$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/acc42cd6-1c13-3bd7-aaa2-e53c26175211.roa File: acc42cd6-1c13-3bd7-aaa2-e53c26175211.roa (raw, json) Hash identifier: ALutnYU74PC70L7KbfAG834WTBl6K/Z2VWHhz4kvYO8= Subject key identifier: DE:90:BD:C5:95:86:AC:48:81:93:11:0F:85:50:C4:15:BE:66:A4:B4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784F86E7DAE7E3DFAD16610 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/acc42cd6-1c13-3bd7-aaa2-e53c26175211.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.192.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:f8:6e:7d:ae:7e:3d:fa:d1:66:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=927ca3de-aa0e-402f-93ec-9dea8fb84c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:81:cc:1d:80:fe:24:7b:c1:12:e4:54:77:c7: bc:91:a0:17:bc:d7:1e:4e:bd:23:98:ad:c4:03:c6: 38:c0:75:8c:3f:1a:14:45:e4:a9:63:c4:86:61:e8: 8a:6b:dc:a2:5f:44:c9:f5:28:e3:1d:e6:84:87:6e: 5c:a7:78:fb:0e:70:0d:96:6c:e2:1a:d2:21:3e:9b: d3:f6:62:c3:bd:45:92:8e:1e:ea:7c:32:9a:75:00: ec:3b:09:50:24:03:5a:47:89:49:10:33:b9:57:68: cf:85:7e:70:10:20:aa:1c:a3:2b:1b:8f:03:25:fd: a6:bb:f9:58:e8:09:19:0d:a4:51:04:a7:65:96:1d: 83:2c:28:40:25:77:5f:ae:5e:73:04:3d:df:3e:dd: a6:a4:44:bc:f1:cc:a0:53:68:cf:58:61:9d:19:44: f4:c9:4d:b0:88:ee:4d:7b:75:db:60:62:ea:41:f0: 32:9a:ff:08:0a:80:e6:4b:96:96:95:fb:5f:7f:d2: c5:3c:ca:26:ae:93:66:2b:38:1e:93:db:f2:c7:79: e0:2d:66:c4:3c:94:55:4a:9f:0d:b5:07:0f:7d:56: d7:7e:bf:bf:53:24:07:f1:f9:90:79:e9:c0:db:2a: 3d:58:24:29:a0:76:77:f0:18:8e:96:cf:3a:45:7c: f9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:90:BD:C5:95:86:AC:48:81:93:11:0F:85:50:C4:15:BE:66:A4:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/acc42cd6-1c13-3bd7-aaa2-e53c26175211.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.192.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:f5:6c:3e:6d:4a:8e:0b:6c:89:82:b1:a5:0d:07:66:5b:9c: 4b:49:3a:a4:65:e0:75:d4:44:3c:44:f0:0a:50:67:47:f7:3b: ec:23:a1:b0:62:fb:70:f5:ed:cd:d7:63:ed:a1:27:67:8c:63: 4b:4b:e8:5f:be:60:3f:f9:73:b9:3a:e3:4a:6b:99:ca:a6:70: b8:5e:97:c5:1d:06:92:7e:5e:38:c2:16:3d:c1:2b:69:c2:3f: eb:cc:8b:47:dc:c6:f3:db:c1:b6:22:d0:bb:c5:64:da:1f:e1: 2b:1c:0f:6b:82:62:05:8e:35:ac:75:f3:e1:64:d3:cd:73:38: d2:15:83:7c:4d:28:72:6e:8d:f4:94:9f:ed:5c:ce:9f:05:9e: 18:6e:4d:6c:6b:00:23:16:2f:6a:6c:d9:85:0c:bd:15:98:e5: 10:89:fd:78:da:7c:7c:51:48:8e:a5:5e:bd:a9:d2:9e:ce:ea: 28:c8:60:ea:23:67:5c:56:59:b4:fd:1f:a9:ba:de:9e:04:8c: 09:cb:0a:f2:bd:93:80:97:7a:41:85:d6:4b:66:20:26:20:43: 42:1d:4d:0e:64:82:15:1c:1f:e6:b8:ea:ab:5e:85:85:50:59: f0:3d:65:d6:c3:ee:fd:99:3b:d9:34:bd:f9:82:1f:51:7c:72: f5:19:27:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPhufa5+PfrRZhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OTI3Y2EzZGUtYWEwZS00MDJmLTkzZWMtOWRlYThmYjg0YzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYHMHYD+JHvBEuRUd8e8kaAXvNceTr0jmK3E A8Y4wHWMPxoUReSpY8SGYeiKa9yiX0TJ9SjjHeaEh25cp3j7DnANlmziGtIhPpvT 9mLDvUWSjh7qfDKadQDsOwlQJANaR4lJEDO5V2jPhX5wECCqHKMrG48DJf2mu/lY 6AkZDaRRBKdllh2DLChAJXdfrl5zBD3fPt2mpES88cygU2jPWGGdGUT0yU2wiO5N e3XbYGLqQfAymv8ICoDmS5aWlftff9LFPMomrpNmKzgek9vyx3ngLWbEPJRVSp8N tQcPfVbXfr+/UyQH8fmQeenA2yo9WCQpoHZ38BiOls86RXz5wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6QvcWVhqxIgZMRD4VQxBW+ZqS0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWNjNDJjZDYtMWMxMy0z YmQ3LWFhYTItZTUzYzI2MTc1MjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8BwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFb1bD5tSo4LbImCsaUNB2ZbnEtJOqRl4HXURDxE8ApQZ0f3O+wjobBi +3D17c3XY+2hJ2eMY0tL6F++YD/5c7k640prmcqmcLhel8UdBpJ+XjjCFj3BK2nC P+vMi0fcxvPbwbYi0LvFZNof4SscD2uCYgWONax18+Fk081zONIVg3xNKHJujfSU n+1czp8FnhhuTWxrACMWL2ps2YUMvRWY5RCJ/XjafHxRSI6lXr2p0p7O6ijIYOoj Z1xWWbT9H6m63p4EjAnLCvK9k4CXekGF1ktmICYgQ0IdTQ5kghUcH+a46qtehYVQ WfA9ZdbD7v2ZO9k0vfmCH1F8cvUZJ0k= -----END CERTIFICATE-----Generated at Sun May 4 21:08:52 2025 by rpki-client