$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/39e65d1b-3413-3b3c-a22a-e8d94982af2b.roa File: 39e65d1b-3413-3b3c-a22a-e8d94982af2b.roa (raw, json) Hash identifier: VdGkAPI5LLzJ2pzRjrBJkgZ994U6VK5sx2ggY5KWiVc= Subject key identifier: 20:DD:0A:68:09:1F:FE:46:9C:8A:83:51:DF:A4:E5:A8:7B:18:EE:62 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78531BDF362D324AD92B400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/39e65d1b-3413-3b3c-a22a-e8d94982af2b.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.223.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:31:bd:f3:62:d3:24:ad:92:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=6a1aabf4-edac-427c-abdb-7f791a537dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e5:31:d7:60:eb:e1:07:32:39:d3:d4:02:fb: fd:bf:c2:92:6d:96:a3:fb:83:e0:03:83:ab:1c:09: 8a:b4:62:bb:df:6d:0f:a5:e2:fd:a2:f1:3c:35:84: 89:e0:1d:c2:fa:2c:86:f7:8b:9f:ce:99:1e:ac:ab: 63:ce:0c:ba:4f:28:09:59:27:9a:0c:14:91:18:23: 86:58:30:cf:76:d7:d0:b9:38:f9:0b:da:2c:aa:89: 09:01:9c:b0:d0:56:1c:6e:ef:0a:b0:13:86:26:aa: 23:ee:1f:d3:a4:25:bc:c5:bf:72:ed:04:45:b8:f5: 47:4b:23:cf:7c:01:6a:3f:31:71:f9:93:07:c3:3b: d6:20:a5:dc:bd:c3:1d:1a:c7:ec:76:b0:0e:c6:7d: 62:42:0a:a8:19:06:d1:e3:db:e8:52:f3:35:0f:d1: cd:96:ad:bd:0a:b3:8b:6b:99:8e:f1:e6:73:0b:e4: fb:4c:70:e6:6c:48:bb:f9:4f:26:aa:5e:c7:84:cf: d7:30:10:bb:15:cb:5b:96:11:76:95:5c:40:12:6c: 17:2a:21:ec:16:af:c8:82:b2:0e:e1:89:1c:97:99: 4a:36:f2:e7:14:a9:be:f6:95:e8:11:87:b8:e6:a6: 67:64:b2:e9:d0:d6:85:78:b5:8d:f2:d4:81:96:15: 1d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DD:0A:68:09:1F:FE:46:9C:8A:83:51:DF:A4:E5:A8:7B:18:EE:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/39e65d1b-3413-3b3c-a22a-e8d94982af2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.223.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:67:f5:f6:de:d5:40:9c:78:d2:f3:0f:82:2a:3e:c7:b6:57: 27:d4:31:48:af:7e:bf:9e:44:93:b8:58:f0:1c:4c:f3:38:8b: 51:59:b1:34:18:b6:61:97:7a:af:7f:41:9c:e1:fd:73:f9:20: a7:e4:e9:c0:0d:98:b8:89:ff:05:37:7d:18:bd:bf:c7:2d:4d: 1e:15:ee:59:fe:b3:d1:c2:b5:3e:a1:37:7b:ff:27:e4:00:6d: da:07:19:86:8e:40:23:40:42:2b:cb:aa:49:7e:e9:ac:2e:de: ab:48:2b:56:42:b0:11:63:0c:50:0a:b0:d2:50:38:dc:c9:7e: 30:b6:4f:ef:cb:4e:c1:a8:27:92:19:4e:f0:8c:89:57:0d:bd: dd:cc:28:c2:6e:2f:d2:1a:0d:dd:ce:e3:d0:20:b5:8a:79:36: 00:2b:dc:1d:8a:f8:d5:16:8d:c7:09:27:09:7b:43:29:4c:11: 3c:35:ab:80:c3:d3:37:67:f5:46:42:4e:ca:45:ae:1b:fe:bf: 79:a3:b1:c4:5c:d3:99:7d:62:47:bb:d6:32:74:25:0e:2f:b7: 8d:e8:70:2a:10:27:e2:18:fa:25:e1:f6:70:e9:83:3b:52:18: bc:c3:27:56:5f:ed:a2:46:d6:2d:d9:a1:c9:2f:4a:1e:a8:42: 2c:4f:5c:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTG982LTJK2StAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NmExYWFiZjQtZWRhYy00MjdjLWFiZGItN2Y3OTFhNTM3ZGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuUx12Dr4QcyOdPUAvv9v8KSbZaj+4PgA4Or HAmKtGK7320PpeL9ovE8NYSJ4B3C+iyG94ufzpkerKtjzgy6TygJWSeaDBSRGCOG WDDPdtfQuTj5C9osqokJAZyw0FYcbu8KsBOGJqoj7h/TpCW8xb9y7QRFuPVHSyPP fAFqPzFx+ZMHwzvWIKXcvcMdGsfsdrAOxn1iQgqoGQbR49voUvM1D9HNlq29CrOL a5mO8eZzC+T7THDmbEi7+U8mql7HhM/XMBC7FctblhF2lVxAEmwXKiHsFq/IgrIO 4Ykcl5lKNvLnFKm+9pXoEYe45qZnZLLp0NaFeLWN8tSBlhUdeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDdCmgJH/5GnIqDUd+k5ah7GO5iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzllNjVkMWItMzQxMy0z YjNjLWEyMmEtZThkOTQ5ODJhZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI99QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1n9fbe1UCceNLzD4IqPse2VyfUMUivfr+eRJO4WPAcTPM4i1FZsTQY tmGXeq9/QZzh/XP5IKfk6cANmLiJ/wU3fRi9v8ctTR4V7ln+s9HCtT6hN3v/J+QA bdoHGYaOQCNAQivLqkl+6awu3qtIK1ZCsBFjDFAKsNJQONzJfjC2T+/LTsGoJ5IZ TvCMiVcNvd3MKMJuL9IaDd3O49AgtYp5NgAr3B2K+NUWjccJJwl7QylMETw1q4DD 0zdn9UZCTspFrhv+v3mjscRc05l9Yke71jJ0JQ4vt43ocCoQJ+IY+iXh9nDpgztS GLzDJ1Zf7aJG1i3ZockvSh6oQixPXLI= -----END CERTIFICATE-----Generated at Sat Apr 26 17:45:56 2025 by rpki-client