$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd3c689e-2c7d-3a88-b382-65c29503a941.roa File: fd3c689e-2c7d-3a88-b382-65c29503a941.roa (raw, json) Hash identifier: 9viCNAREw2MhGyqhBW8GOSGkT77iXpXYsOlRvglXi5Q= Subject key identifier: 92:36:EB:75:08:4C:70:9B:3F:D2:B7:1B:6A:98:D6:58:0D:91:9A:4C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785253423ECBC78D0E820C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd3c689e-2c7d-3a88-b382-65c29503a941.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.238.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:25:34:23:ec:bc:78:d0:e8:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=f0ed11a0-8335-4450-b4c1-ee5280417d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:32:8d:84:c7:bc:0e:01:71:c5:10:37:6c:06: 7d:56:6d:e2:b4:c8:a9:e5:30:d7:4a:bb:e6:bc:01: 29:a3:fe:fb:fd:ca:ca:96:7d:55:ba:c2:2b:5c:62: 23:07:35:c0:e4:9e:94:b8:57:4b:9a:8b:63:85:3c: 87:8d:9b:8f:27:23:a5:20:d8:d2:95:c0:20:91:53: 2b:73:c4:96:37:9b:2d:ee:3e:e9:bd:61:b8:32:0f: 80:56:db:70:9b:4e:71:41:97:35:23:75:84:57:22: cb:69:7e:20:b6:47:5e:e5:bc:e2:df:6e:6c:89:d1: a6:35:ce:db:de:3a:09:c3:62:c0:85:a9:38:99:9f: 94:00:7a:4c:89:64:13:20:37:85:df:b7:80:2c:0b: ec:47:17:77:44:e6:cc:cb:05:9a:39:bb:51:d6:3b: 59:63:2c:dc:fa:dd:7b:bd:96:47:03:42:03:6b:0d: 24:60:35:f5:94:3b:9e:26:3f:f7:dd:8e:bb:88:f5: 2c:04:8e:7c:56:8a:8c:ad:a3:e8:dc:7d:6b:1b:60: 00:cc:7c:3d:b7:04:89:f6:11:11:a0:0c:ff:e3:3b: 5f:32:56:b5:31:b7:0c:43:1d:fe:13:3e:63:41:ff: 0b:50:c8:15:fd:04:82:79:e0:7c:9b:c2:da:53:20: fe:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:36:EB:75:08:4C:70:9B:3F:D2:B7:1B:6A:98:D6:58:0D:91:9A:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd3c689e-2c7d-3a88-b382-65c29503a941.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:c5:69:e5:c8:22:61:9e:0d:65:74:60:ef:4b:ba:76:93:27: 36:c2:99:22:e9:d1:31:71:ab:14:e7:ce:dd:9f:96:69:9f:46: c9:26:6c:13:40:c6:2e:ac:6c:d2:54:0f:d7:3d:e2:6f:7e:e2: 59:83:98:07:06:b2:8e:9e:27:dd:1b:b4:fc:7b:38:46:30:ef: 9a:6c:f7:2e:a3:32:3a:d4:67:4f:dd:39:d9:d7:55:58:e6:f0: 75:d9:28:6a:2a:ef:08:15:55:b2:0c:f1:11:f9:03:61:00:d1: 47:78:30:24:e4:cf:8a:a6:e4:48:d3:dc:91:a4:ab:24:db:ce: e9:2e:d9:fd:aa:b0:8d:a4:21:e5:11:83:7f:5e:09:03:21:6b: 0b:96:a6:94:a0:94:45:ea:08:86:92:3d:07:30:e2:ee:2c:75: e4:cf:6f:8c:2a:40:c3:e1:49:1d:29:20:98:07:79:13:1c:d2: a7:53:4d:4e:fc:e9:3e:8d:5b:34:02:0e:3e:69:d9:1a:eb:b0: cc:68:fc:9b:f1:fd:4b:6d:f6:19:52:c2:06:9f:a6:49:8a:f7: 86:5e:7f:d8:2c:c2:24:1a:17:59:8c:35:33:42:49:3a:32:36: 1c:37:14:52:59:b4:18:13:7a:5d:4f:38:e1:d4:7f:b6:d1:03: 7b:c2:c8:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhSU0I+y8eNDoIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZjBlZDExYTAtODMzNS00NDUwLWI0YzEtZWU1MjgwNDE3ZDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+DKNhMe8DgFxxRA3bAZ9Vm3itMip5TDXSrvm vAEpo/77/crKln1VusIrXGIjBzXA5J6UuFdLmotjhTyHjZuPJyOlINjSlcAgkVMr c8SWN5st7j7pvWG4Mg+AVttwm05xQZc1I3WEVyLLaX4gtkde5bzi325sidGmNc7b 3joJw2LAhak4mZ+UAHpMiWQTIDeF37eALAvsRxd3RObMywWaObtR1jtZYyzc+t17 vZZHA0IDaw0kYDX1lDueJj/33Y67iPUsBI58VoqMraPo3H1rG2AAzHw9twSJ9hER oAz/4ztfMla1MbcMQx3+Ez5jQf8LUMgV/QSCeeB8m8LaUyD+XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJI263UITHCbP9K3G2qY1lgNkZpMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmQzYzY4OWUtMmM3ZC0z YTg4LWIzODItNjVjMjk1MDNhOTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+5QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjFaeXIImGeDWV0YO9LunaTJzbCmSLp0TFxqxTnzt2flmmfRskmbBNA xi6sbNJUD9c94m9+4lmDmAcGso6eJ90btPx7OEYw75ps9y6jMjrUZ0/dOdnXVVjm 8HXZKGoq7wgVVbIM8RH5A2EA0Ud4MCTkz4qm5EjT3JGkqyTbzuku2f2qsI2kIeUR g39eCQMhawuWppSglEXqCIaSPQcw4u4sdeTPb4wqQMPhSR0pIJgHeRMc0qdTTU78 6T6NWzQCDj5p2RrrsMxo/Jvx/Utt9hlSwgafpkmK94Zef9gswiQaF1mMNTNCSToy Nhw3FFJZtBgTel1POOHUf7bRA3vCyLU= -----END CERTIFICATE-----Generated at Sun May 4 20:00:48 2025 by rpki-client