$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/403cc79c-f04d-3f9d-91cf-c429ef02a1f8.roa File: 403cc79c-f04d-3f9d-91cf-c429ef02a1f8.roa (raw, json) Hash identifier: ffya2rveM0cJWxWim29+Q39DIFQNhcjgWJF3MYUK7A0= Subject key identifier: 1E:C9:7D:B7:DF:05:67:95:B4:B1:15:4A:49:2D:53:1F:7D:B6:94:F8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7850B1E04E1D78CC4DD6380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/403cc79c-f04d-3f9d-91cf-c429ef02a1f8.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 35.184.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:0b:1e:04:e1:d7:8c:c4:dd:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=b20be33d-ba64-4e69-b77f-120f12c0dd63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f1:86:42:d7:ad:71:37:46:41:a4:9f:a8:cb: aa:28:70:3d:e1:52:c7:54:cf:d7:79:68:de:16:66: 48:70:1f:90:6c:c3:91:7e:63:b2:1e:5a:27:a4:ce: e8:b7:ff:8d:4f:48:ad:75:9c:fe:22:4f:21:f7:81: 45:c8:55:28:5b:8b:9f:03:54:0f:b6:75:a9:b0:cc: eb:bb:b3:fe:66:9e:e5:17:a0:d9:52:51:dd:4f:ae: 77:82:df:b7:e7:56:c7:f1:80:c2:2d:49:e5:d1:e2: 60:f6:e6:05:86:65:f3:00:ab:54:b4:21:7f:8a:65: 81:ef:32:07:06:d9:d3:86:d9:f3:0c:d7:3f:9f:9e: cd:7b:30:f1:1b:4d:b5:24:d4:4d:c7:30:93:ed:5e: d3:fc:eb:7e:4d:e4:bb:cf:e2:81:16:c5:2e:c3:e1: 15:f2:93:1c:f5:8a:18:6f:49:08:5b:1a:a0:46:d6: 7f:8c:da:45:c7:08:0d:d8:5d:2f:2f:a3:47:7b:2f: 28:84:83:0f:d0:9e:97:e4:01:d8:77:46:be:23:b5: 81:fc:86:7d:66:2c:b6:a5:2e:e2:34:a2:9b:22:a1: a8:97:69:25:50:99:57:ef:14:83:fc:1d:bd:0c:45: 01:f0:0a:99:0e:c0:74:7f:15:82:5c:f8:c3:92:51: c6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C9:7D:B7:DF:05:67:95:B4:B1:15:4A:49:2D:53:1F:7D:B6:94:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/403cc79c-f04d-3f9d-91cf-c429ef02a1f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.184.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:56:57:61:32:c0:c5:83:4f:54:5a:87:37:e3:cd:ed:83:4c: bd:5e:02:14:51:21:b5:b7:64:37:86:b7:9e:c6:4f:a3:66:6f: 32:45:28:bc:13:c6:31:41:6d:63:78:a0:93:fe:17:49:c3:00: 0c:a2:cc:f9:9b:39:a0:e8:01:22:c5:51:e5:0f:9f:b0:e8:28: c0:a2:b1:8e:26:91:73:4e:ab:68:a6:82:2a:8d:ac:ec:8b:8b: 7b:42:31:e1:d6:9c:10:26:04:51:37:75:36:4c:70:44:74:d1: 99:2e:29:61:f8:27:e8:64:0c:52:a3:c9:77:c7:4b:08:6e:da: c6:82:6e:f8:d3:f2:4b:e5:ef:2d:c5:e8:9b:e7:79:c4:c6:47: 4f:c2:1f:e8:d4:b0:0f:6e:cd:6a:61:b1:c1:e9:8b:ff:92:40: 90:34:5d:7f:ae:74:bb:40:bc:ba:ca:c3:2e:00:5f:f2:d6:c8: b1:ba:19:b6:48:f6:35:76:f2:eb:4a:55:26:b2:9e:26:83:64: c1:f4:85:4e:8c:e7:80:a2:46:0a:1c:20:94:b4:3a:af:3c:4e: 56:37:dd:89:52:98:2f:ac:64:7f:95:f8:17:ef:fe:b5:05:62: a6:05:5a:c1:e2:a9:a5:a7:04:00:b6:f1:3f:0a:79:75:75:d5: 5b:e1:fe:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQseBOHXjMTdY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YjIwYmUzM2QtYmE2NC00ZTY5LWI3N2YtMTIwZjEyYzBkZDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPGGQtetcTdGQaSfqMuqKHA94VLHVM/XeWje FmZIcB+QbMORfmOyHlonpM7ot/+NT0itdZz+Ik8h94FFyFUoW4ufA1QPtnWpsMzr u7P+Zp7lF6DZUlHdT653gt+351bH8YDCLUnl0eJg9uYFhmXzAKtUtCF/imWB7zIH BtnThtnzDNc/n57NezDxG021JNRNxzCT7V7T/Ot+TeS7z+KBFsUuw+EV8pMc9YoY b0kIWxqgRtZ/jNpFxwgN2F0vL6NHey8ohIMP0J6X5AHYd0a+I7WB/IZ9Ziy2pS7i NKKbIqGol2klUJlX7xSD/B29DEUB8AqZDsB0fxWCXPjDklHGlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7JfbffBWeVtLEVSkktUx99tpT4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDAzY2M3OWMtZjA0ZC0z ZjlkLTkxY2YtYzQyOWVmMDJhMWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFI7hgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVWV2EywMWDT1Rahzfjze2DTL1eAhRRIbW3ZDeGt57GT6NmbzJFKLwT xjFBbWN4oJP+F0nDAAyizPmbOaDoASLFUeUPn7DoKMCisY4mkXNOq2imgiqNrOyL i3tCMeHWnBAmBFE3dTZMcER00ZkuKWH4J+hkDFKjyXfHSwhu2saCbvjT8kvl7y3F 6JvnecTGR0/CH+jUsA9uzWphscHpi/+SQJA0XX+udLtAvLrKwy4AX/LWyLG6GbZI 9jV28utKVSayniaDZMH0hU6M54CiRgocIJS0Oq88TlY33YlSmC+sZH+V+Bfv/rUF YqYFWsHiqaWnBAC28T8KeXV11Vvh/pE= -----END CERTIFICATE-----Generated at Sun Apr 27 03:25:19 2025 by rpki-client