$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/69340651-fea8-3010-b32e-1a717b6090e0.roa File: 69340651-fea8-3010-b32e-1a717b6090e0.roa (raw, json) Hash identifier: dNaA8NqtBIHwTNpO+GJTNP4Hq8icPGM1i4NoB6zvA4Q= Subject key identifier: 31:08:49:15:BF:CD:49:31:2F:33:3C:9B:D2:69:F1:06:6A:FA:C3:9A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849FCAA97AFC7D98EF583B7AC80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/69340651-fea8-3010-b32e-1a717b6090e0.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 396982 IP address blocks: 35.235.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:97:af:c7:d9:8e:f5:83:b7:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=350ec7c0-3b26-48be-a70d-332ee1256aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cc:68:3a:c2:08:44:26:cb:a4:f2:09:e6:a7: 5e:1b:11:5f:e0:f6:8b:61:ca:e3:40:04:26:22:3a: 99:5a:66:b3:59:fb:1b:92:29:de:8a:f3:65:d6:fc: 39:70:3a:df:7a:dc:09:33:7f:74:60:66:08:03:56: f4:d0:18:42:e5:3d:d3:a7:97:cc:05:64:a4:12:24: 37:bd:31:b8:9e:da:11:af:b4:73:fa:c8:98:e4:d7: 15:8f:02:7e:7b:a0:da:fc:a6:95:f2:b1:8f:16:1c: 0f:6e:5f:8c:ef:59:c0:70:a8:ff:a0:db:75:82:f6: fb:99:70:b1:4f:0d:80:cf:15:a9:dd:17:b2:4f:11: f8:e0:fb:64:9f:1b:c3:bb:38:27:e5:bd:ec:44:bf: 01:09:fd:a6:78:f9:83:a8:97:ee:ee:83:b2:57:3e: 58:ba:c7:00:b3:8c:cc:88:f5:11:c2:21:ff:55:33: aa:47:fc:44:09:86:98:ae:e7:86:cd:fe:80:44:d1: 23:d6:74:3e:c9:41:a2:70:b2:83:ae:8b:5c:bb:f3: 27:5e:a2:8b:05:a1:2f:ec:6e:e3:93:9a:f7:84:6d: fc:b8:37:66:b4:77:c2:10:27:74:45:55:25:00:b8: 64:db:f8:5a:60:0d:7c:3d:ae:ae:06:23:38:bd:4b: 64:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:08:49:15:BF:CD:49:31:2F:33:3C:9B:D2:69:F1:06:6A:FA:C3:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/69340651-fea8-3010-b32e-1a717b6090e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.235.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:4e:d2:1f:88:66:d0:db:c0:f4:a0:c2:7c:7e:de:62:e0:53: 67:39:cc:57:c7:4d:8c:bc:68:3c:98:9d:e6:84:48:93:cd:e4: db:fb:25:c6:8d:b4:11:f5:e5:01:67:55:cb:ee:c5:d3:71:28: db:4c:9f:b7:65:70:b5:62:0f:60:06:98:3f:67:59:49:77:5c: f5:58:b0:97:d4:22:1b:95:01:72:1d:82:09:57:3c:37:27:b7: 3f:e4:31:9f:7a:08:da:fe:44:bd:2b:5d:3c:64:9f:eb:ab:16: 2a:1b:74:ce:c0:46:36:d7:5b:f6:42:89:91:2c:1b:bf:de:9a: 58:bf:06:fd:c7:81:37:a8:c2:2c:73:3a:7f:86:30:e2:19:a0: ec:8f:b5:da:3f:2f:76:ff:83:24:25:cf:eb:c1:c5:a6:df:db: 6e:e3:d7:36:1c:c0:c2:7c:6d:4b:6f:53:6b:71:83:38:3f:13: 8d:ec:5f:9b:a3:3f:4d:bf:b1:85:09:81:9a:45:b6:85:1f:42: 1f:20:bb:e2:ff:c7:51:cf:c8:2b:ae:a9:cd:93:13:a9:2e:02: fb:2f:5a:02:23:81:65:28:22:9c:cf:b7:1b:59:ff:f4:77:88: 02:32:4d:34:ff:f5:35:4d:a3:d0:2d:f5:5e:bb:ef:54:bf:bf: 29:66:b3:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qpevx9mO9YO3rIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk MzUwZWM3YzAtM2IyNi00OGJlLWE3MGQtMzMyZWUxMjU2YWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MxoOsIIRCbLpPIJ5qdeGxFf4PaLYcrjQAQm IjqZWmazWfsbkineivNl1vw5cDrfetwJM390YGYIA1b00BhC5T3Tp5fMBWSkEiQ3 vTG4ntoRr7Rz+siY5NcVjwJ+e6Da/KaV8rGPFhwPbl+M71nAcKj/oNt1gvb7mXCx Tw2AzxWp3ReyTxH44PtknxvDuzgn5b3sRL8BCf2mePmDqJfu7oOyVz5YuscAs4zM iPURwiH/VTOqR/xECYaYrueGzf6ARNEj1nQ+yUGicLKDrotcu/MnXqKLBaEv7G7j k5r3hG38uDdmtHfCECd0RVUlALhk2/haYA18Pa6uBiM4vUtk5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEISRW/zUkxLzM8m9Jp8QZq+sOaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjkzNDA2NTEtZmVhOC0z MDEwLWIzMmUtMWE3MTdiNjA5MGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI+urMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJO0h+IZtDbwPSgwnx+3mLgU2c5zFfHTYy8aDyYneaESJPN5Nv7JcaN tBH15QFnVcvuxdNxKNtMn7dlcLViD2AGmD9nWUl3XPVYsJfUIhuVAXIdgglXPDcn tz/kMZ96CNr+RL0rXTxkn+urFiobdM7ARjbXW/ZCiZEsG7/emli/Bv3HgTeowixz On+GMOIZoOyPtdo/L3b/gyQlz+vBxabf227j1zYcwMJ8bUtvU2txgzg/E43sX5uj P02/sYUJgZpFtoUfQh8gu+L/x1HPyCuuqc2TE6kuAvsvWgIjgWUoIpzPtxtZ//R3 iAIyTTT/9TVNo9At9V6771S/vylms0c= -----END CERTIFICATE-----Generated at Tue Jul 1 18:17:48 2025 by rpki-client