$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d524314-f317-391d-b539-712877bc3f1d.roa File: 2d524314-f317-391d-b539-712877bc3f1d.roa (raw, json) Hash identifier: dz74203x5QVKpLZHPBjZAjrrNtabPLxBo/Bzaq/W9Qw= Subject key identifier: 4A:76:22:B5:FB:A9:FA:0A:89:54:6D:2C:3A:6F:26:0C:60:70:57:85 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784E7F57F94ABFF94BDB5C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d524314-f317-391d-b539-712877bc3f1d.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.223.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e7:f5:7f:94:ab:ff:94:bd:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=e95a5928-440f-4409-b202-dd3f4d74eb18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:49:0f:7c:41:e2:1d:0d:7a:e3:95:4b:19:25: e9:f3:d4:e3:d8:2e:96:88:9c:7d:2d:ae:69:ec:b4: 7d:17:6a:11:e2:93:4f:09:29:d1:44:53:de:c2:f4: fc:df:8c:1a:d2:7f:94:d1:38:70:7c:69:1c:17:43: b3:6a:26:8b:65:65:4c:c9:01:ff:3e:cc:3b:aa:b5: 3f:53:50:93:05:0f:ca:44:72:12:94:77:a5:ad:78: 1c:0b:9c:39:c0:48:d8:59:be:ba:08:a3:b0:2c:0e: c7:ac:45:36:9f:81:48:9d:f5:3c:37:d0:d3:00:23: cb:53:1c:75:3c:4d:1b:5b:77:8c:7b:c4:ae:7d:ad: be:df:3a:18:99:14:42:dd:cd:80:a9:69:5b:70:bc: 52:57:13:33:1f:a5:9e:92:30:5b:7c:dd:02:76:13: 6b:25:67:56:6e:78:fc:b1:06:94:e5:a5:93:df:19: d3:65:d6:7f:1e:08:12:a4:93:02:32:67:8b:06:3d: 97:4b:1b:25:90:f7:03:21:78:0b:c8:22:f7:c7:c9: 28:ca:c6:ea:b3:cf:80:2d:6b:26:7a:db:e6:8e:a5: 3c:e0:ed:8e:5f:fe:ff:57:2c:4a:ae:4e:4b:57:49: 40:45:c1:50:2f:16:64:b3:95:26:9d:7b:d8:42:1f: 86:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:76:22:B5:FB:A9:FA:0A:89:54:6D:2C:3A:6F:26:0C:60:70:57:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d524314-f317-391d-b539-712877bc3f1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.223.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:a4:f1:b5:e5:b4:bd:01:34:d6:9b:fb:fa:5f:ad:71:c3:d5: 96:a1:d6:dd:d4:34:15:3c:34:8d:5c:c2:b1:83:87:28:49:55: b9:9c:8a:d6:e0:86:df:40:17:c9:57:98:ad:f0:d3:7a:a0:36: 96:17:94:12:58:d1:67:68:95:66:a2:2d:58:df:1a:03:75:bc: c2:b0:bc:b8:20:65:2f:6a:94:fc:a6:6e:ea:09:87:9d:bf:c7: 68:62:11:a0:f3:3d:f3:7d:3c:42:ab:74:bb:25:64:d6:55:b8: 1a:a0:2b:02:b7:59:ce:fd:0e:ba:c6:f0:76:1d:0c:6e:37:b6: 07:92:e7:0a:33:0e:20:1f:1c:d0:ef:a2:83:4e:aa:cb:c8:33: 11:8c:2f:b4:08:59:f7:b3:32:af:88:9c:ec:e7:3e:cd:f2:b9: 3f:68:88:64:30:23:80:cc:24:a7:4c:18:cb:5f:1d:a3:a3:1c: de:26:c2:89:b9:09:3e:46:b6:d0:0c:fe:4c:cb:ee:4b:77:77: d9:fd:a4:72:db:66:86:2c:31:15:0a:ee:9b:47:0b:41:42:44: 64:55:1c:e3:2b:85:7c:ae:f8:dd:77:09:b1:1c:d5:da:ac:e8: 61:4a:9a:b1:8b:fa:88:a9:e0:2e:6c:13:e8:b5:75:ce:2f:ca: 03:06:fc:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOf1f5Sr/5S9tcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZTk1YTU5MjgtNDQwZi00NDA5LWIyMDItZGQzZjRkNzRlYjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUkPfEHiHQ1645VLGSXp89Tj2C6WiJx9La5p 7LR9F2oR4pNPCSnRRFPewvT834wa0n+U0ThwfGkcF0OzaiaLZWVMyQH/Psw7qrU/ U1CTBQ/KRHISlHelrXgcC5w5wEjYWb66CKOwLA7HrEU2n4FInfU8N9DTACPLUxx1 PE0bW3eMe8Sufa2+3zoYmRRC3c2AqWlbcLxSVxMzH6WekjBbfN0CdhNrJWdWbnj8 sQaU5aWT3xnTZdZ/HggSpJMCMmeLBj2XSxslkPcDIXgLyCL3x8koysbqs8+ALWsm etvmjqU84O2OX/7/VyxKrk5LV0lARcFQLxZks5UmnXvYQh+GjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEp2IrX7qfoKiVRtLDpvJgxgcFeFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmQ1MjQzMTQtZjMxNy0z OTFkLWI1MzktNzEyODc3YmMzZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI9/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+k8bXltL0BNNab+/pfrXHD1Zah1t3UNBU8NI1cwrGDhyhJVbmcitbg ht9AF8lXmK3w03qgNpYXlBJY0WdolWaiLVjfGgN1vMKwvLggZS9qlPymbuoJh52/ x2hiEaDzPfN9PEKrdLslZNZVuBqgKwK3Wc79DrrG8HYdDG43tgeS5wozDiAfHNDv ooNOqsvIMxGML7QIWfezMq+InOznPs3yuT9oiGQwI4DMJKdMGMtfHaOjHN4mwom5 CT5GttAM/kzL7kt3d9n9pHLbZoYsMRUK7ptHC0FCRGRVHOMrhXyu+N13CbEc1dqs 6GFKmrGL+oip4C5sE+i1dc4vygMG/Jg= -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:48 2025 by rpki-client