$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fba3afa-94b4-32ab-a016-746169353e51.roa File: 3fba3afa-94b4-32ab-a016-746169353e51.roa (raw, json) Hash identifier: 7k/EVkv3ptkd3qtbP0G+yhnugMHuQZSpfPtNnQQqxPA= Subject key identifier: 45:C4:17:7F:1E:E1:AA:B2:16:CB:AD:DA:AA:0E:6A:48:CF:F7:80:56 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784EE3CD769B214D5CA8A00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fba3afa-94b4-32ab-a016-746169353e51.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.222.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ee:3c:d7:69:b2:14:d5:ca:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=203e1d4c-a77b-441f-88d1-6eea18a9ce41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:00:f5:bf:5d:e6:76:90:7d:cd:64:51:fe:c8: 3d:c5:a1:c1:03:4c:a2:c7:be:9e:bc:aa:20:87:08: 69:46:44:19:9c:10:36:de:f8:97:87:9c:8c:5b:2b: b5:18:e8:82:e0:62:7e:ee:0a:2b:9b:ca:48:ee:f8: 82:6a:11:8a:8b:27:5d:22:65:17:8f:34:40:1a:8b: 8c:0b:b1:a0:c7:1e:0c:bc:da:22:36:5f:24:e8:c2: b1:e4:ee:f8:a7:13:f5:86:d9:b0:8f:14:e8:6e:be: 90:e6:f3:1a:3f:2b:a5:30:b4:25:2f:9e:22:56:1a: 49:29:b5:b0:62:88:55:94:40:2d:58:09:2c:15:88: 47:13:cb:14:da:25:82:f9:dc:92:42:f5:57:77:82: f3:d1:d2:be:67:ec:c4:97:80:4d:83:ba:11:70:d5: 1e:22:4e:08:f9:d9:fb:1d:1d:77:20:a4:55:6a:75: 8d:fa:9f:cd:45:54:22:18:57:be:9a:a4:94:ad:47: 40:1d:a9:4d:f1:b7:63:67:13:83:64:71:95:cc:7c: 9d:fa:69:ab:d9:4e:0e:c4:bf:dd:ce:20:30:ef:a6: e5:46:ac:51:1d:73:f2:5b:3e:eb:d5:24:8b:39:b1: 74:3b:c7:34:1c:d5:08:ac:79:8c:5b:6d:4e:0b:6e: d7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C4:17:7F:1E:E1:AA:B2:16:CB:AD:DA:AA:0E:6A:48:CF:F7:80:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fba3afa-94b4-32ab-a016-746169353e51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.222.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:40:c5:97:20:b5:e6:aa:41:b6:0a:f1:97:65:5f:40:a9:4f: 39:73:88:a4:45:a3:0a:1c:c5:24:e3:55:cb:4d:40:ff:b8:58: 8f:a3:de:36:f5:ef:c8:e2:42:d8:ba:cb:ec:18:04:74:70:bb: ba:df:be:d4:d1:0d:c3:fd:3a:80:d3:79:a6:33:28:b0:ae:1e: d5:cb:a2:e3:f3:ce:17:01:18:12:05:fd:f6:5e:ef:12:c8:55: 39:1a:72:3a:da:3a:a7:47:55:3c:47:aa:ac:a1:48:bd:e7:37: ab:08:ea:0b:95:bc:31:69:24:24:bd:e2:fc:08:c8:e4:4e:30: fa:c7:d6:a3:ef:10:f4:0c:3a:a0:03:5f:a4:e7:56:fb:ab:23: 93:50:fa:40:b1:9c:66:9a:1c:46:f2:71:69:af:98:7e:10:6a: 9c:3c:82:c0:52:82:01:35:cb:10:31:82:f7:85:32:28:b4:44: a3:32:3e:61:4e:59:2e:ba:fd:c0:45:3c:f9:d7:84:e0:76:77: 87:6e:cf:1c:c3:b1:34:3a:35:f5:8a:9c:63:1a:dc:9b:f5:f4: 6a:66:3a:82:a0:64:83:c5:68:e6:a5:4f:b9:7d:98:ca:4f:09: d3:8f:a1:44:64:75:8a:9d:5c:4f:c0:61:9a:e4:4f:6c:3e:9a: d3:5c:22:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhO4812myFNXKigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MjAzZTFkNGMtYTc3Yi00NDFmLTg4ZDEtNmVlYTE4YTljZTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwD1v13mdpB9zWRR/sg9xaHBA0yix76evKog hwhpRkQZnBA23viXh5yMWyu1GOiC4GJ+7gorm8pI7viCahGKiyddImUXjzRAGouM C7Ggxx4MvNoiNl8k6MKx5O74pxP1htmwjxTobr6Q5vMaPyulMLQlL54iVhpJKbWw YohVlEAtWAksFYhHE8sU2iWC+dySQvVXd4Lz0dK+Z+zEl4BNg7oRcNUeIk4I+dn7 HR13IKRVanWN+p/NRVQiGFe+mqSUrUdAHalN8bdjZxODZHGVzHyd+mmr2U4OxL/d ziAw76blRqxRHXPyWz7r1SSLObF0O8c0HNUIrHmMW21OC27XMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXEF38e4aqyFsut2qoOakjP94BWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2ZiYTNhZmEtOTRiNC0z MmFiLWEwMTYtNzQ2MTY5MzUzZTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI96AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVAxZcgteaqQbYK8ZdlX0CpTzlziKRFowocxSTjVctNQP+4WI+j3jb1 78jiQti6y+wYBHRwu7rfvtTRDcP9OoDTeaYzKLCuHtXLouPzzhcBGBIF/fZe7xLI VTkacjraOqdHVTxHqqyhSL3nN6sI6guVvDFpJCS94vwIyOROMPrH1qPvEPQMOqAD X6TnVvurI5NQ+kCxnGaaHEbycWmvmH4Qapw8gsBSggE1yxAxgveFMii0RKMyPmFO WS66/cBFPPnXhOB2d4duzxzDsTQ6NfWKnGMa3Jv19GpmOoKgZIPFaOalT7l9mMpP CdOPoURkdYqdXE/AYZrkT2w+mtNcIkQ= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:15 2025 by rpki-client