$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6857a932-fb7b-37d2-bfb2-d32627bcb974.roa File: 6857a932-fb7b-37d2-bfb2-d32627bcb974.roa (raw, json) Hash identifier: yeQbW1RFQeh94hLYw35RSRk2/JcrRMsdYSIQs028lMg= Subject key identifier: D6:21:DB:74:82:87:F5:1D:C9:96:55:76:B4:46:03:14:66:C2:63:1D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785170A98B3F6C69B53C000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6857a932-fb7b-37d2-bfb2-d32627bcb974.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.222.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:17:0a:98:b3:f6:c6:9b:53:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=3cd49d7f-d3e8-408e-a405-fb0dddeea8a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e3:62:38:bd:99:ce:b1:56:cb:34:b1:c7:2b: b1:12:a9:1d:c7:e5:fc:40:f9:7b:88:ba:01:31:80: c5:ca:56:5f:ec:2e:42:de:c7:df:61:00:62:86:03: be:82:0d:3f:e3:03:ea:b0:3d:4b:5d:5b:1b:e4:22: d5:16:1a:23:6e:4d:13:ef:7c:d2:2e:40:ea:bf:ff: 71:69:b4:ab:4e:99:e0:56:62:a1:b3:3c:ec:c6:2b: 8b:38:b6:d6:94:2c:79:d8:e5:26:8c:ef:b5:02:99: 59:2e:ba:ed:d6:76:57:61:30:bc:88:98:51:e4:47: 2d:f3:7b:0d:b6:9d:d9:b6:a4:af:ef:9c:c7:e5:1c: f0:dc:42:af:c7:f0:2f:49:ec:fc:68:91:31:92:25: a3:1b:b2:9b:78:87:5f:fc:2e:de:71:d0:ce:76:06: c0:99:08:d0:25:eb:3c:93:62:0e:09:67:0b:cf:29: 44:2b:0e:db:9a:0a:ff:44:d2:5f:11:0b:6b:1e:f2: 3c:1c:c7:9a:fc:c0:60:29:f7:dc:98:87:8e:d1:3e: 61:c5:06:aa:b2:b3:b6:19:12:0d:ba:2b:f1:d2:fc: 33:c4:4e:26:e9:57:0f:26:4d:92:a6:a8:5a:8e:b6: 19:1b:8a:f0:a4:b7:aa:db:3b:4c:34:4a:d4:12:65: 58:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:21:DB:74:82:87:F5:1D:C9:96:55:76:B4:46:03:14:66:C2:63:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6857a932-fb7b-37d2-bfb2-d32627bcb974.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.222.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:5d:74:77:ba:88:d9:f1:7f:04:2f:2c:e0:45:91:40:e2:06: 38:7f:c6:5e:77:4c:03:70:3e:ce:f8:38:43:39:0a:7e:f0:22: f3:66:e3:f5:fc:b9:19:dc:36:a8:c8:99:53:46:1f:ab:91:34: 13:e2:22:c9:ca:d2:dc:0c:f2:a9:78:4a:ce:1b:8e:f8:ce:e3: 75:8c:4f:2f:75:b5:d7:ff:e4:52:b0:c8:1e:dc:a7:2f:b5:91: d3:26:54:1a:70:1b:f6:fa:6e:57:88:27:fc:fa:1d:71:de:27: f6:cf:3f:23:c6:61:06:11:5a:c4:b9:cf:01:1f:6d:5e:05:f2: 35:4b:ec:45:35:13:16:a3:53:40:1c:c6:de:97:b5:e3:55:02: 79:b4:01:d1:5c:55:d8:1e:82:2a:a7:a2:6f:e4:04:6b:dc:98: 43:d3:12:d5:fc:bd:07:29:54:5a:19:f3:2e:ea:57:ca:bd:87: 76:7a:05:65:54:0c:cf:e2:ad:16:28:65:7c:a3:e3:60:9a:c5: 43:fa:2f:32:54:00:30:83:27:bb:61:59:6b:d9:ab:36:f0:1e: 1f:b3:f5:bc:28:d3:06:95:33:4d:c5:f5:3b:d5:94:7b:23:11: dd:0e:90:99:88:9a:4b:18:18:9d:c0:4c:f4:a2:5f:9d:f3:1d: a5:39:87:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRcKmLP2xptTwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk M2NkNDlkN2YtZDNlOC00MDhlLWE0MDUtZmIwZGRkZWVhOGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uNiOL2ZzrFWyzSxxyuxEqkdx+X8QPl7iLoB MYDFylZf7C5C3sffYQBihgO+gg0/4wPqsD1LXVsb5CLVFhojbk0T73zSLkDqv/9x abSrTpngVmKhszzsxiuLOLbWlCx52OUmjO+1AplZLrrt1nZXYTC8iJhR5Ect83sN tp3ZtqSv75zH5Rzw3EKvx/AvSez8aJExkiWjG7KbeIdf/C7ecdDOdgbAmQjQJes8 k2IOCWcLzylEKw7bmgr/RNJfEQtrHvI8HMea/MBgKffcmIeO0T5hxQaqsrO2GRIN uivx0vwzxE4m6VcPJk2SpqhajrYZG4rwpLeq2ztMNErUEmVYsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYh23SCh/UdyZZVdrRGAxRmwmMdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjg1N2E5MzItZmI3Yi0z N2QyLWJmYjItZDMyNjI3YmNiOTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI96YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBddHe6iNnxfwQvLOBFkUDiBjh/xl53TANwPs74OEM5Cn7wIvNm4/X8 uRncNqjImVNGH6uRNBPiIsnK0twM8ql4Ss4bjvjO43WMTy91tdf/5FKwyB7cpy+1 kdMmVBpwG/b6bleIJ/z6HXHeJ/bPPyPGYQYRWsS5zwEfbV4F8jVL7EU1ExajU0Ac xt6XteNVAnm0AdFcVdgegiqnom/kBGvcmEPTEtX8vQcpVFoZ8y7qV8q9h3Z6BWVU DM/irRYoZXyj42CaxUP6LzJUADCDJ7thWWvZqzbwHh+z9bwo0waVM03F9TvVlHsj Ed0OkJmImksYGJ3ATPSiX53zHaU5h2s= -----END CERTIFICATE-----Generated at Mon Apr 28 20:04:35 2025 by rpki-client