$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/24e8c0a3-94d6-3120-8cf3-7a66f11f4a9c.roa File: 24e8c0a3-94d6-3120-8cf3-7a66f11f4a9c.roa (raw, json) Hash identifier: 5boqeYqOodnK5DV7tam0iE3pCHUrS+aLdmD37AyBydQ= Subject key identifier: 18:67:58:A1:E4:58:5C:E1:90:15:44:8F:CA:6F:43:F7:19:E8:E3:5F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785181295897F778B90A700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/24e8c0a3-94d6-3120-8cf3-7a66f11f4a9c.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.234.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:18:12:95:89:7f:77:8b:90:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=c5b8cb06-4f26-46f1-ba2a-aacbc34cd431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0e:d4:38:33:63:44:28:0b:93:9a:19:c1:c1: 31:e2:aa:21:c4:54:c1:bb:27:f7:d0:33:90:3a:b7: c0:14:e0:67:ad:60:1f:7e:22:9d:71:d8:c7:c0:82: b9:b3:1b:5f:df:be:1b:ba:95:b5:f2:90:3b:07:39: 9c:51:24:57:be:7a:3d:a4:d3:15:75:cb:ad:8d:2f: b5:82:e7:8f:4a:73:cb:5b:ff:77:29:fe:26:32:b9: 10:21:b3:c6:43:65:7b:ce:ef:9a:b1:05:73:39:04: 96:b2:44:15:d8:37:0f:c1:37:5c:2f:41:6e:7d:29: fe:13:72:02:87:75:a9:9f:2e:15:7f:ef:86:00:29: a9:bb:4b:ab:3e:58:47:ef:34:a5:a3:84:c9:da:01: 8e:42:8d:6b:ce:da:05:24:66:7d:ae:29:cb:74:b9: a6:b2:cc:1b:1e:8d:46:40:7f:e1:03:69:3e:ca:96: 8a:d5:83:29:7a:2b:fe:9b:2c:18:e7:54:1b:65:3e: 50:59:9b:b7:d0:4e:50:da:e2:23:6b:0b:99:5c:60: 60:bc:10:f0:11:7e:91:db:74:8b:10:74:1d:3d:4f: 0f:9c:82:30:bf:c7:79:d5:fd:63:25:fa:cd:ee:88: c1:58:b2:cc:1e:ff:d5:9a:2c:d6:44:8a:ed:ae:96: 48:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:67:58:A1:E4:58:5C:E1:90:15:44:8F:CA:6F:43:F7:19:E8:E3:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/24e8c0a3-94d6-3120-8cf3-7a66f11f4a9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.234.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:51:b6:30:68:ae:05:d2:fd:6b:39:4e:0e:58:eb:18:17:0b: c9:ae:83:c8:08:ed:b4:c3:d6:df:88:a1:c4:96:e8:bd:d6:96: ca:a6:c3:d5:f4:bf:75:d4:35:a3:ce:ce:97:57:09:83:1f:a4: b6:70:35:f2:b7:e2:e5:0c:48:ad:1f:42:67:2e:44:cc:bf:8a: 12:90:a8:ee:9c:e2:96:6f:f3:76:b9:57:95:29:b8:0a:b9:69: 11:1c:c8:e2:a9:07:c8:f1:54:26:1e:f0:07:eb:0d:a4:9b:0e: bb:4c:b5:b4:f1:03:fe:10:6e:d4:f2:72:bf:6a:72:59:6e:97: 49:5d:1c:68:63:74:7e:13:72:60:b0:02:84:5c:6b:45:ad:ce: 77:75:bc:46:c2:72:7c:d2:b3:07:c1:6c:c3:fb:56:62:03:65: 4c:ec:5f:1a:61:31:85:ab:78:ff:12:be:99:02:aa:71:8f:f6: e3:38:6e:73:e7:19:c7:e4:2e:0d:14:13:f0:ac:09:fa:8a:64: 95:b3:07:5f:80:80:12:0d:6f:14:8f:c5:ea:05:4d:cb:0d:5d: 9c:60:1f:41:89:bf:ea:ce:29:a6:1d:e4:6d:9d:0a:1c:61:c9: 11:56:8c:fb:15:6f:1f:b3:a3:f5:e3:22:fd:b9:2e:a0:9c:ab: 25:67:81:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRgSlYl/d4uQpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YzViOGNiMDYtNGYyNi00NmYxLWJhMmEtYWFjYmMzNGNkNDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA7UODNjRCgLk5oZwcEx4qohxFTBuyf30DOQ OrfAFOBnrWAffiKdcdjHwIK5sxtf374bupW18pA7BzmcUSRXvno9pNMVdcutjS+1 guePSnPLW/93Kf4mMrkQIbPGQ2V7zu+asQVzOQSWskQV2DcPwTdcL0FufSn+E3IC h3Wpny4Vf++GACmpu0urPlhH7zSlo4TJ2gGOQo1rztoFJGZ9rinLdLmmsswbHo1G QH/hA2k+ypaK1YMpeiv+mywY51QbZT5QWZu30E5Q2uIjawuZXGBgvBDwEX6R23SL EHQdPU8PnIIwv8d51f1jJfrN7ojBWLLMHv/VmizWRIrtrpZIyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhnWKHkWFzhkBVEj8pvQ/cZ6ONfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjRlOGMwYTMtOTRkNi0z MTIwLThjZjMtN2E2NmYxMWY0YTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGI+pAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1RtjBorgXS/Ws5Tg5Y6xgXC8mug8gI7bTD1t+IocSW6L3Wlsqmw9X0 v3XUNaPOzpdXCYMfpLZwNfK34uUMSK0fQmcuRMy/ihKQqO6c4pZv83a5V5UpuAq5 aREcyOKpB8jxVCYe8AfrDaSbDrtMtbTxA/4QbtTycr9qcllul0ldHGhjdH4TcmCw AoRca0Wtznd1vEbCcnzSswfBbMP7VmIDZUzsXxphMYWreP8SvpkCqnGP9uM4bnPn GcfkLg0UE/CsCfqKZJWzB1+AgBINbxSPxeoFTcsNXZxgH0GJv+rOKaYd5G2dChxh yRFWjPsVbx+zo/XjIv25LqCcqyVngX0= -----END CERTIFICATE-----Generated at Mon Jun 16 15:31:27 2025 by rpki-client