$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1ee39c08-236c-3668-bbd0-0e9593a22a45.roa File: 1ee39c08-236c-3668-bbd0-0e9593a22a45.roa (raw, json) Hash identifier: 9Kit5NfcuLRVuNHCU0BBJNADJ9quWJjiRMSXLZtJhxs= Subject key identifier: C5:5E:39:69:F2:2C:89:61:E3:5B:A1:5C:B3:C4:02:CD:AA:AA:EA:90 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784D65FE2B55A6860EB0E60 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1ee39c08-236c-3668-bbd0-0e9593a22a45.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.227.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:d6:5f:e2:b5:5a:68:60:eb:0e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=c824851f-3504-4ccb-9673-38b9f289b524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1a:5a:9d:dc:f2:61:ae:be:0b:8f:70:d1:76: 10:bc:1d:d4:b7:f1:aa:2d:80:e9:cd:ec:c7:cd:e5: 53:1a:6b:1f:d0:14:62:4e:d7:bd:9f:bf:87:57:b7: 51:ef:14:bf:c1:90:0e:b7:e2:ec:75:b9:48:18:db: b5:6f:bd:c7:7c:a5:e9:42:1d:ae:d9:a3:64:7e:dd: 57:af:a0:27:1a:e5:39:94:11:8b:ef:af:2b:47:4b: 51:20:68:44:4a:e7:81:95:bd:a8:0a:4f:a0:8c:5c: 4a:44:be:9d:a0:6f:d7:88:32:03:0d:2b:2b:c1:ca: a1:65:cf:7e:28:89:b7:63:75:15:fe:2e:44:ee:1a: 21:b8:6f:ee:d9:58:b9:b6:cd:bd:71:ba:13:60:a6: fc:9a:c0:d2:c3:e0:9c:dd:de:ec:e1:fe:09:3e:67: 96:2f:4e:3e:ab:0c:e1:14:8e:26:16:4c:ca:69:ce: a7:8a:f6:32:f7:a8:b4:6b:a0:ea:dc:fe:c6:2b:55: 11:cd:23:ad:46:ee:c7:06:85:ab:e5:12:d9:7c:f3: 3d:14:33:32:4b:92:45:3b:c3:af:1c:f7:31:35:96: 2c:6a:f0:5a:c4:b4:90:4b:eb:f0:ba:a3:84:08:60: 31:44:a9:ae:94:e4:a1:7d:1f:0c:49:1c:dd:cf:a7: f9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:5E:39:69:F2:2C:89:61:E3:5B:A1:5C:B3:C4:02:CD:AA:AA:EA:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1ee39c08-236c-3668-bbd0-0e9593a22a45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.227.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:ac:67:fe:2c:ce:ad:1e:f8:86:ae:f6:48:ea:7f:01:0f:57: bd:35:5e:94:3e:21:72:20:92:34:ee:70:47:41:cf:dd:0e:f0: 56:56:95:e2:05:82:1b:49:d6:5c:fe:d5:d0:22:de:3b:15:26: 06:fa:72:9b:c5:58:c5:ca:29:02:7d:e6:fd:e8:52:a3:23:ba: b9:e5:4d:80:31:8e:17:07:05:14:a6:17:29:98:67:61:8c:c2: f0:8e:10:e0:88:40:64:bb:02:22:f4:01:cc:71:5e:fb:91:48: 09:60:6f:9d:ab:49:3b:bb:8d:23:cf:2a:79:dd:2f:7e:9a:10: 36:8b:d6:58:9c:eb:77:e0:ba:67:1c:88:b2:3e:e8:41:4a:db: 97:be:4b:2f:cc:a9:8b:31:07:d5:51:fb:7f:d3:64:7c:2c:2f: e0:f5:39:12:24:e4:64:56:cf:d7:3d:4a:bd:9d:59:74:d0:96: 59:94:9a:ea:fa:d8:1b:14:d8:91:33:6a:9a:9a:d5:9e:87:5f: c6:1a:b3:36:9a:db:3c:b7:1b:a8:6c:ac:39:4b:15:40:98:bb: 98:8f:da:8b:13:9b:9c:32:2e:e9:e0:e6:68:e0:40:95:ed:59: e1:25:35:f4:88:28:0b:38:7e:5b:fd:11:6f:f7:85:1d:ec:5e: c4:a5:8b:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNZf4rVaaGDrDmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YzgyNDg1MWYtMzUwNC00Y2NiLTk2NzMtMzhiOWYyODliNTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhpandzyYa6+C49w0XYQvB3Ut/GqLYDpzezH zeVTGmsf0BRiTte9n7+HV7dR7xS/wZAOt+LsdblIGNu1b73HfKXpQh2u2aNkft1X r6AnGuU5lBGL768rR0tRIGhESueBlb2oCk+gjFxKRL6doG/XiDIDDSsrwcqhZc9+ KIm3Y3UV/i5E7hohuG/u2Vi5ts29cboTYKb8msDSw+Cc3d7s4f4JPmeWL04+qwzh FI4mFkzKac6nivYy96i0a6Dq3P7GK1URzSOtRu7HBoWr5RLZfPM9FDMyS5JFO8Ov HPcxNZYsavBaxLSQS+vwuqOECGAxRKmulOShfR8MSRzdz6f5NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVeOWnyLIlh41uhXLPEAs2qquqQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWVlMzljMDgtMjM2Yy0z NjY4LWJiZDAtMGU5NTkzYTIyYTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+MgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGesZ/4szq0e+Iau9kjqfwEPV701XpQ+IXIgkjTucEdBz90O8FZWleIF ghtJ1lz+1dAi3jsVJgb6cpvFWMXKKQJ95v3oUqMjurnlTYAxjhcHBRSmFymYZ2GM wvCOEOCIQGS7AiL0AcxxXvuRSAlgb52rSTu7jSPPKnndL36aEDaL1lic63fgumcc iLI+6EFK25e+Sy/MqYsxB9VR+3/TZHwsL+D1ORIk5GRWz9c9Sr2dWXTQllmUmur6 2BsU2JEzapqa1Z6HX8Yaszaa2zy3G6hsrDlLFUCYu5iP2osTm5wyLung5mjgQJXt WeElNfSIKAs4flv9EW/3hR3sXsSli2o= -----END CERTIFICATE-----Generated at Sat Apr 26 16:05:01 2025 by rpki-client