$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aeee80c3-d9fa-3825-ba45-f538a281a2fe.roa File: aeee80c3-d9fa-3825-ba45-f538a281a2fe.roa (raw, json) Hash identifier: P7N3rsz7hnIXraLpx3SlMVxOZXY6/87/GXQdCkMKpSQ= Subject key identifier: 44:22:58:3E:78:4C:21:9A:68:EE:D4:B8:38:10:E0:E6:CC:08:3C:DC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78504E6F8328F980E001300 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aeee80c3-d9fa-3825-ba45-f538a281a2fe.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.222.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:04:e6:f8:32:8f:98:0e:00:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=3f85f5ba-0720-42b1-ad57-d74d23eb4f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:35:56:18:c6:96:13:4b:20:17:75:07:2b:1a: 53:4e:51:1c:66:78:24:d9:df:c0:f6:9f:d1:4d:f6: 4b:57:3c:ad:87:08:0f:20:5e:b9:df:b8:5c:4c:cb: ec:f2:a2:a0:ca:61:9c:f8:25:a2:e9:79:4d:60:f2: 5a:9e:61:85:ca:8e:38:d6:c1:db:ab:41:dd:a8:44: 1a:4b:b8:8a:6c:d4:63:71:d4:c3:18:4b:2d:9f:e7: 83:84:11:57:83:4c:e6:27:88:04:02:67:42:05:a8: 40:01:d9:6f:76:d2:be:4f:e9:5c:00:54:91:95:2a: 36:45:ca:27:d6:f9:e7:b7:fd:14:64:5b:e2:0e:47: b0:45:d7:15:04:24:31:a9:1c:3a:20:a4:da:48:ed: 33:b6:21:9e:dc:54:76:ce:a2:66:21:25:97:6f:a1: 65:4c:4a:eb:82:07:ec:24:83:75:f3:26:72:9f:e6: 83:db:96:3c:9f:97:31:c6:df:da:33:9f:db:d3:77: 58:73:0e:cf:b9:25:aa:c4:79:8d:ed:ba:07:18:75: 64:b1:d4:76:6e:0b:1b:00:40:72:3b:d6:dd:43:39: d5:01:ae:c4:20:b9:59:51:26:53:23:ec:10:b0:a0: 21:2e:00:be:f4:5a:c9:cd:df:c4:43:99:c6:c2:77: 5c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:22:58:3E:78:4C:21:9A:68:EE:D4:B8:38:10:E0:E6:CC:08:3C:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aeee80c3-d9fa-3825-ba45-f538a281a2fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.222.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:a2:43:43:d0:18:08:32:54:f9:ad:ca:f5:64:12:e6:f6:4d: 4d:ca:59:98:ef:cf:d2:97:82:2e:3b:ad:85:7d:80:84:83:0b: 3a:49:04:1c:4b:2a:8d:e0:2d:f9:5c:3c:8a:d8:ed:02:d5:c1: 6d:7d:6b:b9:89:64:7f:54:1e:21:8e:91:6c:84:48:1d:d4:8b: 7b:16:ce:2b:dd:a0:1b:75:9b:6e:a3:60:d7:4d:5b:41:9e:49: c7:68:45:2a:2f:24:0d:85:ca:88:57:2a:b6:ca:e4:ac:a8:c6: f9:a3:bb:ba:10:a6:1a:a2:de:f0:51:37:91:f7:d5:7c:cf:77: f8:48:ce:d7:08:5f:cc:5a:85:f5:4b:64:a9:92:a0:3f:5a:02: 72:d2:0a:8f:f6:c5:f5:9f:ae:68:b1:e7:7e:bd:84:21:87:54: a6:63:12:b3:3d:bd:e0:9d:4f:0d:79:8d:cc:f6:54:50:94:4c: ea:e2:74:ac:d2:02:62:34:fa:67:f0:42:ea:3a:4a:dd:d1:14: 8e:7c:27:2b:0b:28:cc:2d:72:d2:9d:ba:fc:af:e3:9a:f9:0d: de:93:8a:ce:a0:de:8b:bb:04:93:18:33:4a:34:65:04:5a:50: 67:57:49:d4:6a:76:05:26:88:b6:7b:85:16:90:e0:43:a2:00: 07:71:04:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQTm+DKPmA4AEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk M2Y4NWY1YmEtMDcyMC00MmIxLWFkNTctZDc0ZDIzZWI0ZjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTVWGMaWE0sgF3UHKxpTTlEcZngk2d/A9p/R TfZLVzythwgPIF6537hcTMvs8qKgymGc+CWi6XlNYPJanmGFyo441sHbq0HdqEQa S7iKbNRjcdTDGEstn+eDhBFXg0zmJ4gEAmdCBahAAdlvdtK+T+lcAFSRlSo2Rcon 1vnnt/0UZFviDkewRdcVBCQxqRw6IKTaSO0ztiGe3FR2zqJmISWXb6FlTErrggfs JIN18yZyn+aD25Y8n5cxxt/aM5/b03dYcw7PuSWqxHmN7boHGHVksdR2bgsbAEBy O9bdQznVAa7EILlZUSZTI+wQsKAhLgC+9FrJzd/EQ5nGwndcGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQiWD54TCGaaO7UuDgQ4ObMCDzcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWVlZTgwYzMtZDlmYS0z ODI1LWJhNDUtZjUzOGEyODFhMmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI97IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6iQ0PQGAgyVPmtyvVkEub2TU3KWZjvz9KXgi47rYV9gISDCzpJBBxL Ko3gLflcPIrY7QLVwW19a7mJZH9UHiGOkWyESB3Ui3sWzivdoBt1m26jYNdNW0Ge ScdoRSovJA2FyohXKrbK5Kyoxvmju7oQphqi3vBRN5H31XzPd/hIztcIX8xahfVL ZKmSoD9aAnLSCo/2xfWfrmix5369hCGHVKZjErM9veCdTw15jcz2VFCUTOridKzS AmI0+mfwQuo6St3RFI58JysLKMwtctKduvyv45r5Dd6Tis6g3ou7BJMYM0o0ZQRa UGdXSdRqdgUmiLZ7hRaQ4EOiAAdxBD0= -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:48 2025 by rpki-client