$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17b18f69-b6e9-3693-8b8b-8e4729608b3d.roa File: 17b18f69-b6e9-3693-8b8b-8e4729608b3d.roa (raw, json) Hash identifier: xU4E8vCmJ/PqibBiJ9VfaOJ4yfy/KVImOHEZ0W7rrEU= Subject key identifier: 1F:DD:22:6D:A8:5E:7E:1C:14:F8:C7:C1:E8:41:C5:28:A4:57:8F:84 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784C72636EBB34056DB3A80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17b18f69-b6e9-3693-8b8b-8e4729608b3d.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 35.187.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:c7:26:36:eb:b3:40:56:db:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=fd4cd143-b176-4ecc-a64f-1abb40aeb1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3b:9d:4f:23:1a:9f:76:9f:9b:95:19:32:0d: 42:8b:3c:42:08:09:c8:85:1b:dd:ed:98:8f:34:49: fb:83:f7:21:3f:68:ca:42:c8:0c:81:81:15:2d:86: 80:68:ef:7e:6d:d7:94:07:61:d6:e0:f4:bb:fd:b9: 3c:3a:59:dc:71:97:1e:ba:63:13:27:a6:e3:c5:b6: 01:72:5f:23:ed:2a:3d:a1:3c:7d:0a:40:e9:e9:5b: bf:8f:a9:24:e5:e0:ed:86:65:6e:9d:77:00:d4:e5: 7a:c2:47:5e:0b:b5:1a:34:0b:82:78:25:0e:69:89: eb:d2:fa:7b:a3:88:45:56:af:e0:55:5d:fb:96:5a: 20:20:6d:f2:01:5e:66:47:22:ad:d7:6a:0c:3e:5b: df:7d:33:37:ad:25:41:73:38:ff:ec:02:f2:fc:8d: 5c:21:8c:77:39:d0:e6:a0:9e:d6:e0:a5:f1:0f:1d: ea:d7:f4:d2:80:4f:f3:88:f4:56:38:5a:04:d3:88: 4c:cc:31:0b:b1:82:8d:58:70:04:13:ff:ce:b5:14: 49:47:06:33:87:a6:a4:03:02:99:59:41:6f:ae:ea: c1:cb:ea:35:a8:b9:f7:63:c4:fb:a2:e6:bd:b2:8a: 5b:76:06:0e:ba:94:c7:86:de:ae:c7:50:92:4d:23: a0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:DD:22:6D:A8:5E:7E:1C:14:F8:C7:C1:E8:41:C5:28:A4:57:8F:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17b18f69-b6e9-3693-8b8b-8e4729608b3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.187.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:c4:2a:7f:81:a8:f7:fa:cd:54:56:10:96:95:0d:fb:e0:b9: b6:98:3c:38:2e:da:f5:77:c2:77:0a:6b:3d:a2:45:69:6f:cf: 4a:4a:c7:8a:35:6e:c8:66:7b:bb:9e:59:d9:46:e7:06:c1:15: f1:46:f2:42:f1:6d:c6:a3:5d:e7:d8:af:7c:fd:98:f1:22:49: 8b:63:ca:f0:c5:00:2e:fa:94:7d:25:2a:64:bf:3e:5b:73:e5: ff:bc:98:1e:f8:31:b8:d9:97:0c:08:83:5e:47:cc:9e:71:2e: 52:ea:8e:96:82:ad:df:4a:d8:09:c8:83:67:0e:f9:ee:23:f2: 85:e2:8a:0b:2b:24:a7:60:2f:65:ac:10:a4:5e:83:d4:7b:3b: 36:d9:49:85:ef:dd:d4:c2:64:02:72:b4:6a:45:78:9e:65:3f: c2:3f:57:16:8e:6e:25:b1:49:64:91:27:a0:d4:5b:d8:89:fa: 4c:97:1d:63:45:aa:2e:5d:eb:b0:6f:b8:13:dc:d2:05:b8:af: 10:ca:f8:16:c4:b1:79:13:66:74:89:3c:a9:96:05:72:72:36: 61:49:c1:49:09:c3:8d:90:20:8f:e1:18:74:6b:97:f4:77:70: f3:1f:77:7c:eb:2f:87:22:83:44:f1:1e:34:bb:12:64:e9:2d: a9:53:1a:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMcmNuuzQFbbOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZmQ0Y2QxNDMtYjE3Ni00ZWNjLWE2NGYtMWFiYjQwYWViMWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjudTyMan3afm5UZMg1CizxCCAnIhRvd7ZiP NEn7g/chP2jKQsgMgYEVLYaAaO9+bdeUB2HW4PS7/bk8OlnccZceumMTJ6bjxbYB cl8j7So9oTx9CkDp6Vu/j6kk5eDthmVunXcA1OV6wkdeC7UaNAuCeCUOaYnr0vp7 o4hFVq/gVV37llogIG3yAV5mRyKt12oMPlvffTM3rSVBczj/7ALy/I1cIYx3OdDm oJ7W4KXxDx3q1/TSgE/ziPRWOFoE04hMzDELsYKNWHAEE//OtRRJRwYzh6akAwKZ WUFvrurBy+o1qLn3Y8T7oua9sopbdgYOupTHht6ux1CSTSOgdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/dIm2oXn4cFPjHwehBxSikV4+EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTdiMThmNjktYjZlOS0z NjkzLThiOGItOGU0NzI5NjA4YjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFI7uAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbEKn+BqPf6zVRWEJaVDfvgubaYPDgu2vV3wncKaz2iRWlvz0pKx4o1 bshme7ueWdlG5wbBFfFG8kLxbcajXefYr3z9mPEiSYtjyvDFAC76lH0lKmS/Pltz 5f+8mB74MbjZlwwIg15HzJ5xLlLqjpaCrd9K2AnIg2cO+e4j8oXiigsrJKdgL2Ws EKReg9R7OzbZSYXv3dTCZAJytGpFeJ5lP8I/VxaObiWxSWSRJ6DUW9iJ+kyXHWNF qi5d67BvuBPc0gW4rxDK+BbEsXkTZnSJPKmWBXJyNmFJwUkJw42QII/hGHRrl/R3 cPMfd3zrL4cig0TxHjS7EmTpLalTGoM= -----END CERTIFICATE-----Generated at Sat Apr 26 19:55:29 2025 by rpki-client