$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d6e7d38c-4e4c-39f8-a252-333365a09492.roa File: d6e7d38c-4e4c-39f8-a252-333365a09492.roa (raw, json) Hash identifier: D7O1sqiuUzwJWbMCdxRKcPasSVBog5upRftQmEaDenw= Subject key identifier: 5D:C6:FA:33:95:7A:58:50:97:3B:1D:F0:00:63:4D:C9:37:8E:AA:F8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785147DE8F4ED50FA69D700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d6e7d38c-4e4c-39f8-a252-333365a09492.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.223.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:14:7d:e8:f4:ed:50:fa:69:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=957c9819-4778-4bcd-8a9a-71e483d284d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ac:67:12:df:de:d4:9f:00:cc:3d:4a:49:99: b0:3c:ee:b5:0f:76:32:2e:81:e2:ff:ee:06:dd:f3: 47:a3:75:d2:c1:3a:5a:97:57:cd:e7:5f:e8:ed:df: 25:a5:18:c1:5a:0c:30:76:50:06:ab:f1:19:ca:81: 4e:4a:5f:66:f1:60:83:71:44:ba:44:4a:98:b8:30: ac:9e:72:c0:37:53:0c:89:e1:d9:ae:47:bf:fa:c6: f5:bc:63:a1:55:9a:2b:e4:9c:b2:04:a1:55:bf:95: ae:ff:b5:b5:17:ab:0a:2f:aa:b3:d6:77:63:21:21: e3:5a:d3:c7:38:12:56:3c:92:5d:cb:0a:86:51:c2: 34:b9:03:77:93:25:c6:87:ad:ef:41:ac:65:2e:10: c1:30:9f:89:9d:43:98:71:77:ef:cb:85:ff:bf:2b: 5d:61:c7:08:61:4d:d9:3a:9c:2c:64:02:c8:1b:47: 91:07:33:38:d1:6a:f1:c8:f4:cc:fd:fc:79:0d:2d: 6f:9b:c2:63:2a:8b:52:f5:fe:fd:e1:fb:f1:2b:c5: 8c:3b:8c:b9:7f:45:77:a3:8e:83:f6:ad:81:68:83: 91:cb:d8:02:d4:4a:ef:af:e1:17:61:fa:cd:ad:79: cf:6c:40:e7:77:0b:06:58:98:36:e6:64:43:f8:56: 40:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C6:FA:33:95:7A:58:50:97:3B:1D:F0:00:63:4D:C9:37:8E:AA:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d6e7d38c-4e4c-39f8-a252-333365a09492.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.223.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:ba:0f:ac:f8:46:f5:01:5e:c0:3d:64:85:af:c0:3f:e8:16: 64:8f:66:bc:c2:58:b1:15:2c:e6:92:11:9e:ae:a9:ec:2f:fd: 92:40:5c:43:2a:99:8e:6a:b1:6f:59:93:f5:e3:46:17:38:10: 9a:48:63:69:cd:e7:0d:31:f5:d4:02:6a:72:33:b8:fc:57:b1: 32:96:a6:11:28:eb:e1:67:86:0b:9d:07:67:ae:f7:2e:7e:9f: a2:a7:37:3d:fd:80:32:ec:ea:e3:ed:a1:bd:6a:90:36:45:15: a3:89:2f:83:86:8b:30:7f:cf:d8:80:78:a8:49:8c:c6:87:a5: 9c:f3:c3:de:d3:f3:59:f5:ca:5a:ca:39:e2:9d:ee:b5:cd:18: 0c:2a:ba:32:3c:0e:bf:12:52:83:78:b9:a8:a6:a4:00:97:ad: bd:90:e6:ac:0a:86:9e:c2:3d:df:14:3f:f3:97:16:c4:70:1f: 51:57:0a:69:72:ec:a2:27:1c:c1:f1:0c:a1:14:99:35:e2:e5: fc:ec:3f:9b:d6:e1:5e:0e:61:79:24:f4:9b:db:ea:34:53:06: a3:f4:b4:85:7d:c9:1c:2f:2e:8e:fd:f6:c3:2a:45:60:77:b6: 95:ed:84:28:9f:66:ac:06:a8:f0:94:d6:c3:96:dd:e1:e5:97: 28:37:63:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRR96PTtUPpp1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OTU3Yzk4MTktNDc3OC00YmNkLThhOWEtNzFlNDgzZDI4NGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaxnEt/e1J8AzD1KSZmwPO61D3YyLoHi/+4G 3fNHo3XSwTpal1fN51/o7d8lpRjBWgwwdlAGq/EZyoFOSl9m8WCDcUS6REqYuDCs nnLAN1MMieHZrke/+sb1vGOhVZor5JyyBKFVv5Wu/7W1F6sKL6qz1ndjISHjWtPH OBJWPJJdywqGUcI0uQN3kyXGh63vQaxlLhDBMJ+JnUOYcXfvy4X/vytdYccIYU3Z OpwsZALIG0eRBzM40WrxyPTM/fx5DS1vm8JjKotS9f794fvxK8WMO4y5f0V3o46D 9q2BaIORy9gC1Ervr+EXYfrNrXnPbEDndwsGWJg25mRD+FZARQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3G+jOVelhQlzsd8ABjTck3jqr4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDZlN2QzOGMtNGU0Yy0z OWY4LWEyNTItMzMzMzY1YTA5NDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI98AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKa6D6z4RvUBXsA9ZIWvwD/oFmSPZrzCWLEVLOaSEZ6uqewv/ZJAXEMq mY5qsW9Zk/XjRhc4EJpIY2nN5w0x9dQCanIzuPxXsTKWphEo6+FnhgudB2eu9y5+ n6KnNz39gDLs6uPtob1qkDZFFaOJL4OGizB/z9iAeKhJjMaHpZzzw97T81n1ylrK OeKd7rXNGAwqujI8Dr8SUoN4uaimpACXrb2Q5qwKhp7CPd8UP/OXFsRwH1FXCmly 7KInHMHxDKEUmTXi5fzsP5vW4V4OYXkk9Jvb6jRTBqP0tIV9yRwvLo799sMqRWB3 tpXthCifZqwGqPCU1sOW3eHllyg3YwI= -----END CERTIFICATE-----Generated at Sat Apr 26 15:54:41 2025 by rpki-client