$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d121dc5-cfbc-3c41-b667-aa0ecf67ff20.roa File: 5d121dc5-cfbc-3c41-b667-aa0ecf67ff20.roa (raw, json) Hash identifier: Mr8LmMeSbEZt+7TMMjOSK8XNuJ3dAvq6mT9LXF6nOoc= Subject key identifier: 01:48:B6:9C:00:49:8B:CF:C6:69:23:7E:35:55:27:91:FC:10:A4:84 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784E6879BCEA5A9CAC6EB00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d121dc5-cfbc-3c41-b667-aa0ecf67ff20.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 35.199.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e6:87:9b:ce:a5:a9:ca:c6:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=0e26fa45-2396-4172-a36e-9c69b8a3e014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:16:0a:f0:2e:24:cf:33:a0:19:dd:e8:df:6a: 24:cd:f4:6e:07:1b:8f:9f:5e:a6:18:10:86:fa:f8: 34:33:c4:4b:7c:48:22:9e:ee:57:66:ea:1a:10:52: 68:16:41:3f:39:a8:fc:1c:13:a2:0d:ba:86:85:41: ee:e2:d6:27:39:cc:0a:01:55:95:82:de:72:d0:e2: 21:3a:02:8d:f1:a5:62:bc:6e:6a:1f:2e:71:be:96: 55:0b:17:7c:c4:29:2b:03:67:16:50:16:d2:b8:cb: d0:74:51:67:80:16:01:6a:e1:3b:5b:a0:50:15:ca: e8:a0:0f:e0:52:f0:ab:15:f4:a1:7f:f3:2c:50:8e: d8:03:7c:86:56:a1:0c:12:2c:6a:ae:55:23:fc:2b: 5e:98:75:4a:1c:ab:84:ba:b1:c0:76:e9:f1:89:82: b9:33:25:98:38:ac:46:5f:bb:e0:80:f8:d9:91:87: b2:a1:dd:38:f9:a9:3f:cc:4b:16:98:63:ad:a6:40: 1b:ba:7b:79:55:93:9f:1a:e0:de:d6:4b:58:44:40: fe:81:8e:2d:ce:0b:6c:70:de:e2:c3:1b:36:c2:6c: fb:3e:a4:52:ce:16:5a:a2:66:a3:6f:3b:13:63:5a: fb:9f:d3:e2:59:79:69:2e:56:cd:7d:f1:91:47:32: 1a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:48:B6:9C:00:49:8B:CF:C6:69:23:7E:35:55:27:91:FC:10:A4:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5d121dc5-cfbc-3c41-b667-aa0ecf67ff20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.199.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:b4:a3:c1:20:b6:fc:5c:c9:40:41:bf:f5:ff:12:08:96:73: 98:bf:30:19:4f:e7:79:9f:90:b9:d8:c8:e4:c7:21:09:a1:a7: f5:cb:46:80:b5:47:27:cc:6f:60:c1:de:4e:9a:09:93:83:c6: 25:72:db:c5:c1:38:78:93:ae:7d:1e:0d:0c:db:8c:8b:0e:90: ee:08:29:4f:17:5c:e7:3f:53:bd:c3:50:08:11:1b:25:af:d5: 5d:0a:38:49:5c:88:5e:db:71:d5:53:39:bd:c4:02:d7:7e:9a: 9a:0f:34:3b:25:72:b7:b8:2f:d0:a5:28:0a:1b:cc:10:1b:de: 88:40:4d:5a:9f:00:4e:a4:13:6b:95:c2:fd:9e:56:15:98:4e: cb:e5:26:eb:25:bd:76:94:7e:fa:cc:95:8f:84:34:64:da:41: a5:93:67:86:a2:2b:23:3e:ca:2c:d5:a4:44:62:c6:14:65:d2: 5f:16:f2:5b:8e:79:72:85:8c:ea:e7:7c:9b:04:dc:32:c5:6c: d5:10:c3:dd:4d:e4:ec:6a:bd:c4:21:c9:9c:ff:84:19:26:11: 0f:d8:de:36:5b:62:c1:f6:61:10:de:87:f5:e3:f6:5b:28:3d: fb:82:d6:48:c3:bc:7d:b5:48:ee:f9:c5:49:70:aa:6e:48:3c: 29:e8:65:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOaHm86lqcrG6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MGUyNmZhNDUtMjM5Ni00MTcyLWEzNmUtOWM2OWI4YTNlMDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xYK8C4kzzOgGd3o32okzfRuBxuPn16mGBCG +vg0M8RLfEginu5XZuoaEFJoFkE/Oaj8HBOiDbqGhUHu4tYnOcwKAVWVgt5y0OIh OgKN8aVivG5qHy5xvpZVCxd8xCkrA2cWUBbSuMvQdFFngBYBauE7W6BQFcrooA/g UvCrFfShf/MsUI7YA3yGVqEMEixqrlUj/CtemHVKHKuEurHAdunxiYK5MyWYOKxG X7vggPjZkYeyod04+ak/zEsWmGOtpkAbunt5VZOfGuDe1ktYRED+gY4tzgtscN7i wxs2wmz7PqRSzhZaomajbzsTY1r7n9PiWXlpLlbNffGRRzIaRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFItpwASYvPxmkjfjVVJ5H8EKSEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNWQxMjFkYzUtY2ZiYy0z YzQxLWI2NjctYWEwZWNmNjdmZjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGI8eAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKe0o8EgtvxcyUBBv/X/EgiWc5i/MBlP53mfkLnYyOTHIQmhp/XLRoC1 RyfMb2DB3k6aCZODxiVy28XBOHiTrn0eDQzbjIsOkO4IKU8XXOc/U73DUAgRGyWv 1V0KOElciF7bcdVTOb3EAtd+mpoPNDslcre4L9ClKAobzBAb3ohATVqfAE6kE2uV wv2eVhWYTsvlJuslvXaUfvrMlY+ENGTaQaWTZ4aiKyM+yizVpERixhRl0l8W8luO eXKFjOrnfJsE3DLFbNUQw91N5OxqvcQhyZz/hBkmEQ/Y3jZbYsH2YRDeh/Xj9lso PfuC1kjDvH21SO75xUlwqm5IPCnoZRg= -----END CERTIFICATE-----Generated at Sat Apr 26 19:56:12 2025 by rpki-client