$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/71abce45-4cf9-3eb5-9b66-3a35030b7d90.roa File: 71abce45-4cf9-3eb5-9b66-3a35030b7d90.roa (raw, json) Hash identifier: im/NrSY6BxZ61ZO5kPpqLP5KHYzJjKNL85VVhzQrS5g= Subject key identifier: 76:97:F5:51:EF:E9:7F:AD:B2:6C:4E:66:46:A4:70:B5:42:4F:BC:F0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784D24D6DE64AA0E8CFBB80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/71abce45-4cf9-3eb5-9b66-3a35030b7d90.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.227.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:d2:4d:6d:e6:4a:a0:e8:cf:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=26c8caa1-7d50-4b80-b778-fe6057d96677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8a:b5:ca:ec:0c:11:df:0b:a8:f4:ec:4d:ba: c7:02:d0:20:f4:d5:31:a9:68:07:13:30:fd:3b:9a: 7b:30:22:72:cc:79:b7:8f:a1:c1:6e:f2:f6:ed:e1: 1b:d5:eb:61:31:73:ee:05:b5:20:50:3a:c8:61:be: 09:f4:50:69:ee:d8:c9:fa:80:4d:01:32:89:d9:4a: 22:91:f2:30:32:eb:83:f5:60:31:85:4b:84:5f:45: 31:1b:04:61:fb:bf:a3:98:5b:e6:5f:76:9c:74:70: bc:1c:c4:85:e5:03:c3:6c:61:99:82:9b:b1:d7:5b: 1b:ce:ea:7e:28:e0:47:04:25:14:ee:3c:ae:e3:8c: fa:52:a8:5a:c5:f2:0d:81:7e:20:29:b9:54:8c:41: d7:26:dc:02:46:ba:5e:a2:63:01:42:8b:58:a9:53: 3a:1e:c2:73:96:78:7f:80:76:32:5a:41:3e:03:46: af:f1:f8:c3:9b:61:cf:fc:2a:d9:df:dc:54:94:03: 2c:62:36:34:38:05:38:49:89:3f:6a:6e:a0:a8:55: 78:94:aa:7b:41:f8:8f:56:5b:93:1f:4a:af:b7:f8: b1:a1:31:6c:3f:46:40:41:bb:e6:70:43:c8:1e:2f: 33:67:1e:b6:13:58:4e:fd:cc:35:27:b8:01:0e:c9: 86:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:97:F5:51:EF:E9:7F:AD:B2:6C:4E:66:46:A4:70:B5:42:4F:BC:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/71abce45-4cf9-3eb5-9b66-3a35030b7d90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.227.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:2d:50:36:e9:01:0c:98:08:6c:c3:cf:09:e2:2f:f0:88:df: 62:c4:61:72:0d:f9:b4:63:ac:4c:10:fa:2c:52:32:f6:b1:fa: 4e:4b:c6:36:2d:a3:11:92:a1:33:0e:3a:e1:17:15:32:95:da: 22:b2:87:dc:59:49:3a:83:78:67:5d:db:e5:b4:35:6b:fb:8b: 8c:55:31:b4:43:e5:74:9b:f5:23:00:96:71:31:24:eb:4e:99: b4:0c:17:24:94:d1:20:07:4d:6f:76:79:1a:fc:61:8d:a5:98: ad:87:d7:ec:7a:41:32:5d:f9:10:3b:78:ec:2b:89:1f:c4:38: 8b:ed:9f:7d:e8:44:18:1a:9c:eb:f9:71:4f:0c:cd:c2:46:9f: 68:07:e3:7a:c4:a6:2b:de:69:4f:63:1e:28:6b:41:f3:2e:9f: 2c:59:a0:d4:5d:60:62:ce:ca:03:24:cf:c3:ad:92:b0:fa:0b: d9:87:b4:76:b0:f8:22:09:1c:50:91:77:ac:4a:0f:20:97:e5: 75:e0:32:1d:01:32:d4:0f:56:17:a4:0f:87:fc:ed:00:df:34: a2:fa:1d:9d:d4:28:b7:f2:a2:fa:43:53:0e:ad:a1:8f:dd:1f: b4:90:bf:84:20:05:ed:55:44:36:7f:7d:3c:5b:16:43:7b:de: 59:58:84:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNJNbeZKoOjPu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MjZjOGNhYTEtN2Q1MC00YjgwLWI3NzgtZmU2MDU3ZDk2Njc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYq1yuwMEd8LqPTsTbrHAtAg9NUxqWgHEzD9 O5p7MCJyzHm3j6HBbvL27eEb1ethMXPuBbUgUDrIYb4J9FBp7tjJ+oBNATKJ2Uoi kfIwMuuD9WAxhUuEX0UxGwRh+7+jmFvmX3acdHC8HMSF5QPDbGGZgpux11sbzup+ KOBHBCUU7jyu44z6UqhaxfINgX4gKblUjEHXJtwCRrpeomMBQotYqVM6HsJzlnh/ gHYyWkE+A0av8fjDm2HP/CrZ39xUlAMsYjY0OAU4SYk/am6gqFV4lKp7QfiPVluT H0qvt/ixoTFsP0ZAQbvmcEPIHi8zZx62E1hO/cw1J7gBDsmGDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaX9VHv6X+tsmxOZkakcLVCT7zwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzFhYmNlNDUtNGNmOS0z ZWI1LTliNjYtM2EzNTAzMGI3ZDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+OAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0tUDbpAQyYCGzDzwniL/CI32LEYXIN+bRjrEwQ+ixSMvax+k5LxjYt oxGSoTMOOuEXFTKV2iKyh9xZSTqDeGdd2+W0NWv7i4xVMbRD5XSb9SMAlnExJOtO mbQMFySU0SAHTW92eRr8YY2lmK2H1+x6QTJd+RA7eOwriR/EOIvtn33oRBganOv5 cU8MzcJGn2gH43rEpiveaU9jHihrQfMunyxZoNRdYGLOygMkz8OtkrD6C9mHtHaw +CIJHFCRd6xKDyCX5XXgMh0BMtQPVhekD4f87QDfNKL6HZ3UKLfyovpDUw6toY/d H7SQv4QgBe1VRDZ/fTxbFkN73llYhOY= -----END CERTIFICATE-----Generated at Sun Apr 27 09:52:51 2025 by rpki-client