$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/89456874-8985-397a-9b6d-53996e8fd57a.roa File: 89456874-8985-397a-9b6d-53996e8fd57a.roa (raw, json) Hash identifier: YAOWO61a0JTWqoxwaXlUDGNUJ6ZHE/Sp/q3vgVBVK48= Subject key identifier: 8E:69:8D:B0:8E:5F:2A:BA:BA:4F:3E:3F:BF:6D:66:DD:E7:82:98:CD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7850AB4DA77EF0013657D80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/89456874-8985-397a-9b6d-53996e8fd57a.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.223.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:0a:b4:da:77:ef:00:13:65:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=10443966-af87-4eab-a6d8-6b67d11e02c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:de:d5:ce:17:40:62:ae:2a:79:87:18:1e:32: 1f:d1:64:b0:f8:3c:d3:6b:a6:fb:b6:a2:fe:90:11: ae:54:54:9c:cb:c3:c6:f9:a3:06:61:16:6f:25:55: 5d:08:01:45:16:41:75:67:20:1d:5f:2f:53:2b:ba: 7f:62:c7:3f:f7:c8:cb:f2:f2:8c:f5:83:54:c3:fa: b6:a2:c4:c6:af:a2:f8:dd:1b:53:fa:e9:c2:21:7c: 3f:5b:79:15:d9:a0:d4:6c:b1:6f:f0:b3:5c:2a:77: 3b:8e:8d:80:fc:cf:e4:4b:6f:62:79:a4:4a:a1:8d: ee:59:18:75:6e:c3:1e:b1:20:a6:4c:39:85:96:01: 41:65:db:bb:3d:78:43:28:3a:ee:8e:2f:f1:0b:a3: e5:38:c6:a4:72:90:35:34:96:a8:d1:93:30:60:25: 06:49:f6:27:2f:5e:52:69:d8:67:f6:64:49:35:ee: d3:c8:bb:cf:f7:48:ca:66:e4:48:c6:1b:d8:a5:96: b0:05:9d:44:e7:12:a8:2e:cf:51:f9:bf:40:c6:7a: f0:f3:0c:33:1c:1f:73:cc:db:fa:61:26:35:c2:1a: 3d:e5:21:32:c7:7b:34:80:ca:5b:ab:09:b5:18:c1: a5:5c:aa:f4:ea:22:05:1c:a2:9d:c1:7d:b7:bc:c8: 3a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:69:8D:B0:8E:5F:2A:BA:BA:4F:3E:3F:BF:6D:66:DD:E7:82:98:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/89456874-8985-397a-9b6d-53996e8fd57a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.223.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:e7:5a:10:27:3d:94:89:6e:8a:79:52:fa:c8:c5:77:fa:1a: 24:98:a4:a2:d3:d9:4e:e9:93:1f:ef:9e:3c:b1:0f:93:5c:bd: fc:d3:0f:c9:d4:0c:03:dd:e5:03:11:ce:90:d3:bf:f7:14:91: 7e:ef:c4:ae:ea:ba:0b:9b:c9:06:09:43:9b:1b:39:31:79:64: 09:1f:ab:e3:37:d1:65:59:60:71:62:82:a6:89:d0:c7:52:2c: 9f:00:bb:ae:9d:31:6e:ed:07:9e:17:f5:9d:1f:a7:ad:f8:cf: b2:46:76:22:f4:9f:df:a7:a9:7a:f2:2b:a5:ee:7b:30:e0:73: 0c:6b:cc:eb:0d:37:58:b2:24:72:ac:3d:53:e4:ae:26:a7:12: 9a:bf:d0:7d:a1:04:54:3a:61:ef:40:4b:34:19:c4:fd:e5:af: 99:9f:fa:d6:cc:d7:ef:75:77:83:e9:fd:ef:e1:6d:3f:dd:c5: 40:4c:b4:b6:8c:5e:78:c4:c1:74:fc:1c:77:64:fe:ca:08:0c: a9:d3:31:d5:c3:85:f1:a9:72:9f:bc:93:85:6f:05:f2:6f:15: b2:ec:0d:a9:a8:c8:5a:54:a8:88:6a:7e:1b:9b:6b:0a:d8:02: 2c:bf:8e:86:7a:ab:df:48:a7:80:5c:f0:39:5e:57:b5:c2:2d: f0:81:f9:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQq02nfvABNlfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MTA0NDM5NjYtYWY4Ny00ZWFiLWE2ZDgtNmI2N2QxMWUwMmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN7VzhdAYq4qeYcYHjIf0WSw+DzTa6b7tqL+ kBGuVFScy8PG+aMGYRZvJVVdCAFFFkF1ZyAdXy9TK7p/Ysc/98jL8vKM9YNUw/q2 osTGr6L43RtT+unCIXw/W3kV2aDUbLFv8LNcKnc7jo2A/M/kS29ieaRKoY3uWRh1 bsMesSCmTDmFlgFBZdu7PXhDKDruji/xC6PlOMakcpA1NJao0ZMwYCUGSfYnL15S adhn9mRJNe7TyLvP90jKZuRIxhvYpZawBZ1E5xKoLs9R+b9Axnrw8wwzHB9zzNv6 YSY1who95SEyx3s0gMpbqwm1GMGlXKr06iIFHKKdwX23vMg6IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5pjbCOXyq6uk8+P79tZt3ngpjNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODk0NTY4NzQtODk4NS0z OTdhLTliNmQtNTM5OTZlOGZkNTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI98gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHnWhAnPZSJbop5UvrIxXf6GiSYpKLT2U7pkx/vnjyxD5NcvfzTD8nU DAPd5QMRzpDTv/cUkX7vxK7qugubyQYJQ5sbOTF5ZAkfq+M30WVZYHFigqaJ0MdS LJ8Au66dMW7tB54X9Z0fp634z7JGdiL0n9+nqXryK6XuezDgcwxrzOsNN1iyJHKs PVPkrianEpq/0H2hBFQ6Ye9ASzQZxP3lr5mf+tbM1+91d4Pp/e/hbT/dxUBMtLaM XnjEwXT8HHdk/soIDKnTMdXDhfGpcp+8k4VvBfJvFbLsDamoyFpUqIhqfhubawrY Aiy/joZ6q99Ip4Bc8DleV7XCLfCB+cg= -----END CERTIFICATE-----Generated at Sat Apr 26 16:35:16 2025 by rpki-client