$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/68c0ccf1-cc67-3101-b7b7-ac6f5d7f3b48.roa File: 68c0ccf1-cc67-3101-b7b7-ac6f5d7f3b48.roa (raw, json) Hash identifier: p6ImAXXuksryBed1LLYjmXN1Gb4lyPt7IQlvpwlaOBs= Subject key identifier: 50:D3:DB:F0:8D:BC:6B:23:1C:2D:35:7A:F0:64:80:3C:D0:32:3E:A3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784F0F7133210A7737AB480 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/68c0ccf1-cc67-3101-b7b7-ac6f5d7f3b48.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 19527 IP address blocks: 35.206.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:f0:f7:13:32:10:a7:73:7a:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=e69fe8c7-026c-45b7-9bae-57d5eb52660c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4b:92:6d:cc:1d:18:ce:33:69:81:51:3b:25: fc:f9:78:3a:61:b8:d9:e1:dc:22:72:08:82:5f:6c: 07:1d:45:5a:9b:99:3a:ba:6c:1d:dc:89:cf:99:fe: e6:2e:6d:03:56:9b:87:c7:01:e9:be:53:40:00:a0: fd:4c:93:5c:44:25:9c:c9:cc:9c:53:46:57:70:b0: 52:97:92:e6:9b:b3:d4:c4:e9:74:77:15:f8:db:cd: 54:9e:0c:1d:22:b4:b9:c0:71:cd:cd:70:c0:45:80: 3c:e3:a3:3b:4c:01:4b:b4:72:39:9e:e7:f1:66:0e: 60:e2:b7:bc:8c:45:f8:d3:14:9e:b3:3a:45:0c:ba: 0f:df:4a:d3:f8:6c:c0:db:20:6e:ea:14:2f:3e:04: 39:a2:36:30:65:f6:88:93:2d:a0:72:7c:cd:ad:62: 51:26:4d:70:25:0d:b4:f9:fc:57:31:70:43:50:9c: b0:af:65:5b:9d:a6:c5:be:bf:b9:1e:54:c5:a6:bd: 22:d9:5c:f9:b8:24:03:71:f1:f2:e7:11:d6:21:2a: 4c:f9:1c:da:65:67:f0:6a:b4:7d:38:7a:fa:26:73: 43:0d:30:dd:59:ee:ae:07:70:42:98:88:81:21:6b: 35:d4:e6:6c:89:e5:5a:54:d8:d4:a3:18:63:7b:07: fd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D3:DB:F0:8D:BC:6B:23:1C:2D:35:7A:F0:64:80:3C:D0:32:3E:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/68c0ccf1-cc67-3101-b7b7-ac6f5d7f3b48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.206.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:9b:1a:54:57:21:ac:d6:63:d6:79:61:a5:80:07:d9:2b:aa: 88:a5:ab:04:fc:d1:e6:c5:45:03:a0:fe:22:5d:db:88:85:e3: 5c:63:c6:99:56:4b:da:02:a6:9c:0a:d2:57:f7:e9:f3:bc:cd: fc:5d:d2:b0:46:de:2f:f9:54:d5:7e:e8:0e:1a:44:63:2e:dd: 53:68:af:9b:98:59:fa:7b:38:ad:8f:c6:d7:f2:24:cc:d5:69: 62:32:7c:15:a6:b3:8b:61:c4:ac:51:be:dd:3f:e2:ed:34:cd: 37:dd:28:a1:18:2b:a1:63:8f:a6:af:01:c5:7b:dd:38:6e:c5: 38:79:65:46:74:b6:88:87:74:ba:81:2f:e7:53:dd:9d:7f:55: 18:20:e5:16:b1:05:b8:d2:d3:bd:de:dd:97:4b:a5:66:d1:34: 94:5a:56:ba:99:ed:4a:35:5b:5f:af:1e:b7:c6:b4:af:d7:3c: 11:18:e4:3f:51:05:90:e3:8a:dd:51:69:54:b3:0c:48:5b:ce: 72:b4:5d:e7:95:10:78:20:2b:a2:c4:27:d2:b6:e7:fb:4e:29: ed:0e:67:a2:e0:44:07:ec:e9:e3:bd:47:c6:a6:1f:b0:a2:cf: bc:da:f7:b9:ee:71:a4:95:cb:90:5c:29:5a:27:87:f5:a5:65: be:26:6f:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPD3EzIQp3N6tIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZTY5ZmU4YzctMDI2Yy00NWI3LTliYWUtNTdkNWViNTI2NjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUuSbcwdGM4zaYFROyX8+Xg6YbjZ4dwicgiC X2wHHUVam5k6umwd3InPmf7mLm0DVpuHxwHpvlNAAKD9TJNcRCWcycycU0ZXcLBS l5Lmm7PUxOl0dxX4281UngwdIrS5wHHNzXDARYA846M7TAFLtHI5nufxZg5g4re8 jEX40xSeszpFDLoP30rT+GzA2yBu6hQvPgQ5ojYwZfaIky2gcnzNrWJRJk1wJQ20 +fxXMXBDUJywr2VbnabFvr+5HlTFpr0i2Vz5uCQDcfHy5xHWISpM+RzaZWfwarR9 OHr6JnNDDTDdWe6uB3BCmIiBIWs11OZsieVaVNjUoxhjewf9PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDT2/CNvGsjHC01evBkgDzQMj6jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjhjMGNjZjEtY2M2Ny0z MTAxLWI3YjctYWM2ZjVkN2YzYjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCI84MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCbGlRXIazWY9Z5YaWAB9krqoilqwT80ebFRQOg/iJd24iF41xjxplW S9oCppwK0lf36fO8zfxd0rBG3i/5VNV+6A4aRGMu3VNor5uYWfp7OK2PxtfyJMzV aWIyfBWms4thxKxRvt0/4u00zTfdKKEYK6Fjj6avAcV73ThuxTh5ZUZ0toiHdLqB L+dT3Z1/VRgg5RaxBbjS073e3ZdLpWbRNJRaVrqZ7Uo1W1+vHrfGtK/XPBEY5D9R BZDjit1RaVSzDEhbznK0XeeVEHggK6LEJ9K25/tOKe0OZ6LgRAfs6eO9R8amH7Ci z7za97nucaSVy5BcKVonh/WlZb4mb7E= -----END CERTIFICATE-----Generated at Sun May 4 19:11:20 2025 by rpki-client