$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f19de0ac-8d1b-3d3c-8878-6c11e7cb38e2.roa File: f19de0ac-8d1b-3d3c-8878-6c11e7cb38e2.roa (raw, json) Hash identifier: s+mt+mRvnyQMP8JA4zAY/899CxjCj1udo0X7m3HrPrw= Subject key identifier: 66:47:16:0D:CD:8A:1A:33:27:20:BB:6A:D8:C2:07:A6:3A:3D:A4:FB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7853641B8820B66322A9C00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f19de0ac-8d1b-3d3c-8878-6c11e7cb38e2.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.236.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:36:41:b8:82:0b:66:32:2a:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=ee187e42-675a-48fb-ae69-bff3a3877c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c0:c3:42:74:9a:2c:fc:56:c7:c0:5f:7a:9e: 5c:5f:6c:51:1b:68:ea:4a:c0:f0:e5:b2:1d:e9:62: 98:f9:84:5e:f0:46:91:dd:cd:a1:b0:07:9e:1e:0b: cb:bb:7f:98:6f:ed:39:f7:fc:a9:3a:2c:5f:e2:b9: 40:07:58:a5:91:69:33:a0:b1:05:80:6f:b1:a0:45: 68:4f:75:3a:2e:87:f4:93:96:ad:82:5d:d9:7f:0b: f0:aa:3e:ba:cd:d6:98:03:eb:4f:f4:ff:21:4f:3c: 0a:60:9c:63:00:bd:5c:2f:71:fb:43:6c:0b:bf:78: c6:73:70:e3:f6:a2:24:29:32:1a:96:91:60:5d:1d: 99:c1:98:fb:37:1b:65:c8:71:f4:98:2c:5c:c7:0e: 7c:f5:07:34:33:a9:dc:95:59:d9:18:59:dc:45:e9: 14:20:7c:d9:f9:fc:e9:31:fc:ca:c4:d5:ff:ce:1d: 14:a1:8b:c5:80:79:de:6f:05:d1:b8:53:26:db:e1: 0f:aa:98:b4:5a:e8:c9:bf:37:bb:cc:31:17:ab:65: b6:5b:8b:58:cb:74:63:94:10:6c:3d:6e:3b:d4:a4: 21:0a:64:d9:c1:5d:e6:08:dc:09:0c:e3:bd:a1:64: 48:ac:15:10:da:95:43:33:81:80:07:b1:0d:8c:e2: 3c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:47:16:0D:CD:8A:1A:33:27:20:BB:6A:D8:C2:07:A6:3A:3D:A4:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f19de0ac-8d1b-3d3c-8878-6c11e7cb38e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.236.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:40:cd:bd:28:28:3d:74:77:4d:a6:f5:46:0b:19:f4:9b:67: c5:27:01:87:c4:24:28:f0:54:a3:76:b7:0b:46:e8:d2:19:98: 3a:e7:cf:87:9e:21:37:71:27:5d:22:06:f0:8f:a7:68:33:54: b6:b1:9d:9d:6f:d5:c5:1c:fd:49:c6:2e:a1:7e:20:b4:cc:cc: 87:3f:5a:ad:50:e7:9c:9a:a7:3c:38:53:d3:b4:90:f8:1a:c7: dd:b8:73:5c:42:ef:e8:c3:e9:6b:5e:e3:bf:a9:db:e2:24:68: 1c:33:74:0e:46:1a:b5:e3:e6:eb:88:7e:f5:6d:d9:41:42:59: 47:2e:ac:d5:e5:4e:1f:fc:25:30:71:7a:13:40:36:c6:b7:00: 2b:bb:ec:9d:7a:04:87:19:71:a2:be:65:82:51:76:a8:ef:01: 60:57:88:37:e6:16:14:43:6b:3c:87:e2:09:f4:bd:57:8c:4d: 58:0f:c1:97:e4:be:7f:0b:4b:fd:09:0a:0b:47:d6:00:ae:69: bd:74:da:d8:fc:94:60:4d:3c:8b:44:01:56:44:9a:02:c1:0e: 7a:26:6e:62:2f:87:90:83:c8:97:45:4f:de:d8:7b:36:58:22: 90:da:a1:e5:68:59:e9:9b:c0:c6:87:9f:58:a8:14:3f:cc:42: da:ec:21:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTZBuIILZjIqnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZWUxODdlNDItNjc1YS00OGZiLWFlNjktYmZmM2EzODc3Yzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcDDQnSaLPxWx8Bfep5cX2xRG2jqSsDw5bId 6WKY+YRe8EaR3c2hsAeeHgvLu3+Yb+059/ypOixf4rlAB1ilkWkzoLEFgG+xoEVo T3U6Lof0k5atgl3Zfwvwqj66zdaYA+tP9P8hTzwKYJxjAL1cL3H7Q2wLv3jGc3Dj 9qIkKTIalpFgXR2ZwZj7NxtlyHH0mCxcxw589Qc0M6nclVnZGFncRekUIHzZ+fzp MfzKxNX/zh0UoYvFgHnebwXRuFMm2+EPqpi0WujJvze7zDEXq2W2W4tYy3RjlBBs PW471KQhCmTZwV3mCNwJDOO9oWRIrBUQ2pVDM4GAB7ENjOI8LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZHFg3NihozJyC7atjCB6Y6PaT7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjE5ZGUwYWMtOGQxYi0z ZDNjLTg4NzgtNmMxMWU3Y2IzOGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI+wAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdAzb0oKD10d02m9UYLGfSbZ8UnAYfEJCjwVKN2twtG6NIZmDrnz4ee ITdxJ10iBvCPp2gzVLaxnZ1v1cUc/UnGLqF+ILTMzIc/Wq1Q55yapzw4U9O0kPga x924c1xC7+jD6Wte47+p2+IkaBwzdA5GGrXj5uuIfvVt2UFCWUcurNXlTh/8JTBx ehNANsa3ACu77J16BIcZcaK+ZYJRdqjvAWBXiDfmFhRDazyH4gn0vVeMTVgPwZfk vn8LS/0JCgtH1gCuab102tj8lGBNPItEAVZEmgLBDnombmIvh5CDyJdFT97YezZY IpDaoeVoWembwMaHn1ioFD/MQtrsIdI= -----END CERTIFICATE-----Generated at Sun Jun 15 04:59:35 2025 by rpki-client