$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d0db29bb-78cc-357a-97c2-0eb39f740b03.roa File: d0db29bb-78cc-357a-97c2-0eb39f740b03.roa (raw, json) Hash identifier: KCpeQtTn/l6o1Kp9JvU+TZDmi0CCwigrF13UINZn2D4= Subject key identifier: 2B:FE:39:1A:BC:B3:A8:1D:2F:0C:35:71:D3:F0:2F:7D:D6:3A:EA:EF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784CFF18E03677EDB4AA180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d0db29bb-78cc-357a-97c2-0eb39f740b03.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 35.216.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:cf:f1:8e:03:67:7e:db:4a:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=a6956560-19f9-4c02-b7a0-9109642874b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:25:57:95:b5:25:95:32:a0:db:80:7d:06:c2: 2b:c8:50:be:fe:72:f4:46:86:53:58:36:0f:6b:5a: 01:f9:d5:05:1a:a6:a8:d6:80:00:40:1f:30:11:30: dc:66:31:7d:53:7f:dd:95:9c:17:4d:62:4b:77:79: 5c:2b:fe:8a:7c:86:74:fe:dc:cd:b5:3c:f9:b5:49: b9:3c:2a:23:bc:82:4c:ad:23:17:34:ac:03:10:f2: 85:c9:10:d1:f1:6f:a0:a9:e9:08:7b:9b:45:5a:1d: 16:bd:94:88:a9:a8:1f:c7:e0:f0:ef:35:2f:4d:bd: e7:25:d1:1e:9c:6e:e3:b8:23:b9:b2:db:18:b9:69: c7:3d:95:ae:1b:be:6e:b9:03:47:d4:8c:61:fe:ce: 82:2e:d9:3c:ab:00:82:ab:d1:68:05:0f:98:71:26: 8d:16:74:42:f4:d0:c6:e0:39:2f:2b:3a:a8:f3:aa: b1:ac:97:dd:dc:af:ec:e9:cb:fb:bb:10:11:3d:9b: 94:77:c2:55:92:19:70:d0:c5:ca:ee:f8:92:80:0e: 01:c9:87:b5:da:45:b9:d5:c6:87:42:3f:10:27:22: 94:43:9c:29:08:d8:df:7a:85:b3:f2:81:84:a6:33: ed:5e:5c:92:24:24:00:dc:56:62:97:02:a2:da:c2: dd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:FE:39:1A:BC:B3:A8:1D:2F:0C:35:71:D3:F0:2F:7D:D6:3A:EA:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d0db29bb-78cc-357a-97c2-0eb39f740b03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.216.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:d3:42:40:49:09:a1:39:30:68:1a:df:b0:a7:46:98:47:96: f1:d0:e0:30:0a:bb:64:f1:7e:7c:c0:64:f2:87:e6:28:cd:52: d7:30:b3:7e:2a:73:5d:ae:20:42:df:59:38:6e:4a:46:6f:79: 1e:de:0c:a7:28:d4:97:65:76:92:6b:09:cc:fd:a5:cb:f7:98: 94:03:4d:a4:13:59:c0:a6:e9:86:ec:f2:7e:f2:60:cc:15:34: 50:f6:a2:9c:40:61:89:8c:61:01:4d:43:88:1d:c6:e8:aa:3d: 99:bd:93:3c:c5:c1:1f:de:ef:17:2a:a4:53:54:e5:05:69:7d: c3:32:b5:ef:e9:74:95:53:ac:00:58:2b:d0:b5:05:c6:93:af: 99:44:72:68:25:9d:12:32:07:46:63:05:17:69:8f:89:77:51: 73:4b:c0:7d:84:18:4e:de:53:b9:21:76:64:a0:f1:3c:fe:08: 76:49:3d:0a:cc:3a:ef:3b:a7:71:c4:c1:f9:98:ec:2d:20:87: 17:62:fe:89:50:e1:c6:9a:f3:d0:d0:49:0d:a2:af:92:df:cb: 80:4a:a2:6e:8b:29:80:54:10:58:8c:7e:8c:e9:98:24:71:34: 68:3d:7e:63:3c:01:be:45:3a:7f:ca:26:89:49:bf:0e:89:03: 24:30:4a:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhM/xjgNnfttKoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YTY5NTY1NjAtMTlmOS00YzAyLWI3YTAtOTEwOTY0Mjg3NGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiVXlbUllTKg24B9BsIryFC+/nL0RoZTWDYP a1oB+dUFGqao1oAAQB8wETDcZjF9U3/dlZwXTWJLd3lcK/6KfIZ0/tzNtTz5tUm5 PCojvIJMrSMXNKwDEPKFyRDR8W+gqekIe5tFWh0WvZSIqagfx+Dw7zUvTb3nJdEe nG7juCO5stsYuWnHPZWuG75uuQNH1Ixh/s6CLtk8qwCCq9FoBQ+YcSaNFnRC9NDG 4DkvKzqo86qxrJfd3K/s6cv7uxARPZuUd8JVkhlw0MXK7viSgA4ByYe12kW51caH Qj8QJyKUQ5wpCNjfeoWz8oGEpjPtXlySJCQA3FZilwKi2sLddQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCv+ORq8s6gdLww1cdPwL33WOurvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDBkYjI5YmItNzhjYy0z NTdhLTk3YzItMGViMzlmNzQwYjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI9iAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3TQkBJCaE5MGga37CnRphHlvHQ4DAKu2TxfnzAZPKH5ijNUtcws34q c12uIELfWThuSkZveR7eDKco1JdldpJrCcz9pcv3mJQDTaQTWcCm6Ybs8n7yYMwV NFD2opxAYYmMYQFNQ4gdxuiqPZm9kzzFwR/e7xcqpFNU5QVpfcMyte/pdJVTrABY K9C1BcaTr5lEcmglnRIyB0ZjBRdpj4l3UXNLwH2EGE7eU7khdmSg8Tz+CHZJPQrM Ou87p3HEwfmY7C0ghxdi/olQ4caa89DQSQ2ir5Lfy4BKom6LKYBUEFiMfozpmCRx NGg9fmM8Ab5FOn/KJolJvw6JAyQwSmQ= -----END CERTIFICATE-----Generated at Sun Apr 27 10:56:49 2025 by rpki-client