$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/893d9bdb-a003-3aa5-a28d-4d627ccd9dd9.roa File: 893d9bdb-a003-3aa5-a28d-4d627ccd9dd9.roa (raw, json) Hash identifier: w2kZyt4xYnhFYLVIUy9DzU0rnawn5s37xjzNVIvL5B4= Subject key identifier: 43:AA:59:1A:96:7C:39:F0:23:C4:E2:25:21:29:DA:89:C5:D4:5D:6A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7851B41EB4D2ECF4A942280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/893d9bdb-a003-3aa5-a28d-4d627ccd9dd9.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.225.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:1b:41:eb:4d:2e:cf:4a:94:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=fd14fbe7-1289-4484-a061-eecacfe1d679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b2:39:e6:5e:cd:aa:f2:3c:2e:87:ae:89:cd: 32:f8:d7:bd:ee:67:e4:aa:40:95:de:d6:3a:ab:87: 60:cd:03:c5:79:83:3a:9c:6f:ad:94:97:c6:c2:f6: 72:f9:01:66:8c:41:a5:67:45:7c:94:34:45:95:57: b3:97:3e:08:5e:8f:b8:9c:27:de:57:55:3b:7b:7c: 26:54:a8:68:f2:b1:be:c2:cd:29:62:c9:e5:0d:b0: be:a6:80:f8:cf:39:70:11:da:a5:f4:e8:56:27:66: f7:16:37:1d:78:7f:c3:35:14:65:e6:eb:00:64:76: bf:48:0a:f1:99:5a:bc:ef:54:97:6d:7f:df:de:b8: fb:db:83:62:71:81:18:80:2c:dc:dc:cd:1f:25:b8: e7:58:57:bc:58:28:4a:1a:c4:2d:73:c3:93:4e:43: 1c:60:1a:b0:2c:c2:cf:4e:cb:4f:16:e5:ca:0b:a5: c0:f6:ca:b8:94:ce:44:63:73:c9:cf:c8:e0:5e:26: e4:5d:2f:a4:ed:91:ab:fe:9a:a6:fb:ce:96:9f:6b: ef:f7:d1:64:7b:a1:63:aa:78:5a:19:a6:4c:be:0f: 26:b5:46:c7:63:70:78:ae:e5:1f:53:db:3a:0f:f1: 8f:82:fd:b4:b7:d8:eb:03:3d:1a:73:ff:32:3a:3c: 54:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:AA:59:1A:96:7C:39:F0:23:C4:E2:25:21:29:DA:89:C5:D4:5D:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/893d9bdb-a003-3aa5-a28d-4d627ccd9dd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.225.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:6d:96:0e:72:0c:f7:ff:bb:a2:bd:39:13:41:8c:f0:d4:be: dd:cc:88:20:fb:25:b3:d8:c8:f3:11:8d:8c:ef:54:f4:3e:4b: df:7f:3e:0f:57:84:3e:3d:48:bf:94:b0:2f:2f:71:27:38:73: 50:b9:46:f3:26:ae:fb:88:7b:1a:7e:a8:3c:50:9c:f9:3f:ec: 5a:f8:49:4b:56:2d:77:b5:59:6a:c4:d8:38:1c:9a:7e:28:fc: 0e:66:00:9c:bd:6c:af:b4:59:f8:20:0e:81:fd:a6:f8:fd:19: 2e:f7:8e:0f:03:38:0e:1f:b4:d3:90:db:8c:92:28:c0:20:38: e7:cc:1b:4f:a4:c7:66:14:9a:34:33:ac:50:72:f5:60:9c:bc: a1:19:05:c4:00:07:17:b3:49:d9:a0:8b:45:06:fd:f0:1b:61: 97:35:b1:69:0a:20:25:c4:1e:0f:90:73:3c:bd:da:c6:03:ab: 9e:3c:ad:3e:dd:e2:c6:24:de:be:80:4f:30:e3:ea:19:a4:aa: 38:8f:c1:92:4e:4e:74:5a:76:79:2f:97:f6:f8:ce:16:67:41: cd:44:90:8e:46:d9:5d:76:56:52:9e:57:fc:60:06:9e:8f:f9: c4:36:21:8a:88:75:e4:54:49:fe:48:46:7d:b8:0a:3a:3c:ce: 27:ec:e4:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRtB600uz0qUIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZmQxNGZiZTctMTI4OS00NDg0LWEwNjEtZWVjYWNmZTFkNjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7I55l7NqvI8Loeuic0y+Ne97mfkqkCV3tY6 q4dgzQPFeYM6nG+tlJfGwvZy+QFmjEGlZ0V8lDRFlVezlz4IXo+4nCfeV1U7e3wm VKho8rG+ws0pYsnlDbC+poD4zzlwEdql9OhWJ2b3FjcdeH/DNRRl5usAZHa/SArx mVq871SXbX/f3rj724NicYEYgCzc3M0fJbjnWFe8WChKGsQtc8OTTkMcYBqwLMLP TstPFuXKC6XA9sq4lM5EY3PJz8jgXibkXS+k7ZGr/pqm+86Wn2vv99Fke6Fjqnha GaZMvg8mtUbHY3B4ruUfU9s6D/GPgv20t9jrAz0ac/8yOjxUgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOqWRqWfDnwI8TiJSEp2onF1F1qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODkzZDliZGItYTAwMy0z YWE1LWEyOGQtNGQ2MjdjY2Q5ZGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+FgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxtlg5yDPf/u6K9ORNBjPDUvt3MiCD7JbPYyPMRjYzvVPQ+S99/Pg9X hD49SL+UsC8vcSc4c1C5RvMmrvuIexp+qDxQnPk/7Fr4SUtWLXe1WWrE2Dgcmn4o /A5mAJy9bK+0WfggDoH9pvj9GS73jg8DOA4ftNOQ24ySKMAgOOfMG0+kx2YUmjQz rFBy9WCcvKEZBcQABxezSdmgi0UG/fAbYZc1sWkKICXEHg+Qczy92sYDq548rT7d 4sYk3r6ATzDj6hmkqjiPwZJOTnRadnkvl/b4zhZnQc1EkI5G2V12VlKeV/xgBp6P +cQ2IYqIdeRUSf5IRn24Cjo8zifs5NY= -----END CERTIFICATE-----Generated at Sun May 4 18:14:02 2025 by rpki-client