$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5ec7d68-0c35-3ed2-94fc-b47c208abb7e.roa File: a5ec7d68-0c35-3ed2-94fc-b47c208abb7e.roa (raw, json) Hash identifier: KuoABFG0IQlKspTLYPn/P4SuZbe5Q7xOw5Jx2Yp60o0= Subject key identifier: 4C:0C:E7:FE:C4:35:1D:7E:51:25:B6:42:62:4E:F0:4A:0C:E1:CE:F1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7851FA3876DAFAC53020880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5ec7d68-0c35-3ed2-94fc-b47c208abb7e.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 35.217.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:1f:a3:87:6d:af:ac:53:02:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=8b7c1578-66bb-4b91-b711-eaddf62061d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c1:12:fb:17:a5:90:85:e9:0b:45:b7:d4:b5: ca:2b:07:da:d6:49:17:bd:ea:3d:02:eb:d0:a7:7c: bb:d7:99:18:5f:67:9e:19:9e:0b:0f:46:4e:a1:15: 22:16:d8:ec:fb:bd:96:28:fb:db:82:65:e5:df:8c: 35:de:9e:af:0e:a9:41:ca:4b:30:88:bd:75:8f:81: 3b:fa:20:ca:37:11:da:ac:a3:97:b8:4f:42:e1:89: 90:b4:78:17:b4:14:69:9b:81:8c:65:b8:24:ff:c2: ff:97:e3:e1:4d:e3:82:77:b3:36:ae:95:d5:b9:68: 1a:88:60:4d:ae:43:a6:94:65:e0:61:17:4d:1c:b8: ff:e9:34:65:4e:c1:4d:09:37:35:51:16:d6:71:70: 9a:1a:2e:f7:05:a9:48:0d:03:d2:31:fa:ab:6d:19: cf:fc:54:50:bf:dc:f2:73:b7:ab:9e:52:71:15:0a: bc:f9:8d:8e:ea:7d:2e:6b:c9:be:0f:99:36:56:0f: 06:ce:a5:b1:93:c0:e4:3d:32:9a:aa:cd:2a:85:a7: b4:ae:ad:c5:a0:e9:0c:8f:45:fa:1a:88:1a:3e:d6: ea:dc:be:83:8e:27:d3:4a:8a:98:8e:40:ec:15:d7: 85:8d:a7:12:e2:c3:90:e2:56:7b:12:d6:2b:a9:6e: 57:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0C:E7:FE:C4:35:1D:7E:51:25:B6:42:62:4E:F0:4A:0C:E1:CE:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5ec7d68-0c35-3ed2-94fc-b47c208abb7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.217.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:c1:1f:de:75:39:87:94:b8:c9:ae:c2:3f:c6:4d:db:34:31: 4a:cb:77:ca:5b:26:d6:4f:f9:3a:ca:bd:a5:29:37:2f:e6:15: 7c:93:f7:53:a1:6f:60:a1:04:eb:70:1d:d8:94:1c:19:5c:47: 33:b9:9f:56:c2:ac:d7:e2:d0:81:78:fb:93:3b:d5:3a:f2:49: 5c:05:d3:43:da:0e:77:b3:eb:fa:b9:6f:da:dc:2d:79:e4:04: b0:dc:19:47:69:8c:a2:36:02:b6:cb:d5:14:03:b7:10:bd:6e: 0b:f6:52:3f:71:45:a2:d6:59:56:39:fc:9a:45:3c:74:70:04: fd:90:e6:1a:fb:ca:24:f7:c0:4c:95:c4:49:fe:ff:7b:95:84: 24:22:21:bd:92:b3:46:43:4d:fb:48:bd:1e:f1:6d:67:3b:59: 5c:f5:f3:48:02:14:4a:9f:47:30:0d:ea:95:35:f6:cb:6e:55: 8c:78:69:55:10:e9:cf:2a:87:5a:08:3e:24:60:1a:46:d5:d1: aa:81:16:ea:d0:15:34:70:09:e6:2b:8c:0a:4e:80:12:05:2c: 19:ff:43:c3:27:85:2d:c2:f7:13:52:77:cb:c8:40:a1:9b:1b: 0d:25:c1:02:79:e2:49:15:9d:1c:46:e8:21:c9:d9:ea:7d:4d: 0c:26:7f:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhR+jh22vrFMCCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OGI3YzE1NzgtNjZiYi00YjkxLWI3MTEtZWFkZGY2MjA2MWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sES+xelkIXpC0W31LXKKwfa1kkXveo9AuvQ p3y715kYX2eeGZ4LD0ZOoRUiFtjs+72WKPvbgmXl34w13p6vDqlBykswiL11j4E7 +iDKNxHarKOXuE9C4YmQtHgXtBRpm4GMZbgk/8L/l+PhTeOCd7M2rpXVuWgaiGBN rkOmlGXgYRdNHLj/6TRlTsFNCTc1URbWcXCaGi73BalIDQPSMfqrbRnP/FRQv9zy c7ernlJxFQq8+Y2O6n0ua8m+D5k2Vg8GzqWxk8DkPTKaqs0qhae0rq3FoOkMj0X6 GogaPtbq3L6DjifTSoqYjkDsFdeFjacS4sOQ4lZ7EtYrqW5XYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwM5/7ENR1+USW2QmJO8EoM4c7xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTVlYzdkNjgtMGMzNS0z ZWQyLTk0ZmMtYjQ3YzIwOGFiYjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI9mAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXBH951OYeUuMmuwj/GTds0MUrLd8pbJtZP+TrKvaUpNy/mFXyT91Oh b2ChBOtwHdiUHBlcRzO5n1bCrNfi0IF4+5M71TrySVwF00PaDnez6/q5b9rcLXnk BLDcGUdpjKI2ArbL1RQDtxC9bgv2Uj9xRaLWWVY5/JpFPHRwBP2Q5hr7yiT3wEyV xEn+/3uVhCQiIb2Ss0ZDTftIvR7xbWc7WVz180gCFEqfRzAN6pU19stuVYx4aVUQ 6c8qh1oIPiRgGkbV0aqBFurQFTRwCeYrjApOgBIFLBn/Q8MnhS3C9xNSd8vIQKGb Gw0lwQJ54kkVnRxG6CHJ2ep9TQwmf3M= -----END CERTIFICATE-----Generated at Sun Apr 27 11:24:03 2025 by rpki-client