$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db35952e-567d-39ce-a88f-21fabb596fdc.roa File: db35952e-567d-39ce-a88f-21fabb596fdc.roa (raw, json) Hash identifier: yQytsb8sqhLslEBkrKEhC7fnZwbaPI7RNb1vqSDRmtQ= Subject key identifier: 29:1C:29:C4:02:2A:3E:5D:18:05:E4:E5:27:78:C9:10:23:DD:DD:89 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784F3E214DA688583783940 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db35952e-567d-39ce-a88f-21fabb596fdc.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.201.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:f3:e2:14:da:68:85:83:78:39:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=9b0d6eeb-2f28-407c-b95a-d2cb181b50b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:78:f9:17:0c:7e:95:f1:18:ea:77:3b:5f:34: 52:7d:bc:02:87:0f:34:50:37:dc:d2:fa:50:92:4c: ec:ea:ee:92:0b:87:a9:cd:0f:9e:e6:a0:0f:53:5e: 21:4e:99:b0:86:4e:8f:1f:f4:69:87:b5:a8:ef:90: c0:c3:4e:85:6e:13:3a:30:31:8e:0b:a3:ce:c8:92: ca:4a:06:c3:72:5a:ba:e3:47:4c:7e:0b:35:5d:b1: 40:a8:9b:aa:74:68:8e:8e:1b:e7:9f:eb:77:4c:39: 02:95:af:09:06:b4:8c:07:85:85:30:8f:04:81:78: 76:7a:66:bb:c7:0d:ae:cb:32:e1:90:a5:0c:57:9c: 9f:ec:25:d5:08:3d:79:65:8b:cc:93:c1:e2:52:ce: 40:47:14:a5:e7:b5:82:2c:16:5e:3c:91:4f:a7:61: a3:33:db:bc:81:88:d0:f2:04:89:8b:73:f1:41:8a: bc:25:aa:a0:17:e9:be:b6:51:01:f1:30:5f:60:be: 29:0d:2f:ed:d3:27:6b:ab:9a:b3:5e:20:79:df:37: b0:ad:8f:8d:cd:b9:8f:92:01:6a:10:bd:78:31:93: c1:bb:ae:c8:56:aa:3d:0d:bc:a3:16:c1:ac:a8:ac: d0:e0:e6:4c:fb:a1:5f:ea:30:10:32:e3:da:7c:1b: 84:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1C:29:C4:02:2A:3E:5D:18:05:E4:E5:27:78:C9:10:23:DD:DD:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db35952e-567d-39ce-a88f-21fabb596fdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.201.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:89:98:c5:15:36:82:cb:d0:d6:2c:2a:cf:56:2a:fe:95:a1: 11:23:e3:98:c6:9e:63:37:cc:7b:8a:18:c2:67:9c:f0:e8:21: 63:9e:30:54:e4:bb:57:cb:f3:61:38:64:0b:86:49:b5:18:9a: 6c:aa:dd:99:a7:bf:36:2a:9e:e4:26:5b:1a:76:2b:40:b7:af: c5:35:ee:e0:4d:cc:7c:27:00:dd:a4:d8:a5:03:e4:8a:94:cf: 10:8a:94:bd:7e:2d:36:12:f9:14:7e:e7:e6:31:5f:e9:18:e7: 07:55:95:7c:20:7f:cd:0e:05:26:18:cc:07:26:ea:85:33:c6: 17:6e:d9:a6:22:f2:af:be:f0:3c:58:47:41:22:04:81:6c:af: 55:70:11:32:d5:8c:d8:13:48:ee:71:3d:0a:f0:cd:d1:2c:56: a6:96:47:b1:73:38:ba:ad:52:e3:62:f8:9a:0e:22:de:ee:16: 47:f3:66:dd:1b:06:16:d4:3e:16:80:25:9e:e0:30:9a:18:6f: 9d:53:ce:c9:ea:10:b3:65:1f:03:8e:87:ce:8c:26:70:74:9f: 1c:50:7b:fc:22:af:0c:f1:a5:7c:e1:1e:48:76:73:ec:f9:97: 9a:fe:26:8d:02:0c:76:f4:81:f9:94:49:a9:ef:8f:b7:f6:c2: 71:fc:e9:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPPiFNpohYN4OUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OWIwZDZlZWItMmYyOC00MDdjLWI5NWEtZDJjYjE4MWI1MGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3j5Fwx+lfEY6nc7XzRSfbwChw80UDfc0vpQ kkzs6u6SC4epzQ+e5qAPU14hTpmwhk6PH/Rph7Wo75DAw06FbhM6MDGOC6POyJLK SgbDclq640dMfgs1XbFAqJuqdGiOjhvnn+t3TDkCla8JBrSMB4WFMI8EgXh2ema7 xw2uyzLhkKUMV5yf7CXVCD15ZYvMk8HiUs5ARxSl57WCLBZePJFPp2GjM9u8gYjQ 8gSJi3PxQYq8JaqgF+m+tlEB8TBfYL4pDS/t0ydrq5qzXiB53zewrY+NzbmPkgFq EL14MZPBu67IVqo9DbyjFsGsqKzQ4OZM+6Ff6jAQMuPafBuEtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkcKcQCKj5dGAXk5Sd4yRAj3d2JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGIzNTk1MmUtNTY3ZC0z OWNlLWE4OGYtMjFmYWJiNTk2ZmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8kQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuJmMUVNoLL0NYsKs9WKv6VoREj45jGnmM3zHuKGMJnnPDoIWOeMFTk u1fL82E4ZAuGSbUYmmyq3ZmnvzYqnuQmWxp2K0C3r8U17uBNzHwnAN2k2KUD5IqU zxCKlL1+LTYS+RR+5+YxX+kY5wdVlXwgf80OBSYYzAcm6oUzxhdu2aYi8q++8DxY R0EiBIFsr1VwETLVjNgTSO5xPQrwzdEsVqaWR7FzOLqtUuNi+JoOIt7uFkfzZt0b BhbUPhaAJZ7gMJoYb51TzsnqELNlHwOOh86MJnB0nxxQe/wirwzxpXzhHkh2c+z5 l5r+Jo0CDHb0gfmUSanvj7f2wnH86Zk= -----END CERTIFICATE-----Generated at Sun May 4 18:57:22 2025 by rpki-client