$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c049d32d-f87e-33c6-8a01-2578b4d98820.roa File: c049d32d-f87e-33c6-8a01-2578b4d98820.roa (raw, json) Hash identifier: OF3y7RqvYt4ruYfx5L/A3mZhWtHBw+pFBnySqSL5/i8= Subject key identifier: F0:2E:6D:70:AC:B8:87:D6:CF:31:27:52:90:DE:EE:51:A2:4A:FD:B0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78532A343AA21BE0B93C980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c049d32d-f87e-33c6-8a01-2578b4d98820.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.238.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:32:a3:43:aa:21:be:0b:93:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=bfa544a0-0c53-4814-9799-d618cf641ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b3:2b:2e:e2:02:af:93:f2:91:b1:8b:21:be: f4:70:f9:07:18:4f:45:77:eb:a8:91:08:27:25:4c: d7:bc:68:68:91:41:43:65:5f:11:ad:b5:60:ff:2f: 40:c0:e5:e7:8c:4c:fd:96:4d:40:18:6d:f9:03:75: de:08:c7:e6:a3:75:ee:d6:f7:b2:a2:e3:32:e5:09: f3:d6:21:fb:92:b1:dd:4d:28:41:bd:4c:5b:df:ff: e5:44:52:28:4c:67:99:41:79:bd:c6:3c:98:45:af: ef:d8:03:03:8e:91:22:43:29:62:0b:41:41:b6:0b: 7e:97:2b:3e:fb:77:c7:c9:89:1d:66:f8:b3:90:98: d8:82:5a:68:cc:92:ce:15:68:5a:57:5d:4e:39:02: 5c:fb:16:12:ae:9d:d9:54:8b:48:4c:a6:9f:ae:0c: c6:61:38:73:ac:76:17:eb:ed:7e:57:a5:a9:dc:1f: 0b:07:5d:85:e2:15:b1:df:aa:6e:4d:ed:e2:9c:34: e4:ab:82:ad:40:ea:53:b2:ed:85:e1:94:49:bd:1a: 1a:26:be:23:eb:eb:2d:2e:25:12:65:a0:bc:6a:1c: 35:23:cb:eb:d2:98:0c:64:09:c2:53:5d:ec:1e:f1: 58:19:2b:f9:16:9e:98:c4:c6:36:b7:32:28:56:f0: d1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:2E:6D:70:AC:B8:87:D6:CF:31:27:52:90:DE:EE:51:A2:4A:FD:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c049d32d-f87e-33c6-8a01-2578b4d98820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:2d:62:de:a6:9e:df:84:82:62:55:76:4f:dd:d9:e7:3d:36: 1a:ae:f2:34:5f:ab:03:42:63:e5:1d:c1:08:7b:ea:47:1f:a9: 50:e2:9a:eb:d0:dd:96:3c:87:90:19:ff:6a:d4:9f:10:09:e5: ba:40:d1:f0:d9:02:68:8d:0a:e9:b4:34:e0:47:9b:f9:3f:96: ba:e9:11:f1:e6:d9:9a:6a:7b:8b:3b:98:ff:55:2d:38:2c:b9: cf:18:6b:eb:72:dd:52:6c:62:d0:dd:43:45:0d:2b:aa:d0:e2: 77:9b:f9:ac:d1:e1:5e:46:e2:51:ab:9a:27:7e:b0:ed:78:49: dc:02:a5:fe:83:21:ea:16:85:e3:f1:c5:c5:ef:aa:c0:43:2f: 31:91:15:06:ed:8d:e7:32:50:29:3c:a0:7f:e1:e0:e0:86:eb: ab:ba:b0:4a:26:a1:59:a3:6a:dd:01:61:03:36:c1:46:08:f9: b3:a7:07:11:33:cb:37:e6:a6:cc:32:de:49:d3:73:e7:09:f3: 5b:63:37:5f:9f:1b:57:8f:1d:77:af:dd:09:46:9a:56:9c:f0: a5:b5:a5:4c:4d:26:b2:bd:46:80:64:8d:32:0a:69:2a:a5:0a: 24:4c:ad:46:13:8e:a6:34:0e:40:72:ca:dd:9e:3e:2c:d7:e2: 2c:3c:a9:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTKjQ6ohvguTyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YmZhNTQ0YTAtMGM1My00ODE0LTk3OTktZDYxOGNmNjQxZWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibMrLuICr5PykbGLIb70cPkHGE9Fd+uokQgn JUzXvGhokUFDZV8RrbVg/y9AwOXnjEz9lk1AGG35A3XeCMfmo3Xu1veyouMy5Qnz 1iH7krHdTShBvUxb3//lRFIoTGeZQXm9xjyYRa/v2AMDjpEiQyliC0FBtgt+lys+ +3fHyYkdZvizkJjYglpozJLOFWhaV11OOQJc+xYSrp3ZVItITKafrgzGYThzrHYX 6+1+V6Wp3B8LB12F4hWx36puTe3inDTkq4KtQOpTsu2F4ZRJvRoaJr4j6+stLiUS ZaC8ahw1I8vr0pgMZAnCU13sHvFYGSv5Fp6YxMY2tzIoVvDRgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPAubXCsuIfWzzEnUpDe7lGiSv2wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzA0OWQzMmQtZjg3ZS0z M2M2LThhMDEtMjU3OGI0ZDk4ODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQtYt6mnt+EgmJVdk/d2ec9Nhqu8jRfqwNCY+UdwQh76kcfqVDimuvQ 3ZY8h5AZ/2rUnxAJ5bpA0fDZAmiNCum0NOBHm/k/lrrpEfHm2Zpqe4s7mP9VLTgs uc8Ya+ty3VJsYtDdQ0UNK6rQ4neb+azR4V5G4lGrmid+sO14SdwCpf6DIeoWhePx xcXvqsBDLzGRFQbtjecyUCk8oH/h4OCG66u6sEomoVmjat0BYQM2wUYI+bOnBxEz yzfmpswy3knTc+cJ81tjN1+fG1ePHXev3QlGmlac8KW1pUxNJrK9RoBkjTIKaSql CiRMrUYTjqY0DkByyt2ePizX4iw8qSw= -----END CERTIFICATE-----Generated at Mon May 5 12:47:42 2025 by rpki-client