$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a8674ea-f491-32f8-8a19-419793a95e2a.roa File: 3a8674ea-f491-32f8-8a19-419793a95e2a.roa (raw, json) Hash identifier: zFXr2+M56qQYlDKABfr9TDkSwg4NkHKBod+b94Vr5jM= Subject key identifier: 4B:CA:80:64:08:C3:22:B0:85:BE:13:C0:07:A5:A1:3D:E0:B3:2B:D3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BE6A7A675B3A07F8A49C8 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a8674ea-f491-32f8-8a19-419793a95e2a.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.193.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:e6:a7:a6:75:b3:a0:7f:8a:49:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=ec64c24c-cbc1-424a-b728-5e6a56692da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:de:e2:00:43:8a:ef:90:1e:3d:53:60:b3:f8: 36:41:60:0c:a6:06:4c:d4:c5:b8:c0:33:94:a3:8c: 33:a5:0c:6d:75:79:55:d0:c9:78:d9:25:58:44:4b: 22:d7:c4:3d:88:05:bd:50:62:15:e0:a5:6d:4e:67: 59:3d:69:74:16:5b:ed:e2:cc:5e:6c:c3:0f:28:22: ac:c8:aa:76:02:40:c7:4d:8d:e2:82:ae:15:ac:d1: 01:b1:24:71:9f:7b:98:e9:95:23:41:11:36:76:05: 6e:bc:a8:79:cb:42:e7:12:01:a7:90:00:ad:d8:5d: 51:6b:bd:57:04:2f:ca:a5:7b:6c:2f:2b:f5:83:db: 7b:18:10:f2:3b:10:76:1e:a3:eb:52:3b:fc:56:dd: fb:3c:de:59:dc:03:57:01:4f:82:4b:49:9e:d2:f7: 60:5e:c9:e7:15:99:c0:66:cc:9a:e6:4f:89:ce:74: b1:01:fd:ac:64:19:6b:79:95:d2:36:ca:08:e0:4d: 05:eb:67:f9:d1:f4:46:0e:61:49:30:8a:f7:30:05: d7:d1:f4:10:9d:e9:ef:42:67:5d:86:fc:c5:11:82: d5:dc:b6:96:12:ac:7d:eb:ee:6a:4a:91:bd:5f:f3: 43:13:d1:91:83:ad:83:4f:0b:50:55:af:7d:d1:72: f6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:CA:80:64:08:C3:22:B0:85:BE:13:C0:07:A5:A1:3D:E0:B3:2B:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3a8674ea-f491-32f8-8a19-419793a95e2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.193.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:c4:04:b7:f2:26:31:d3:2c:62:e9:29:74:d7:a4:90:ca:77: c3:5e:ac:89:45:9c:25:e8:c0:3b:15:62:ec:94:24:76:a6:3f: aa:07:b2:4d:d5:c7:5e:3a:6c:ee:6c:5b:2e:47:8f:c4:04:ea: 1e:8d:76:ee:50:18:c2:d0:74:e7:49:83:38:18:7b:e6:d7:04: 9e:49:b5:15:73:65:b5:26:b8:98:bf:d0:8e:3b:03:05:f7:f2: 00:06:05:79:c9:5a:8d:17:b0:02:fe:11:aa:65:58:4f:2c:39: de:bd:51:42:6d:a8:b7:68:46:3f:c2:9a:37:6f:40:a9:c1:ee: 8e:65:f4:94:63:f9:ac:9d:13:34:c3:73:14:52:b1:69:1f:79: bb:c7:4f:b3:2e:20:4e:2b:22:38:87:e4:8c:97:bf:c1:40:bc: 47:fa:6c:3f:14:c5:bf:ad:0a:5e:83:2a:71:be:c1:ee:09:63: 65:cc:a3:e1:82:0f:c7:e4:51:5c:80:e2:b7:55:d0:3a:86:05: c2:e3:55:9c:88:44:d9:6d:66:cb:6b:3c:72:f9:9b:6e:66:f8: 73:49:b6:75:77:c7:21:d9:7a:0f:70:18:f0:e3:36:b0:a8:ea: be:1d:7c:55:ae:11:01:21:ea:5b:b7:55:f0:f8:b7:0c:ca:71: 68:9d:75:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+anpnWzoH+KScgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZWM2NGMyNGMtY2JjMS00MjRhLWI3MjgtNWU2YTU2NjkyZGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud7iAEOK75AePVNgs/g2QWAMpgZM1MW4wDOU o4wzpQxtdXlV0Ml42SVYREsi18Q9iAW9UGIV4KVtTmdZPWl0Flvt4sxebMMPKCKs yKp2AkDHTY3igq4VrNEBsSRxn3uY6ZUjQRE2dgVuvKh5y0LnEgGnkACt2F1Ra71X BC/KpXtsLyv1g9t7GBDyOxB2HqPrUjv8Vt37PN5Z3ANXAU+CS0me0vdgXsnnFZnA Zsya5k+JznSxAf2sZBlreZXSNsoI4E0F62f50fRGDmFJMIr3MAXX0fQQnenvQmdd hvzFEYLV3LaWEqx96+5qSpG9X/NDE9GRg62DTwtQVa990XL2FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvKgGQIwyKwhb4TwAeloT3gsyvTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2E4Njc0ZWEtZjQ5MS0z MmY4LThhMTktNDE5NzkzYTk1ZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8HAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjEBLfyJjHTLGLpKXTXpJDKd8NerIlFnCXowDsVYuyUJHamP6oHsk3V x146bO5sWy5Hj8QE6h6Ndu5QGMLQdOdJgzgYe+bXBJ5JtRVzZbUmuJi/0I47AwX3 8gAGBXnJWo0XsAL+EaplWE8sOd69UUJtqLdoRj/CmjdvQKnB7o5l9JRj+aydEzTD cxRSsWkfebvHT7MuIE4rIjiH5IyXv8FAvEf6bD8Uxb+tCl6DKnG+we4JY2XMo+GC D8fkUVyA4rdV0DqGBcLjVZyIRNltZstrPHL5m25m+HNJtnV3xyHZeg9wGPDjNrCo 6r4dfFWuEQEh6lu3VfD4twzKcWiddQg= -----END CERTIFICATE-----Generated at Wed Apr 9 17:02:46 2025 by rpki-client