$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/732faa7a-9218-36c9-bce2-7c6a1b99aaf8.roa File: 732faa7a-9218-36c9-bce2-7c6a1b99aaf8.roa (raw, json) Hash identifier: /fTqySdSxBKPMoZSZGlz1ObFutQNrhs2SioMltmcdDU= Subject key identifier: 1B:8C:92:03:33:94:DE:5E:80:6C:80:20:1B:4C:6E:23:17:D4:70:FF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784C842407AD8FB4C551F80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/732faa7a-9218-36c9-bce2-7c6a1b99aaf8.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.223.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:c8:42:40:7a:d8:fb:4c:55:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=211db44d-6164-4a43-8171-db8140f5763b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:aa:d2:01:5d:db:fc:4c:84:22:8b:88:ff:9e: b0:f1:e9:9f:aa:aa:fc:d2:2d:4e:2e:a8:92:0b:6a: 2a:cc:5b:12:7a:62:09:ba:31:e3:92:05:4a:6e:a7: c5:a5:3b:41:a5:de:e7:8f:18:62:b2:32:a2:d4:39: 32:37:f7:8d:fe:4d:3f:49:fe:94:8f:73:e9:5a:05: 7f:eb:f2:c6:ee:16:16:2f:8a:64:c7:77:44:e8:d6: 1e:58:de:29:b1:71:68:0c:70:d9:ee:5f:88:c3:cb: b4:1a:f1:6d:6b:c4:f0:b7:d4:7f:06:1c:d3:45:c4: 37:45:9e:25:09:9c:54:6b:e9:12:12:15:7b:1e:e2: 16:cb:9e:92:96:b0:b0:8d:fb:a9:e8:c6:90:17:7d: 36:5c:28:24:3f:d3:64:ce:73:ae:7a:3d:2f:e3:e7: e8:f3:8a:ac:1d:4d:28:b9:2a:8f:af:0c:f6:af:de: c5:ad:ab:24:24:34:c3:8e:c4:e2:bf:91:0e:6c:f7: 03:ff:2a:e1:2d:cf:63:c3:0a:fc:45:6b:5c:8e:8b: 7f:97:e6:2a:83:e3:9b:b8:84:4e:0a:a6:a6:aa:c3: 54:fa:67:3d:ae:2d:c1:ce:35:c0:ac:12:b6:44:9d: fb:8f:98:63:bd:4b:53:5b:35:77:04:f5:52:37:52: 9e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:8C:92:03:33:94:DE:5E:80:6C:80:20:1B:4C:6E:23:17:D4:70:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/732faa7a-9218-36c9-bce2-7c6a1b99aaf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.223.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:18:8b:5b:b1:4d:ae:52:47:a3:48:01:af:90:0b:82:d1:b6: c0:14:99:35:f4:54:2f:60:ea:80:75:8b:9b:ad:ee:e2:62:b8: 50:ad:05:6c:f1:7e:e8:14:b3:a1:8c:d8:8b:3e:11:06:74:d1: 86:88:6b:9d:b2:0c:04:05:33:dc:59:9f:1f:00:87:ae:9b:36: 2e:f1:43:0e:f6:a7:4b:59:78:c7:93:7b:9d:c0:5d:68:95:d1: 27:bf:36:89:86:51:02:ea:2b:87:bb:07:1d:20:dd:17:1d:0f: 5a:1a:75:28:50:aa:c8:f7:fd:1a:09:9b:bc:16:aa:d9:ff:6d: 68:bf:dc:25:59:ed:98:96:59:47:48:5c:38:2a:69:de:55:1c: 29:be:84:47:24:fb:0d:c9:4c:f3:55:f4:15:98:16:a8:96:c4: 3b:ab:c3:93:30:2a:ec:0e:8c:f1:4e:3d:21:48:83:69:17:cb: 42:d9:23:fc:1c:e4:84:92:89:91:0f:ad:b5:9a:90:1e:77:37: 8b:49:ff:d5:cd:c0:b9:20:9a:b2:41:08:25:3a:8a:13:a6:df: b7:b0:40:b3:b4:bb:3d:5a:51:b6:34:27:18:d9:81:fd:d4:0f: 4d:55:fc:fa:0a:3c:41:64:d5:aa:39:e4:e0:93:bf:c6:1f:b4: 1f:b7:32:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMhCQHrY+0xVH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MjExZGI0NGQtNjE2NC00YTQzLTgxNzEtZGI4MTQwZjU3NjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiarSAV3b/EyEIouI/56w8emfqqr80i1OLqiS C2oqzFsSemIJujHjkgVKbqfFpTtBpd7njxhisjKi1DkyN/eN/k0/Sf6Uj3PpWgV/ 6/LG7hYWL4pkx3dE6NYeWN4psXFoDHDZ7l+Iw8u0GvFta8Twt9R/BhzTRcQ3RZ4l CZxUa+kSEhV7HuIWy56SlrCwjfup6MaQF302XCgkP9NkznOuej0v4+fo84qsHU0o uSqPrwz2r97FraskJDTDjsTiv5EObPcD/yrhLc9jwwr8RWtcjot/l+Yqg+ObuIRO CqamqsNU+mc9ri3BzjXArBK2RJ37j5hjvUtTWzV3BPVSN1KefQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuMkgMzlN5egGyAIBtMbiMX1HD/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzMyZmFhN2EtOTIxOC0z NmM5LWJjZTItN2M2YTFiOTlhYWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI9/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQYi1uxTa5SR6NIAa+QC4LRtsAUmTX0VC9g6oB1i5ut7uJiuFCtBWzx fugUs6GM2Is+EQZ00YaIa52yDAQFM9xZnx8Ah66bNi7xQw72p0tZeMeTe53AXWiV 0Se/NomGUQLqK4e7Bx0g3RcdD1oadShQqsj3/RoJm7wWqtn/bWi/3CVZ7ZiWWUdI XDgqad5VHCm+hEck+w3JTPNV9BWYFqiWxDurw5MwKuwOjPFOPSFIg2kXy0LZI/wc 5ISSiZEPrbWakB53N4tJ/9XNwLkgmrJBCCU6ihOm37ewQLO0uz1aUbY0JxjZgf3U D01V/PoKPEFk1ao55OCTv8YftB+3MqA= -----END CERTIFICATE-----Generated at Sun May 4 19:11:02 2025 by rpki-client