$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d126e1ab-78c4-3a31-b14a-e0ced3356c4b.roa File: d126e1ab-78c4-3a31-b14a-e0ced3356c4b.roa (raw, json) Hash identifier: 6rwlKzK5Zx08ujlUMECbWQHActky/1mfnB3uNgmdYMU= Subject key identifier: AD:DF:5B:20:9D:15:1B:A7:95:05:89:54:25:A7:47:0A:53:6C:E0:4D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78506C0379096ECDB8C7900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d126e1ab-78c4-3a31-b14a-e0ced3356c4b.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.240.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:06:c0:37:90:96:ec:db:8c:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=d5be6ad9-9a11-4c16-9776-898e34b4b39a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:14:ec:11:27:44:72:11:71:89:c9:f2:9a:a9: 64:b0:2a:9e:70:b4:7b:8d:2c:c9:7b:4c:b6:c8:23: 0b:f9:f4:13:7f:65:0d:e6:e0:69:ad:fc:07:f7:6a: 36:3e:ea:a6:84:9d:9d:04:04:ed:e1:d7:de:e1:48: 8a:e4:d0:bf:69:88:2f:4a:5e:35:69:5f:d0:ae:82: 85:31:28:fc:b1:0b:93:fd:6e:72:01:21:1b:7e:ed: 5b:97:35:e1:1c:fb:41:59:5e:7a:34:fd:83:fd:5f: 1f:7d:e5:ca:4c:57:c0:66:92:18:75:3b:32:8c:a4: 09:40:7b:9a:5d:fd:90:b0:23:54:5d:d8:dd:99:fa: 9c:8b:96:21:47:97:fd:b6:1a:e5:a7:30:d4:1e:9f: d3:af:46:44:03:aa:5c:a0:9e:62:59:d6:11:2b:cd: 71:96:9e:1f:2e:8f:88:19:b9:08:14:b0:ea:34:ea: aa:11:64:bd:d7:c7:8a:80:8e:94:73:f6:f5:5e:6b: 0f:88:cd:82:88:84:22:81:e8:ad:1d:c1:29:2e:6a: 06:ca:ed:bf:f4:48:c5:a7:4f:95:15:60:e1:1c:d1: 72:89:91:e9:40:ba:72:2c:81:68:d6:23:6d:b7:67: c8:99:62:cd:1e:7d:0e:62:89:86:6d:82:6b:ad:e9: 05:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:DF:5B:20:9D:15:1B:A7:95:05:89:54:25:A7:47:0A:53:6C:E0:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d126e1ab-78c4-3a31-b14a-e0ced3356c4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.240.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:69:73:35:49:1c:1b:ff:9a:5a:27:61:ba:88:63:3b:57:56: c8:5a:30:fc:1b:4b:68:bd:f3:db:02:f7:11:63:dd:bc:a1:7d: 77:c6:31:6d:5e:1f:5f:7c:93:0a:53:48:57:a2:15:49:1c:23: 17:9f:f6:73:f2:1f:af:f4:0b:63:09:a0:65:ed:9a:9c:00:a2: f2:81:65:46:d6:99:70:cb:0a:1e:a0:22:fc:a2:17:1b:e0:85: 18:19:e4:1f:da:0d:f6:fd:f1:ed:0e:c8:c4:10:93:de:82:31: c9:e0:a0:d8:6f:22:73:8a:27:2b:e7:99:1d:47:f8:50:f3:bd: c6:3c:2a:fd:81:df:41:05:61:33:81:25:1a:71:85:94:92:5b: ff:2c:4d:af:40:e8:0d:45:20:0b:3f:d4:36:c1:64:94:42:2d: 6d:f8:ec:a1:26:de:eb:44:56:0a:a5:88:12:15:2e:bf:2b:25: c7:34:e1:c8:f5:ed:85:7d:9d:30:5e:60:2c:d3:d7:63:75:c9: f9:de:58:51:11:31:62:30:b7:62:93:82:1a:74:e9:e7:fe:d7: f9:e7:20:34:00:c6:dc:66:9e:06:31:f1:9d:32:ce:1a:ec:b0: 96:89:9d:c4:a1:c0:52:98:36:8a:8f:05:d4:31:0e:0f:76:b8: 57:e3:4b:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQbAN5CW7NuMeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZDViZTZhZDktOWExMS00YzE2LTk3NzYtODk4ZTM0YjRiMzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRTsESdEchFxicnymqlksCqecLR7jSzJe0y2 yCML+fQTf2UN5uBprfwH92o2PuqmhJ2dBATt4dfe4UiK5NC/aYgvSl41aV/QroKF MSj8sQuT/W5yASEbfu1blzXhHPtBWV56NP2D/V8ffeXKTFfAZpIYdTsyjKQJQHua Xf2QsCNUXdjdmfqci5YhR5f9thrlpzDUHp/Tr0ZEA6pcoJ5iWdYRK81xlp4fLo+I GbkIFLDqNOqqEWS918eKgI6Uc/b1XmsPiM2CiIQigeitHcEpLmoGyu2/9EjFp0+V FWDhHNFyiZHpQLpyLIFo1iNtt2fImWLNHn0OYomGbYJrrekF0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3fWyCdFRunlQWJVCWnRwpTbOBNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDEyNmUxYWItNzhjNC0z YTMxLWIxNGEtZTBjZWQzMzU2YzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/DQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINpczVJHBv/mlonYbqIYztXVshaMPwbS2i989sC9xFj3byhfXfGMW1e H198kwpTSFeiFUkcIxef9nPyH6/0C2MJoGXtmpwAovKBZUbWmXDLCh6gIvyiFxvg hRgZ5B/aDfb98e0OyMQQk96CMcngoNhvInOKJyvnmR1H+FDzvcY8Kv2B30EFYTOB JRpxhZSSW/8sTa9A6A1FIAs/1DbBZJRCLW347KEm3utEVgqliBIVLr8rJcc04cj1 7YV9nTBeYCzT12N1yfneWFERMWIwt2KTghp06ef+1/nnIDQAxtxmngYx8Z0yzhrs sJaJncShwFKYNoqPBdQxDg92uFfjSyI= -----END CERTIFICATE-----Generated at Sun May 4 19:51:39 2025 by rpki-client