:30:1d:61: d3:fe:2f:3a:a1:69:68:4c:8b:5a:fc:df:44:f8:c4:05:b0:97: 21:af:05:37:42:be:d6:10:3c:df:63:ba:4a:1c:3c:d9:7d:30: cf:d2:62:ed:65:5e:08:50:9f:c0:c0:2f:81:eb:6a:73:f8:61: 79:6f:c2:3c:d2:7f:27:16:63:fc:45:c5:16:ad:57:e7:95:bd: 74:b4:24:f7:c5:a3:6f:b4:55:bd:64:d5:d8:f8:da:00:d9:13: 09:82:c3:8b:c5:8f:98:90:39:5a:b3:4d:51:15:e3:19:43:09: b9:61:55:8f:a8:f3:b7:68:be:54:bd:37:71:65:0c:37:39:01: cc:4f:fc:0c:56:5a:3d:fd:a7:8b:34:1f:33:ac:05:ea:6b:db: d7:6e:18:96:b0:54:23:20:7c:4c:d0:30:9d:e2:9b:a2:1a:12: 93:f1:d8:e3:95:5f:c7:1f:d6:27:8c:17:23:63:fb:47:ad:09: f2:de:f4:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQaURzknGKf1OoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YjEyNzVmNjctMmM4My00OTgzLWJlMDQtZDVmM2M3YTVhZTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/bD4mU6GGa++gH2mw/0ayZ57pksznHdDTlb BfQR0/cBVeiNii27uBhU6k6M4TQoHlRew0Z3TP5++xUlSfd2N+o3/jO80bfB5Is+ 5spEnvVJGYIqxyQ5kWQYU+fSyk6i9qFmAETvl7weTo1oIVojYqZ8kn9m8h38ZSDD l2blYc3+UFVZlncJE9Kwx2Y7Hmjy2EL+bklSiYEX5AGY5hOWlV/maJVnELsPb+uy fpF7ixZHdlbCmnU7ZuEf6cSnqpl4tN8vNOp1OWmWpkLKOw56a5Bi18OTURHiJB0M sDmRQXAhrxM+jQzSQV+WjPU54vSdvdsvKH/0gGPvl2x77m1orwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXwXgo94rVMHBFz0INhuSH60oCVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGQ1OGRlYmEtZjgzZC0z ZWYzLWEyNmItNTQ2MDU3MjdmN2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8VwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNNevGgyu0bVyczTC3hsvGvkVPhVFoQkNOj4OECAzu8keiMUIMgQhuh ghJoTWZO3xjqxtLH2UjWCWJOQEtlPIH2lRlTSDAdYdP+LzqhaWhMi1r830T4xAWw lyGvBTdCvtYQPN9jukocPNl9MM/SYu1lXghQn8DAL4HranP4YXlvwjzSfycWY/xF xRatV+eVvXS0JPfFo2+0Vb1k1dj42gDZEwmCw4vFj5iQOVqzTVEV4xlDCblhVY+o 87dovlS9N3FlDDc5AcxP/AxWWj39p4s0HzOsBepr29duGJawVCMgfEzQMJ3im6Ia EpPx2OOVX8cf1ieMFyNj+0etCfLe9E0= -----END CERTIFICATE-----Generated at Sun May 4 19:07:06 2025 by rpki-client