$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7d0ea980-0d78-37ed-8ec0-5001c4507749.roa File: 7d0ea980-0d78-37ed-8ec0-5001c4507749.roa (raw, json) Hash identifier: 6B8kH/iXgi1LLzVKXE/Gt1dIjjEJCxm77BvzXF42k78= Subject key identifier: AD:07:A7:3B:EA:CE:2A:99:72:B5:4A:6E:84:0B:F2:24:BE:B9:14:F5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78535DAAF722FB688E97380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7d0ea980-0d78-37ed-8ec0-5001c4507749.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.223.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:35:da:af:72:2f:b6:88:e9:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=0fe261d3-e714-4f9c-bdd6-25e7d85b4d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:56:aa:da:76:b2:c8:c9:f2:bf:d9:2c:f7:1f: 93:84:3c:b7:53:ac:ab:4a:43:08:8f:14:c7:37:1f: 63:37:2f:c6:23:b8:32:fd:14:ae:10:ae:ff:86:6a: 33:b8:84:d0:df:65:02:7b:e0:34:f0:5b:72:a6:fc: 83:63:7e:bd:c9:c2:04:01:2c:f0:f2:c2:72:74:b3: 6f:35:49:38:16:46:4c:49:14:31:42:89:86:cc:59: 77:83:3c:99:37:e5:7d:a4:a2:37:39:73:f4:b0:74: 78:a1:d7:5d:68:ca:59:8e:d9:c4:db:55:f5:63:8c: 59:09:90:12:3d:27:74:28:5b:1e:d0:2f:34:a1:8d: 6e:65:4d:6c:e4:a5:2e:28:e9:ea:7d:81:29:81:e9: db:50:1b:77:4f:d0:31:b1:1d:b7:f7:f9:c3:ce:93: 61:b3:6a:fa:ce:02:0f:b3:fb:f1:ae:b0:dd:9a:39: b9:28:29:f8:cf:40:e8:d4:b0:a5:ad:60:3b:7e:6f: 89:6c:bc:be:35:ff:74:1d:51:31:80:2d:93:a6:0d: 15:74:77:98:71:74:5c:92:fb:09:03:ba:cd:45:98: 24:79:65:b3:17:57:49:d4:35:cf:c1:7b:24:c0:1d: a3:54:bf:f0:76:82:22:69:60:17:ac:ee:5a:92:41: 9a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:07:A7:3B:EA:CE:2A:99:72:B5:4A:6E:84:0B:F2:24:BE:B9:14:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7d0ea980-0d78-37ed-8ec0-5001c4507749.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.223.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:de:df:49:6b:ab:71:0f:b3:38:06:25:d5:6a:54:d8:4b:1b: b2:6d:94:79:72:40:0b:f4:eb:9a:f6:0b:7e:a0:3e:f6:3f:f3: 4b:61:91:b8:ea:98:42:02:47:da:c8:eb:a1:61:d8:02:17:b3: 1b:3a:90:04:7e:d6:5b:6a:18:3a:5e:2b:5f:17:c8:ba:fc:00: dc:15:f6:a9:e3:be:c4:10:a6:a0:41:b5:fc:99:1e:90:7b:97: 02:7c:33:fd:52:b5:c2:69:3d:5c:1f:a7:f7:1c:0c:64:18:b8: 8d:7f:8e:16:12:3e:02:a5:27:8b:c5:71:12:1a:1b:b1:47:6f: de:67:50:43:96:59:66:0b:b1:47:3c:4f:45:03:e1:de:7c:79: 4d:e4:cc:eb:a9:8c:69:f9:46:f6:10:aa:13:80:c8:a5:a3:65: 0f:93:c7:90:4e:d7:a1:e4:eb:30:11:49:ce:81:d5:64:46:d7: 9b:97:4d:01:79:8f:e8:9a:91:a0:87:5e:d5:c6:39:b1:e5:78: 9f:5c:24:2d:66:a6:b9:c4:56:2e:70:b7:7e:8f:0d:86:c2:28: 16:74:55:d6:d6:f6:75:14:0d:3c:c8:16:e3:85:18:39:ac:81: ff:65:40:1b:77:6d:ff:cb:ad:ea:c4:29:ab:61:eb:a2:a6:8f: 54:f2:cf:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTXar3Ivtojpc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MGZlMjYxZDMtZTcxNC00ZjljLWJkZDYtMjVlN2Q4NWI0ZDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilaq2nayyMnyv9ks9x+ThDy3U6yrSkMIjxTH Nx9jNy/GI7gy/RSuEK7/hmozuITQ32UCe+A08FtypvyDY369ycIEASzw8sJydLNv NUk4FkZMSRQxQomGzFl3gzyZN+V9pKI3OXP0sHR4odddaMpZjtnE21X1Y4xZCZAS PSd0KFse0C80oY1uZU1s5KUuKOnqfYEpgenbUBt3T9AxsR239/nDzpNhs2r6zgIP s/vxrrDdmjm5KCn4z0Do1LClrWA7fm+JbLy+Nf90HVExgC2Tpg0VdHeYcXRckvsJ A7rNRZgkeWWzF1dJ1DXPwXskwB2jVL/wdoIiaWAXrO5akkGajQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0HpzvqziqZcrVKboQL8iS+uRT1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2QwZWE5ODAtMGQ3OC0z N2VkLThlYzAtNTAwMWM0NTA3NzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI9+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfe30lrq3EPszgGJdVqVNhLG7JtlHlyQAv065r2C36gPvY/80thkbjq mEICR9rI66Fh2AIXsxs6kAR+1ltqGDpeK18XyLr8ANwV9qnjvsQQpqBBtfyZHpB7 lwJ8M/1StcJpPVwfp/ccDGQYuI1/jhYSPgKlJ4vFcRIaG7FHb95nUEOWWWYLsUc8 T0UD4d58eU3kzOupjGn5RvYQqhOAyKWjZQ+Tx5BO16Hk6zARSc6B1WRG15uXTQF5 j+iakaCHXtXGObHleJ9cJC1mprnEVi5wt36PDYbCKBZ0VdbW9nUUDTzIFuOFGDms gf9lQBt3bf/LrerEKath66Kmj1Tyz3U= -----END CERTIFICATE-----Generated at Sun May 4 20:25:17 2025 by rpki-client