$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa31434b-d455-3716-8753-f1c07991149e.roa File: aa31434b-d455-3716-8753-f1c07991149e.roa (raw, json) Hash identifier: Lib4X8U0u+lSSAj7VygwXsE9PeeF7UudqDwVHe43Zk8= Subject key identifier: 15:2C:E3:1F:D5:D2:41:5B:BE:F6:85:16:74:24:59:DC:0D:67:8C:AA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785243A3C50853BDC8CC780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa31434b-d455-3716-8753-f1c07991149e.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.188.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:24:3a:3c:50:85:3b:dc:8c:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=6f8375bd-21d5-4602-a532-eee399443a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:50:f2:37:ff:eb:72:22:36:2e:05:01:ef:2d: 91:16:a2:a4:2d:70:66:ea:f0:ff:76:c2:f6:65:3a: 3c:cf:01:f4:c0:f5:60:aa:00:93:08:7b:38:93:4f: 69:a2:5a:01:7d:08:d7:66:98:65:e9:66:81:76:cf: 03:b5:e0:16:da:20:a6:06:4f:da:89:4b:40:e1:ca: 47:97:9a:ce:31:64:5a:3a:70:36:c5:fc:1e:38:1a: 08:30:96:00:dc:a1:8f:f4:f5:43:fb:c3:e8:9d:fa: d1:f9:06:0b:0d:54:36:e4:03:ec:03:22:b6:7d:fd: 47:c1:d3:12:e3:33:7b:14:6e:f3:8f:73:88:0d:84: ca:d8:1b:98:2b:a1:fe:84:74:7a:5d:9c:4b:4d:b9: 8e:33:b8:2e:d8:1e:5d:37:6a:fd:c8:fd:2a:a6:b9: f6:e0:a8:a7:9a:b6:14:ed:84:c2:b0:a8:40:ed:05: c9:7d:e2:4c:72:6b:a6:7e:fe:94:1c:0e:8f:5a:d1: 14:d9:8d:e8:11:fd:06:0a:9c:9b:76:26:ed:53:0c: 28:4f:76:80:0c:c2:45:ee:8f:b9:96:44:92:89:92: 0f:db:b1:2a:05:c4:a2:d3:70:56:92:70:01:70:dc: 3c:8e:40:23:60:81:24:09:fa:9f:18:c3:df:a4:5f: e3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:2C:E3:1F:D5:D2:41:5B:BE:F6:85:16:74:24:59:DC:0D:67:8C:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa31434b-d455-3716-8753-f1c07991149e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.188.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:12:83:2a:69:72:bc:59:5d:33:b5:3f:a0:6e:29:3d:dd:0d: 74:c9:8e:0e:30:44:cc:95:16:cd:a1:fa:c4:18:45:8f:17:d5: 4e:e0:89:50:17:b0:6a:44:be:00:53:08:cc:ec:0a:15:41:f8: 23:8a:78:0c:ba:2b:1a:b3:35:86:f5:b2:9b:16:73:7b:73:f0: 88:8c:8a:02:2f:b5:cb:ef:4f:8d:7a:08:d0:f1:b2:75:e9:aa: 23:fb:b9:b5:9c:e6:36:38:fc:e1:44:52:c6:2e:5b:cf:1a:39: 7a:df:a3:12:e7:df:86:16:9c:ff:38:f1:4d:96:68:8f:57:8f: 48:7b:95:9a:f8:42:2a:50:55:0a:48:b8:86:dd:d0:da:24:d0: 38:d8:ed:0b:bd:16:39:36:da:ee:63:f4:84:55:5d:72:50:9e: 70:17:2d:dd:cd:2b:d1:fa:73:46:54:b8:b7:c1:57:f1:43:ff: 7b:f7:71:3e:d8:d2:e4:45:6b:05:2d:37:af:42:19:5b:b3:f1: ff:1f:aa:55:26:b4:a3:01:ed:fe:ef:e1:7c:b6:32:83:db:4f: e6:13:76:20:04:0f:3a:cb:fb:75:f7:74:30:71:a1:42:5d:f1: 47:6a:4e:80:94:df:f1:21:a6:d7:61:e9:35:d9:ed:e9:99:40: b1:8e:f6:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhSQ6PFCFO9yMx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NmY4Mzc1YmQtMjFkNS00NjAyLWE1MzItZWVlMzk5NDQzYTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1DyN//rciI2LgUB7y2RFqKkLXBm6vD/dsL2 ZTo8zwH0wPVgqgCTCHs4k09poloBfQjXZphl6WaBds8DteAW2iCmBk/aiUtA4cpH l5rOMWRaOnA2xfweOBoIMJYA3KGP9PVD+8PonfrR+QYLDVQ25APsAyK2ff1HwdMS 4zN7FG7zj3OIDYTK2BuYK6H+hHR6XZxLTbmOM7gu2B5dN2r9yP0qprn24KinmrYU 7YTCsKhA7QXJfeJMcmumfv6UHA6PWtEU2Y3oEf0GCpybdibtUwwoT3aADMJF7o+5 lkSSiZIP27EqBcSi03BWknABcNw8jkAjYIEkCfqfGMPfpF/juQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUs4x/V0kFbvvaFFnQkWdwNZ4yqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWEzMTQzNGItZDQ1NS0z NzE2LTg3NTMtZjFjMDc5OTExNDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7yQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4SgyppcrxZXTO1P6BuKT3dDXTJjg4wRMyVFs2h+sQYRY8X1U7giVAX sGpEvgBTCMzsChVB+COKeAy6KxqzNYb1spsWc3tz8IiMigIvtcvvT416CNDxsnXp qiP7ubWc5jY4/OFEUsYuW88aOXrfoxLn34YWnP848U2WaI9Xj0h7lZr4QipQVQpI uIbd0Nok0DjY7Qu9Fjk22u5j9IRVXXJQnnAXLd3NK9H6c0ZUuLfBV/FD/3v3cT7Y 0uRFawUtN69CGVuz8f8fqlUmtKMB7f7v4Xy2MoPbT+YTdiAEDzrL+3X3dDBxoUJd 8UdqToCU3/Ehptdh6TXZ7emZQLGO9nQ= -----END CERTIFICATE-----Generated at Sun May 4 19:33:13 2025 by rpki-client