$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac0125cb-0617-3e6d-85c0-4bef3668a3a8.roa File: ac0125cb-0617-3e6d-85c0-4bef3668a3a8.roa (raw, json) Hash identifier: 1u1jVvSNc0PNW2xEpSavSi471WwXBNRmPlZhki2fGbw= Subject key identifier: 16:5F:74:C5:91:97:92:76:6D:EB:D4:EC:A6:63:EF:93:11:18:41:0F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7850BDCD66647C4A042D500 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac0125cb-0617-3e6d-85c0-4bef3668a3a8.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.221.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:0b:dc:d6:66:47:c4:a0:42:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=54504602-e63a-452c-9b96-e9119136412c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b6:a3:57:d0:fd:ea:b4:f9:8a:38:61:92:a7: e3:01:5e:03:ce:0c:e1:a9:f1:1a:e4:01:dc:02:97: 56:fe:2d:4b:fa:dc:ee:e2:cb:37:be:37:c2:6c:e1: 44:be:1b:68:31:3b:75:cc:d8:39:f6:b9:1f:a6:e8: 1a:00:e2:fc:3b:93:b0:2a:0d:5f:0d:7a:92:3c:32: d9:f5:39:d5:61:33:f2:d2:d6:75:cf:f5:d3:6d:e5: e0:b5:0d:49:0b:7c:86:e4:ee:a8:30:fd:19:b7:b3: 8a:89:d0:e2:8c:8b:d4:19:cb:81:bd:3f:64:82:73: 0e:72:6d:7e:5f:5c:59:ca:12:b2:71:e4:04:0d:50: 1e:ce:a9:4f:5b:a4:86:cc:eb:78:ac:c9:21:4a:91: 3a:f5:c1:b0:99:63:e0:54:b4:14:4d:be:db:ba:82: dd:89:6e:4f:3b:96:8e:6b:46:77:12:55:b8:ae:ed: 4c:37:c9:d0:0a:a9:ee:1c:03:84:2a:98:12:23:7c: 71:1d:e7:26:06:d3:08:bc:ca:d3:e1:46:a0:84:e0: d2:01:c4:b3:82:80:b2:ac:a2:97:86:9a:56:e8:c9: e9:ef:0c:61:bf:a6:8e:a8:fe:12:34:28:6e:d7:8c: e4:21:2b:29:e2:b6:84:d3:c5:6b:3c:fa:ee:00:a7: a7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:5F:74:C5:91:97:92:76:6D:EB:D4:EC:A6:63:EF:93:11:18:41:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac0125cb-0617-3e6d-85c0-4bef3668a3a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.221.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:b8:4a:08:8e:0f:0b:64:bf:d7:15:4c:ae:c8:1f:9f:fa:97: e2:ed:a5:a1:f6:c9:dd:b9:ba:c4:7a:53:58:45:f1:97:41:4f: 56:06:13:ac:11:d0:70:62:e9:a4:3c:c3:83:e9:18:c8:2c:0b: f6:10:3f:99:17:fd:ef:2d:1d:a4:20:be:23:77:72:c0:11:b4: ae:0d:78:b6:ef:81:e8:de:e2:b2:34:59:1c:79:88:ae:1c:37: 3e:4e:e6:84:19:a4:11:31:2c:10:fa:09:81:1e:fa:11:bb:cf: 7f:b0:ab:a1:2e:dd:ac:c8:c8:bd:b3:42:7f:59:89:87:04:73: e8:95:33:73:9f:df:4b:38:0b:04:97:b7:9e:83:21:ad:9b:06: c1:c2:5c:e2:55:ab:47:55:5a:dc:6e:0e:8a:ca:79:ed:9f:c5: 7c:5c:7b:13:cb:50:8c:f7:34:d2:86:ca:f8:2d:4a:1e:86:04: 30:c1:cc:8b:29:e9:63:d3:fd:e3:36:c1:b0:e7:78:d4:b7:81: a9:3a:1b:a9:e4:ca:5b:6e:81:a8:92:a2:f6:4a:d0:0e:80:91: f1:2b:4c:d1:e7:37:f0:89:26:57:5b:48:3c:c7:8f:40:e6:ce: f7:70:3a:b9:1c:7f:d3:51:2d:ab:4f:d2:fe:49:e6:1f:8e:49: bb:0b:2a:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQvc1mZHxKBC1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NTQ1MDQ2MDItZTYzYS00NTJjLTliOTYtZTkxMTkxMzY0MTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbajV9D96rT5ijhhkqfjAV4DzgzhqfEa5AHc ApdW/i1L+tzu4ss3vjfCbOFEvhtoMTt1zNg59rkfpugaAOL8O5OwKg1fDXqSPDLZ 9TnVYTPy0tZ1z/XTbeXgtQ1JC3yG5O6oMP0Zt7OKidDijIvUGcuBvT9kgnMOcm1+ X1xZyhKyceQEDVAezqlPW6SGzOt4rMkhSpE69cGwmWPgVLQUTb7buoLdiW5PO5aO a0Z3ElW4ru1MN8nQCqnuHAOEKpgSI3xxHecmBtMIvMrT4UaghODSAcSzgoCyrKKX hppW6Mnp7wxhv6aOqP4SNChu14zkISsp4raE08VrPPruAKen2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZfdMWRl5J2bevU7KZj75MRGEEPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWMwMTI1Y2ItMDYxNy0z ZTZkLTg1YzAtNGJlZjM2NjhhM2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI90gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABi4SgiODwtkv9cVTK7IH5/6l+LtpaH2yd25usR6U1hF8ZdBT1YGE6wR 0HBi6aQ8w4PpGMgsC/YQP5kX/e8tHaQgviN3csARtK4NeLbvgeje4rI0WRx5iK4c Nz5O5oQZpBExLBD6CYEe+hG7z3+wq6Eu3azIyL2zQn9ZiYcEc+iVM3Of30s4CwSX t56DIa2bBsHCXOJVq0dVWtxuDorKee2fxXxcexPLUIz3NNKGyvgtSh6GBDDBzIsp 6WPT/eM2wbDneNS3gak6G6nkyltugaiSovZK0A6AkfErTNHnN/CJJldbSDzHj0Dm zvdwOrkcf9NRLatP0v5J5h+OSbsLKl0= -----END CERTIFICATE-----Generated at Sun Apr 27 01:11:43 2025 by rpki-client