$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa69231b-f713-30e7-8c8e-1ccf8dbb0276.roa File: fa69231b-f713-30e7-8c8e-1ccf8dbb0276.roa (raw, json) Hash identifier: 3vKC7yvDlqr/2ft2vkLbM8MnCqkfl4ajhnxpCMXSUBQ= Subject key identifier: 0F:D1:6E:7B:9E:13:4E:A3:5E:9F:D1:9E:9B:86:1F:FA:11:ED:B7:53 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7850F4622BE35DC402AD5B0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa69231b-f713-30e7-8c8e-1ccf8dbb0276.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.222.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:0f:46:22:be:35:dc:40:2a:d5:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=3551ecf8-1812-467e-a271-3f70bfab5081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:98:75:77:72:b2:59:a8:a4:82:3b:c6:e1:a0: ca:5e:cc:c0:d8:cd:51:db:0c:d2:3f:5e:d9:3b:ba: dc:fd:49:6c:e2:c4:84:fd:84:a6:5d:ea:1b:35:86: 00:65:30:14:7c:cb:8d:44:0c:f6:62:a5:de:c2:b7: 9a:fc:36:27:99:2c:2e:35:ef:9f:4a:9b:09:91:2d: 80:ca:a3:b4:74:e5:e9:97:86:42:46:e7:52:f6:ce: 9c:4f:47:3e:ed:5a:c7:e5:0f:ef:c4:1d:69:c6:ec: 6b:71:82:95:fa:45:52:97:20:5c:af:8f:d3:11:89: 30:bd:8f:8c:89:d4:ba:4a:fd:b3:aa:d6:ad:8a:ac: 0c:f1:0f:ca:c9:96:83:54:59:2d:36:25:a5:c5:3a: 0c:0f:72:ed:d4:9f:ab:b8:2e:52:9a:40:71:1e:a1: fb:76:6f:31:00:67:22:d1:06:e8:d2:9a:99:d6:96: 7e:a9:83:16:4d:96:8b:e9:f1:80:f3:1d:54:c8:dc: ea:80:2b:56:18:7b:3f:c8:27:28:ea:76:1e:01:5f: 71:4f:e6:1e:6a:ab:3f:82:9a:5b:2e:56:5f:a5:d8: bc:34:20:e0:d0:fb:56:77:f2:36:ba:88:23:f9:62: 0c:af:8e:57:58:07:8b:43:54:be:61:a5:c2:a4:54: ea:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D1:6E:7B:9E:13:4E:A3:5E:9F:D1:9E:9B:86:1F:FA:11:ED:B7:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fa69231b-f713-30e7-8c8e-1ccf8dbb0276.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.222.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:a3:8d:73:39:8b:c3:fb:cb:92:03:66:34:d6:03:2a:37:76: 3d:a3:00:73:18:4c:88:82:73:18:15:bd:ad:8f:c7:7d:bd:04: 25:5a:cf:d6:54:8f:73:33:03:4b:ac:01:b6:89:51:42:a6:97: 32:82:a9:82:f2:31:c3:1a:05:16:09:89:c8:38:57:76:02:06: f3:ec:47:83:d5:05:3f:e9:83:ef:17:31:24:98:96:fd:86:d5: 41:72:8d:41:8f:c0:ef:14:4c:42:56:ad:3e:7b:ae:f6:26:59: 3f:26:f7:0a:dc:0b:e1:2c:34:cc:93:97:62:28:16:e2:89:ac: 8c:ce:c5:92:39:8b:ca:e6:f9:9f:36:68:0d:20:a0:bc:b1:61: be:12:a3:3b:41:39:b8:88:e7:88:bc:17:e6:78:8e:22:d9:f1: c8:e0:dd:55:4d:b2:b2:52:9b:de:49:af:bf:7f:63:2b:49:70: 61:c9:14:4a:ed:9f:92:92:c1:03:78:b1:69:95:f6:7b:43:98: 02:03:9e:23:78:29:d4:33:20:08:30:ee:e1:61:f9:e4:65:69: 3f:a4:8f:8a:eb:b0:ac:96:63:b4:7d:a6:af:46:30:b5:eb:27: 1b:aa:b1:45:30:08:48:a1:fd:d1:42:15:24:05:e6:f0:e1:06: f6:be:db:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQ9GIr413EAq1bAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MzU1MWVjZjgtMTgxMi00NjdlLWEyNzEtM2Y3MGJmYWI1MDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtph1d3KyWaikgjvG4aDKXszA2M1R2wzSP17Z O7rc/Uls4sSE/YSmXeobNYYAZTAUfMuNRAz2YqXewrea/DYnmSwuNe+fSpsJkS2A yqO0dOXpl4ZCRudS9s6cT0c+7VrH5Q/vxB1pxuxrcYKV+kVSlyBcr4/TEYkwvY+M idS6Sv2zqtatiqwM8Q/KyZaDVFktNiWlxToMD3Lt1J+ruC5SmkBxHqH7dm8xAGci 0Qbo0pqZ1pZ+qYMWTZaL6fGA8x1UyNzqgCtWGHs/yCco6nYeAV9xT+Yeaqs/gppb LlZfpdi8NCDg0PtWd/I2uogj+WIMr45XWAeLQ1S+YaXCpFTqjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/RbnueE06jXp/RnpuGH/oR7bdTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmE2OTIzMWItZjcxMy0z MGU3LThjOGUtMWNjZjhkYmIwMjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI94AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICjjXM5i8P7y5IDZjTWAyo3dj2jAHMYTIiCcxgVva2Px329BCVaz9ZU j3MzA0usAbaJUUKmlzKCqYLyMcMaBRYJicg4V3YCBvPsR4PVBT/pg+8XMSSYlv2G 1UFyjUGPwO8UTEJWrT57rvYmWT8m9wrcC+EsNMyTl2IoFuKJrIzOxZI5i8rm+Z82 aA0goLyxYb4SoztBObiI54i8F+Z4jiLZ8cjg3VVNsrJSm95Jr79/YytJcGHJFErt n5KSwQN4sWmV9ntDmAIDniN4KdQzIAgw7uFh+eRlaT+kj4rrsKyWY7R9pq9GMLXr JxuqsUUwCEih/dFCFSQF5vDhBva+28Q= -----END CERTIFICATE-----Generated at Sat Apr 26 19:05:28 2025 by rpki-client