$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ae3b0e5b-bd03-3273-b2f3-84213ed28aa8.roa File: ae3b0e5b-bd03-3273-b2f3-84213ed28aa8.roa (raw, json) Hash identifier: Jzzbob6v6iQyvQlx4R4w3mc+mtWiw6K00GBrECfNoYk= Subject key identifier: 3F:F0:B8:7F:18:0A:C9:C0:87:B8:16:27:8B:26:BE:3B:5B:95:2B:67 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785076FDA42033F60A50200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ae3b0e5b-bd03-3273-b2f3-84213ed28aa8.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.244.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:07:6f:da:42:03:3f:60:a5:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=9fcac7ca-20a9-45be-8ea8-c89273bf9422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a9:1f:b7:22:a2:0b:87:f6:1b:94:0d:94:ea: 93:75:95:3b:9d:e9:7e:16:b8:68:6b:b8:91:5b:57: 7e:86:93:68:11:33:c9:cf:53:52:50:b7:e9:bd:22: 26:d7:b1:a8:b0:42:01:b8:1e:71:45:c6:8b:de:17: fc:d1:61:21:75:58:e8:10:fb:c6:66:6a:d8:e2:2f: 68:44:1f:26:2f:9d:07:52:9c:69:1f:e1:81:ca:ef: 6a:ea:2b:5d:21:67:1d:14:03:77:2e:79:5f:04:92: ba:e3:45:80:01:27:94:fc:db:9a:b5:62:b0:31:30: e1:47:4b:7c:49:39:4b:8e:20:ad:31:8e:40:e2:fa: 3e:03:c3:f7:e6:85:4c:90:2a:1a:c7:7c:14:5e:b2: fa:a8:d3:08:b1:0d:09:53:be:be:0f:18:60:b2:69: bb:ed:c9:63:4e:3e:14:81:69:2a:7b:96:3c:06:9a: da:7b:02:c6:0a:70:dc:a8:ff:7e:b4:80:61:3b:35: 96:43:52:22:69:5a:f4:ea:5e:bf:3d:0f:48:3e:5d: 04:17:fa:f1:77:72:b8:f8:56:e2:5f:7e:0e:b7:99: 08:a7:4f:d9:a4:20:fe:59:92:b9:d8:3f:d4:19:08: dd:90:ec:5b:f2:cb:0a:ff:2d:48:19:86:40:aa:b6: 5e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F0:B8:7F:18:0A:C9:C0:87:B8:16:27:8B:26:BE:3B:5B:95:2B:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ae3b0e5b-bd03-3273-b2f3-84213ed28aa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.244.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:2d:96:af:4a:e9:b4:b3:85:e2:f8:7b:04:e5:20:dd:06:49: 77:0d:33:97:89:9b:c1:9a:96:e0:34:91:f3:5a:90:69:c5:3a: b1:5e:2d:c9:5c:56:dd:ab:f2:e5:e6:29:d1:db:2a:fb:69:f1: 9c:fe:e5:d9:87:c2:ef:44:72:ab:fb:aa:c9:2a:39:39:2a:57: ca:df:5f:93:a1:fa:fa:5c:b0:5f:22:ca:92:3b:47:c7:ae:98: 56:d1:14:d3:1b:3c:5f:2e:53:84:1d:75:50:9c:96:b4:c2:c5: 70:25:65:30:b5:ad:f6:bf:fa:71:06:ac:bd:99:b4:f3:6a:58: 36:bf:a2:6d:34:b0:8f:31:73:8c:f4:49:ab:c1:ab:b3:b2:65: 6f:78:26:ad:59:5f:77:d4:98:e4:69:c2:23:ad:ba:4c:d0:a9: 3c:c8:8c:85:fc:8f:a4:1c:bd:69:b5:5f:5a:63:5e:54:ae:02: b6:00:aa:c9:90:0c:be:44:6a:ef:16:0d:36:9a:89:45:1c:a0: 5b:3a:1e:5a:47:b7:ca:4c:db:81:a7:d7:3e:c9:cd:c1:87:43: 86:de:c0:94:4e:ef:f0:79:90:cc:bf:aa:aa:3d:15:31:61:13: 21:03:04:a4:9a:06:7c:37:eb:3e:fa:6d:06:c5:fe:79:7f:34: fe:48:ec:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQdv2kIDP2ClAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OWZjYWM3Y2EtMjBhOS00NWJlLThlYTgtYzg5MjczYmY5NDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6kftyKiC4f2G5QNlOqTdZU7nel+Frhoa7iR W1d+hpNoETPJz1NSULfpvSIm17GosEIBuB5xRcaL3hf80WEhdVjoEPvGZmrY4i9o RB8mL50HUpxpH+GByu9q6itdIWcdFAN3LnlfBJK640WAASeU/NuatWKwMTDhR0t8 STlLjiCtMY5A4vo+A8P35oVMkCoax3wUXrL6qNMIsQ0JU76+Dxhgsmm77cljTj4U gWkqe5Y8BpraewLGCnDcqP9+tIBhOzWWQ1IiaVr06l6/PQ9IPl0EF/rxd3K4+Fbi X34Ot5kIp0/ZpCD+WZK52D/UGQjdkOxb8ssK/y1IGYZAqrZeCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/wuH8YCsnAh7gWJ4smvjtblStnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWUzYjBlNWItYmQwMy0z MjczLWIyZjMtODQyMTNlZDI4YWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/QAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4tlq9K6bSzheL4ewTlIN0GSXcNM5eJm8GaluA0kfNakGnFOrFeLclc Vt2r8uXmKdHbKvtp8Zz+5dmHwu9Ecqv7qskqOTkqV8rfX5Oh+vpcsF8iypI7R8eu mFbRFNMbPF8uU4QddVCclrTCxXAlZTC1rfa/+nEGrL2ZtPNqWDa/om00sI8xc4z0 SavBq7OyZW94Jq1ZX3fUmORpwiOtukzQqTzIjIX8j6QcvWm1X1pjXlSuArYAqsmQ DL5Eau8WDTaaiUUcoFs6HlpHt8pM24Gn1z7JzcGHQ4bewJRO7/B5kMy/qqo9FTFh EyEDBKSaBnw36z76bQbF/nl/NP5I7FM= -----END CERTIFICATE-----Generated at Sun May 4 23:48:17 2025 by rpki-client