$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ec93316e-b8e2-38b6-84c8-be1d2331e01b.roa File: ec93316e-b8e2-38b6-84c8-be1d2331e01b.roa (raw, json) Hash identifier: lpImFzz72BHKTFUwGtSWtgzai19bdbYhtfPsMeZtSnE= Subject key identifier: 73:7D:29:F5:98:4A:E7:87:5E:61:C4:9B:72:99:78:C5:71:A4:67:0D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784E48FF95FCDE4F9DE5240 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ec93316e-b8e2-38b6-84c8-be1d2331e01b.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.228.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:e4:8f:f9:5f:cd:e4:f9:de:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=72b65c03-c98b-46df-8283-d76f249013a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d5:03:a9:5f:52:9a:ce:0a:3b:49:2d:a0:67: e4:c0:0a:48:21:9f:45:ce:df:f3:65:10:03:3e:05: 1d:4e:1c:08:d1:4d:40:d6:f5:be:e8:e0:5e:c1:6c: ed:ac:05:8e:ce:e5:04:5f:55:1b:0e:bb:29:63:6e: 75:d9:b9:89:67:93:01:33:ee:39:92:6e:5f:e3:23: 9d:10:13:52:1e:e8:71:03:e5:a5:7a:ef:29:59:24: 83:20:6d:2c:50:b4:b9:d6:86:38:6a:b0:37:e7:d1: 72:20:b6:77:8b:5b:4b:be:c3:b9:68:a2:1d:27:c5: 6b:c1:c2:df:a1:35:63:8f:4a:2b:1c:84:e2:10:af: bc:88:89:42:7e:c3:a5:64:5b:6d:15:8a:bf:2f:76: 5e:1c:23:4b:8a:14:ec:92:a3:9e:21:d6:30:ce:76: c1:e7:71:d8:92:bb:a3:23:cd:a1:ca:7c:d9:cc:b4: fb:4e:b7:21:68:7b:f6:16:8d:09:da:96:06:c4:ae: 24:48:24:f0:0e:a6:46:32:6c:d7:9b:59:4e:db:1c: af:e8:2a:bd:ee:89:53:7b:8c:0b:bb:a4:c6:92:7f: 82:d9:2f:ea:04:19:74:7d:43:b6:04:cd:43:a5:17: be:da:72:5a:5a:19:32:07:cf:3a:a3:a4:f4:b0:aa: 7e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7D:29:F5:98:4A:E7:87:5E:61:C4:9B:72:99:78:C5:71:A4:67:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ec93316e-b8e2-38b6-84c8-be1d2331e01b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.228.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:49:b0:da:fa:e3:40:4f:28:f4:38:67:31:0c:d1:74:7b:34: 3e:a3:ae:e7:78:50:76:06:3a:f1:a4:68:ce:12:a0:e6:61:9a: a3:e6:ec:ce:dd:f2:cb:99:23:06:13:33:b5:a1:c4:28:94:ec: 14:5f:13:26:eb:15:45:bb:5d:78:fb:91:0e:b3:99:72:52:cf: 63:2d:e0:21:0b:68:00:ac:5a:d7:f4:6c:31:c8:7f:20:48:ff: ff:0d:e6:88:d5:5c:dd:a9:f2:86:dc:36:4a:68:72:cd:1f:1d: b5:93:0f:84:20:f2:57:56:8e:2d:dc:b7:b2:3b:89:6f:b9:f5: 75:8a:1a:0e:30:69:7a:95:f8:73:fa:30:2b:8b:64:bc:e1:8d: 8d:c4:ac:02:89:90:87:93:4c:15:89:2e:ef:74:a7:42:d5:76: d2:57:18:7b:d8:0d:3f:36:f2:d6:21:0e:0f:c0:05:2a:f7:38: 9c:4f:c3:79:94:56:34:75:33:63:73:b0:f3:83:70:7c:ea:d5: 8d:f5:7d:00:8d:ad:a7:ee:4e:b6:c0:6b:d2:6c:45:71:7c:7a: 17:e5:f9:60:55:8d:e1:35:61:58:c2:88:3b:a7:26:29:90:93: c7:f6:76:d6:78:34:10:36:58:a3:0b:a0:44:93:d0:79:ee:31: 8f:9b:30:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhOSP+V/N5PneUkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NzJiNjVjMDMtYzk4Yi00NmRmLTgyODMtZDc2ZjI0OTAxM2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9UDqV9Sms4KO0ktoGfkwApIIZ9Fzt/zZRAD PgUdThwI0U1A1vW+6OBewWztrAWOzuUEX1UbDrspY2512bmJZ5MBM+45km5f4yOd EBNSHuhxA+Wleu8pWSSDIG0sULS51oY4arA359FyILZ3i1tLvsO5aKIdJ8VrwcLf oTVjj0orHITiEK+8iIlCfsOlZFttFYq/L3ZeHCNLihTskqOeIdYwznbB53HYkruj I82hynzZzLT7TrchaHv2Fo0J2pYGxK4kSCTwDqZGMmzXm1lO2xyv6Cq97olTe4wL u6TGkn+C2S/qBBl0fUO2BM1DpRe+2nJaWhkyB886o6T0sKp+sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHN9KfWYSueHXmHEm3KZeMVxpGcNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWM5MzMxNmUtYjhlMi0z OGI2LTg0YzgtYmUxZDIzMzFlMDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+QAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpJsNr640BPKPQ4ZzEM0XR7ND6jrud4UHYGOvGkaM4SoOZhmqPm7M7d 8suZIwYTM7WhxCiU7BRfEybrFUW7XXj7kQ6zmXJSz2Mt4CELaACsWtf0bDHIfyBI //8N5ojVXN2p8obcNkpocs0fHbWTD4Qg8ldWji3ct7I7iW+59XWKGg4waXqV+HP6 MCuLZLzhjY3ErAKJkIeTTBWJLu90p0LVdtJXGHvYDT828tYhDg/ABSr3OJxPw3mU VjR1M2NzsPODcHzq1Y31fQCNrafuTrbAa9JsRXF8ehfl+WBVjeE1YVjCiDunJimQ k8f2dtZ4NBA2WKMLoEST0HnuMY+bMCs= -----END CERTIFICATE-----Generated at Sat Apr 26 16:04:59 2025 by rpki-client