$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a23917d-461e-3291-a9be-0803e9d905a9.roa File: 9a23917d-461e-3291-a9be-0803e9d905a9.roa (raw, json) Hash identifier: d5caaM58FBfhulhqx4IQppDx/4Dj1oopHKv+uRuaklI= Subject key identifier: 24:AD:05:21:09:52:1B:D7:52:24:32:E4:59:E4:2F:B5:62:B2:3C:37 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78505C99008F83B38CAA780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a23917d-461e-3291-a9be-0803e9d905a9.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.189.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:05:c9:90:08:f8:3b:38:ca:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=50b1f2b3-a2ae-4582-901b-51c6f57eb519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:eb:18:f9:b4:12:cb:05:a2:e3:df:38:6f:b1: f8:cf:48:c9:ad:a3:2d:31:bf:e8:9c:af:b8:88:ff: e9:4a:a3:cd:b1:9b:c9:92:3e:da:b7:24:5e:5a:54: a8:74:15:60:52:7d:cf:df:21:ec:39:13:09:f9:fd: c7:ed:9d:be:32:90:91:b3:17:1f:ea:ca:8c:60:a6: 6c:51:a4:4e:f8:3e:ae:77:db:6b:bc:03:fc:73:27: 19:34:06:26:0f:8e:a2:3f:9d:6a:64:5d:af:f2:74: 2c:78:66:fe:4d:ac:cb:c3:26:2d:96:01:92:0e:45: 5b:52:90:d5:39:c2:c5:94:0f:4a:1a:28:69:46:2d: 76:98:50:d6:04:7a:ec:83:09:d0:91:c2:6b:5a:cd: 9f:f2:9b:90:00:60:9e:39:90:78:b0:59:6a:42:2d: 41:cc:c5:1c:b1:94:50:60:09:b9:b9:0c:b6:0b:e0: 98:2a:40:d4:41:01:88:2f:c4:f7:cb:2e:2f:c3:41: 8c:d0:2c:ef:d1:95:a8:35:e2:e1:01:48:7c:7e:ae: 9c:9c:9f:33:b5:9e:04:7e:62:39:25:7b:58:e1:6f: da:b7:b3:5b:4b:14:83:c1:25:d3:3e:72:33:54:49: 18:5e:14:ba:6b:af:36:41:7f:2a:e6:a4:c6:39:c3: 31:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AD:05:21:09:52:1B:D7:52:24:32:E4:59:E4:2F:B5:62:B2:3C:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a23917d-461e-3291-a9be-0803e9d905a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.189.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:9a:05:53:46:e1:56:15:d1:c4:65:6a:02:cc:9e:15:98:33: 4f:56:95:db:db:67:6a:a2:36:c2:9c:6a:4e:82:85:a4:d0:92: 07:b8:70:4f:54:c9:7b:42:cd:57:ad:a5:bd:52:90:80:cf:9c: 54:a9:1c:43:55:13:3f:48:05:94:a6:6e:ab:8c:82:89:2a:94: a8:6f:c2:17:6a:00:19:b0:e6:73:79:86:a1:c7:77:36:6b:14: af:16:c4:91:5e:08:4a:b6:a7:81:99:44:04:64:78:b0:40:ea: cb:e5:08:44:13:96:7a:f3:09:20:b9:31:83:fa:f0:90:b3:0c: cb:b7:a9:b7:8d:7d:df:b4:fe:e6:5a:87:02:ca:c9:71:04:94: 4e:4b:94:d4:23:5c:96:e3:a3:14:0b:3b:e7:bb:28:5a:f9:d8: ec:fc:6b:fe:f3:c6:35:e3:61:81:9a:d0:c1:a0:0f:0a:78:ac: 6f:97:5a:d4:46:9f:39:28:b3:91:9a:b4:72:c8:93:4b:92:c7: 9c:73:2f:f2:1e:0f:0c:2c:66:0a:50:4e:9e:61:39:8e:4d:06: bf:91:45:23:f8:b8:32:63:8f:8f:86:21:4e:13:50:08:11:56: 17:20:41:73:d9:6d:c2:ba:a9:fd:6f:99:5a:2d:00:36:60:a8: 89:ff:77:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQXJkAj4OzjKp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NTBiMWYyYjMtYTJhZS00NTgyLTkwMWItNTFjNmY1N2ViNTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOsY+bQSywWi4984b7H4z0jJraMtMb/onK+4 iP/pSqPNsZvJkj7atyReWlSodBVgUn3P3yHsORMJ+f3H7Z2+MpCRsxcf6sqMYKZs UaRO+D6ud9trvAP8cycZNAYmD46iP51qZF2v8nQseGb+TazLwyYtlgGSDkVbUpDV OcLFlA9KGihpRi12mFDWBHrsgwnQkcJrWs2f8puQAGCeOZB4sFlqQi1BzMUcsZRQ YAm5uQy2C+CYKkDUQQGIL8T3yy4vw0GM0Czv0ZWoNeLhAUh8fq6cnJ8ztZ4EfmI5 JXtY4W/at7NbSxSDwSXTPnIzVEkYXhS6a682QX8q5qTGOcMx1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCStBSEJUhvXUiQy5FnkL7Visjw3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWEyMzkxN2QtNDYxZS0z MjkxLWE5YmUtMDgwM2U5ZDkwNWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI71gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+aBVNG4VYV0cRlagLMnhWYM09WldvbZ2qiNsKcak6ChaTQkge4cE9U yXtCzVetpb1SkIDPnFSpHENVEz9IBZSmbquMgokqlKhvwhdqABmw5nN5hqHHdzZr FK8WxJFeCEq2p4GZRARkeLBA6svlCEQTlnrzCSC5MYP68JCzDMu3qbeNfd+0/uZa hwLKyXEElE5LlNQjXJbjoxQLO+e7KFr52Oz8a/7zxjXjYYGa0MGgDwp4rG+XWtRG nzkos5GatHLIk0uSx5xzL/IeDwwsZgpQTp5hOY5NBr+RRSP4uDJjj4+GIU4TUAgR VhcgQXPZbcK6qf1vmVotADZgqIn/d3Y= -----END CERTIFICATE-----Generated at Sun May 4 19:24:54 2025 by rpki-client