$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfdf5b71-e803-3cb8-a3d8-7a845fea49e7.roa File: cfdf5b71-e803-3cb8-a3d8-7a845fea49e7.roa (raw, json) Hash identifier: yetBsqGWAZsG4YWlH1y4xUGyiUeFflLXuxBjE5OPWXI= Subject key identifier: 2F:B9:6A:F5:07:BD:65:3A:89:52:13:93:E9:8B:E2:D3:67:5C:73:25 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78527F4E0B60DD6CF55EC00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfdf5b71-e803-3cb8-a3d8-7a845fea49e7.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.222.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:27:f4:e0:b6:0d:d6:cf:55:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=2c0e3125-c6b5-4615-813a-a80473a1bd1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7f:d9:1e:05:a1:bb:5a:27:8a:6a:b0:52:27: 42:3c:bc:65:3b:16:64:a3:93:40:ae:34:5e:49:41: e0:99:39:ba:4b:81:07:fa:6a:08:bc:b2:97:45:f7: f7:b9:2e:ce:a3:bb:f0:1e:27:47:ef:3b:14:f4:b7: a1:27:6a:ac:6c:ce:f4:ce:2e:8c:e0:c3:14:71:44: 82:7c:b6:f7:af:7f:9f:11:c5:a0:9f:49:d4:09:f3: b6:13:d3:cd:24:f9:35:85:ed:90:df:02:ed:41:71: 30:1d:e2:20:ff:43:e8:2c:e0:8a:c7:10:4f:c4:84: ed:92:42:ea:cf:cc:ca:8a:64:4c:e9:c9:25:53:e8: 90:60:9d:7c:4f:34:76:b9:32:69:cb:74:0c:2b:06: d7:a0:10:36:fd:c8:27:f5:c0:33:24:1e:22:85:33: f9:a5:f7:c8:08:40:0e:44:06:96:7c:62:f1:b2:06: 9b:90:20:f2:9d:88:db:85:57:1c:50:84:c4:17:f9: af:30:5c:99:a7:08:31:21:a4:85:4a:3c:f5:63:a9: d8:3b:81:28:f2:5e:4e:0c:db:ba:15:a1:48:5c:bb: 71:2d:43:8f:39:f4:66:a3:6a:61:09:b7:0e:2a:e9: e6:4e:1b:1e:fd:b3:95:c0:80:f3:2b:e0:39:5e:94: b9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B9:6A:F5:07:BD:65:3A:89:52:13:93:E9:8B:E2:D3:67:5C:73:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfdf5b71-e803-3cb8-a3d8-7a845fea49e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.222.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:33:66:b2:a8:06:19:18:e2:c3:5b:ab:50:d1:26:40:ce:ed: dc:4f:45:ee:ed:57:91:f0:fb:d8:25:6b:4e:f4:fe:76:27:2d: 0e:69:74:37:55:54:34:a6:99:81:36:3e:1a:a5:41:b0:6c:4a: 9d:29:c3:e4:ce:9b:63:2b:ff:2f:ca:d9:79:d2:13:0f:84:9a: f8:b4:19:57:70:7e:31:1d:83:d0:91:4d:04:66:32:f4:92:97: 69:4a:62:a2:71:91:b8:f8:52:8d:79:c6:09:b2:01:d2:ea:88: 34:51:e6:d4:bf:f0:c7:26:d9:9c:26:7f:c4:80:22:00:a9:57: 92:64:e8:40:f5:97:81:1e:ce:0f:6a:b5:6a:19:85:53:d2:40: e5:b4:58:d1:cb:27:a8:73:a9:b4:c9:f9:ff:f1:70:90:b6:22: 40:13:9b:6a:ca:0d:df:78:3a:ca:88:64:fa:fe:64:31:4a:81: 1f:18:39:b3:7e:f8:9b:51:46:6b:2e:15:a6:f9:31:9a:50:ee: b8:f6:ed:b1:69:d9:41:cc:72:e0:98:a4:ae:5b:58:8c:13:a5: 85:21:7a:c3:e7:03:19:08:eb:36:ee:d3:2a:51:88:f6:35:61: ff:28:55:7f:14:a0:d1:c3:2b:0d:2a:0c:1f:be:d9:c4:48:42: 19:0f:07:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhSf04LYN1s9V7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MmMwZTMxMjUtYzZiNS00NjE1LTgxM2EtYTgwNDczYTFiZDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH/ZHgWhu1onimqwUidCPLxlOxZko5NArjRe SUHgmTm6S4EH+moIvLKXRff3uS7Oo7vwHidH7zsU9LehJ2qsbM70zi6M4MMUcUSC fLb3r3+fEcWgn0nUCfO2E9PNJPk1he2Q3wLtQXEwHeIg/0PoLOCKxxBPxITtkkLq z8zKimRM6cklU+iQYJ18TzR2uTJpy3QMKwbXoBA2/cgn9cAzJB4ihTP5pffICEAO RAaWfGLxsgabkCDynYjbhVccUITEF/mvMFyZpwgxIaSFSjz1Y6nYO4Eo8l5ODNu6 FaFIXLtxLUOPOfRmo2phCbcOKunmThse/bOVwIDzK+A5XpS5VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+5avUHvWU6iVITk+mL4tNnXHMlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2ZkZjViNzEtZTgwMy0z Y2I4LWEzZDgtN2E4NDVmZWE0OWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI97wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkzZrKoBhkY4sNbq1DRJkDO7dxPRe7tV5Hw+9gla070/nYnLQ5pdDdV VDSmmYE2PhqlQbBsSp0pw+TOm2Mr/y/K2XnSEw+Emvi0GVdwfjEdg9CRTQRmMvSS l2lKYqJxkbj4Uo15xgmyAdLqiDRR5tS/8Mcm2Zwmf8SAIgCpV5Jk6ED1l4Eezg9q tWoZhVPSQOW0WNHLJ6hzqbTJ+f/xcJC2IkATm2rKDd94OsqIZPr+ZDFKgR8YObN+ +JtRRmsuFab5MZpQ7rj27bFp2UHMcuCYpK5bWIwTpYUhesPnAxkI6zbu0ypRiPY1 Yf8oVX8UoNHDKw0qDB++2cRIQhkPB38= -----END CERTIFICATE-----Generated at Sat Apr 26 19:07:53 2025 by rpki-client