$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa271a05-3e69-30ce-83e1-b3b3ab293e3f.roa File: fa271a05-3e69-30ce-83e1-b3b3ab293e3f.roa (raw, json) Hash identifier: xJQ/XLC/RbDjH2FD/vdtZ9fvcU0ZcCEhcwZUrtCUzQc= Subject key identifier: C0:63:79:EB:D3:79:14:4B:CA:27:8D:E9:BF:F2:86:82:FC:B6:53:7F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784F46C50DE7E5BAD5EBEC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa271a05-3e69-30ce-83e1-b3b3ab293e3f.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.228.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:f4:6c:50:de:7e:5b:ad:5e:be:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=8e52c1ee-8926-47d8-9bbf-5ec0aa8cdd4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b0:dc:96:c7:9f:76:d9:1e:e0:0c:f0:01:44: 50:20:e8:e6:69:33:81:a4:43:85:bc:8c:61:3a:d2: fc:dc:e9:68:74:7a:20:bc:5a:a2:20:86:a7:8e:9b: f8:d1:b7:11:a5:25:97:ce:31:71:62:9a:c1:d9:68: 97:96:65:f2:e0:49:14:50:4c:95:85:7f:de:ba:ca: b6:bc:df:b4:b4:93:22:7e:91:c3:1c:a2:f0:63:a8: 59:98:6d:c8:6b:87:56:4a:a7:38:f0:ed:dd:bf:a2: 6f:60:67:24:33:15:75:0b:ea:66:a7:e5:2d:3e:58: c3:4d:ed:a4:48:29:00:0f:40:f2:a8:ef:58:9a:4d: 5c:eb:ff:c7:2c:7c:8b:73:2c:eb:db:93:5e:a0:b8: a4:9c:73:69:56:75:0d:4f:ff:98:fe:02:08:92:9f: f0:ed:58:81:8b:fe:3c:ed:99:cf:a4:7a:70:28:48: c4:24:52:98:ba:0b:38:a1:06:21:23:50:eb:73:86: 7a:1a:6e:aa:a5:26:89:1d:61:b3:70:10:3f:f2:80: 6a:34:79:e9:05:98:63:dd:c8:5e:84:e1:86:0b:a2: fd:7d:cd:bb:ae:b3:e3:85:30:41:63:f5:5a:12:77: ae:bf:23:1f:b0:39:bd:50:9f:f7:28:0d:65:9f:e9: 15:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:63:79:EB:D3:79:14:4B:CA:27:8D:E9:BF:F2:86:82:FC:B6:53:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa271a05-3e69-30ce-83e1-b3b3ab293e3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.228.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:52:6c:cc:13:ac:52:3a:24:94:30:70:c2:83:d6:d0:24:23: 82:60:15:b4:52:0b:16:ae:1d:5b:90:b7:69:5c:50:86:a7:32: 8e:0e:ae:8a:c3:07:cc:99:b6:1f:14:39:80:1a:4c:07:af:00: b5:8b:be:bb:62:c5:27:f7:74:ee:35:a1:33:6a:23:11:6a:c2: dd:6e:e5:f2:9f:12:84:62:68:e8:e5:49:65:64:55:29:08:5a: d6:44:18:85:25:c6:93:60:b4:fd:20:99:bf:81:b3:66:df:57: 96:a0:88:b4:78:41:80:aa:5a:fe:90:d4:08:f8:68:9c:a8:91: 8b:82:a5:49:f9:85:f3:1a:a9:e9:d3:f4:20:ce:ed:93:43:ac: 37:61:e1:ad:73:51:a3:d5:ed:a6:bf:98:6a:41:8c:c9:5d:33: 22:ad:9b:12:91:07:f5:ce:c3:c8:49:85:b4:a3:31:18:a9:1c: 9a:ec:15:dd:90:ea:64:6c:1b:39:44:5b:bc:2f:13:d1:56:9d: 90:00:73:24:90:b6:c8:9f:f0:ab:77:4d:45:4e:ca:15:ee:27: fa:6a:ac:5d:fc:b8:0e:ad:4e:8d:9a:1e:fc:fc:fb:e8:fb:81: c8:62:44:a5:08:f0:13:82:39:08:44:e0:f7:3c:54:08:3f:26: 6d:da:9a:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPRsUN5+W61evsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OGU1MmMxZWUtODkyNi00N2Q4LTliYmYtNWVjMGFhOGNkZDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrDclsefdtke4AzwAURQIOjmaTOBpEOFvIxh OtL83OlodHogvFqiIIanjpv40bcRpSWXzjFxYprB2WiXlmXy4EkUUEyVhX/eusq2 vN+0tJMifpHDHKLwY6hZmG3Ia4dWSqc48O3dv6JvYGckMxV1C+pmp+UtPljDTe2k SCkAD0DyqO9Ymk1c6//HLHyLcyzr25NeoLiknHNpVnUNT/+Y/gIIkp/w7ViBi/48 7ZnPpHpwKEjEJFKYugs4oQYhI1Drc4Z6Gm6qpSaJHWGzcBA/8oBqNHnpBZhj3che hOGGC6L9fc27rrPjhTBBY/VaEneuvyMfsDm9UJ/3KA1ln+kVyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBjeevTeRRLyieN6b/yhoL8tlN/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmEyNzFhMDUtM2U2OS0z MGNlLTgzZTEtYjNiM2FiMjkzZTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+RAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpSbMwTrFI6JJQwcMKD1tAkI4JgFbRSCxauHVuQt2lcUIanMo4OrorD B8yZth8UOYAaTAevALWLvrtixSf3dO41oTNqIxFqwt1u5fKfEoRiaOjlSWVkVSkI WtZEGIUlxpNgtP0gmb+Bs2bfV5agiLR4QYCqWv6Q1Aj4aJyokYuCpUn5hfMaqenT 9CDO7ZNDrDdh4a1zUaPV7aa/mGpBjMldMyKtmxKRB/XOw8hJhbSjMRipHJrsFd2Q 6mRsGzlEW7wvE9FWnZAAcySQtsif8Kt3TUVOyhXuJ/pqrF38uA6tTo2aHvz8++j7 gchiRKUI8BOCOQhE4Pc8VAg/Jm3amrA= -----END CERTIFICATE-----Generated at Sat Apr 26 17:45:40 2025 by rpki-client