$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91ec3823-56e5-31a1-aa66-0ab975dea16d.roa File: 91ec3823-56e5-31a1-aa66-0ab975dea16d.roa (raw, json) Hash identifier: yRMsrqyjn0q/7NJ2xdj50iZo1UYJodaJEcCSjsxfqcs= Subject key identifier: 75:11:27:B5:95:78:52:F6:58:5D:A6:61:C9:B6:89:E5:58:02:1B:F1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849B17A296A259DF6D5D336CDA0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91ec3823-56e5-31a1-aa66-0ab975dea16d.roa Signing time: Wed 30 Apr 2025 02:38:03 +0000 ROA not before: Wed 30 Apr 2025 02:38:03 +0000 ROA not after: Tue 29 Jul 2025 02:38:03 +0000 asID: 396982 IP address blocks: 35.189.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:7a:29:6a:25:9d:f6:d5:d3:36:cd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 30 02:38:03 2025 GMT Not After : Jul 29 02:38:03 2025 GMT Subject: CN=ab284281-e6c9-4e63-b643-152156f23789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:36:b1:5b:fc:12:a0:54:74:62:e7:6b:a6:e6: 01:9c:b1:32:1b:15:9b:85:16:9d:14:68:66:ad:c6: 5e:b4:3f:8a:08:77:c2:91:1e:d2:d0:59:1e:62:25: c5:e5:a9:f7:dd:05:82:46:81:62:4d:c9:f5:56:cf: 1f:aa:71:47:f9:41:31:60:e1:8f:7a:41:96:d2:dc: f7:b0:e9:d1:4b:5d:f3:3d:6e:ee:7c:a1:5f:56:8f: e6:fc:0a:6b:5b:6e:88:14:6a:d2:d7:da:db:55:a9: 66:7d:3e:76:8b:10:93:c9:97:d1:dc:9a:f5:06:89: db:56:31:f3:5e:df:30:ed:8b:10:55:e4:32:63:3e: 3c:29:86:e4:0e:4a:b2:08:04:43:b6:0b:fb:e3:09: 44:77:b4:25:f2:a8:68:1e:48:1b:16:e9:9d:94:d3: f6:f3:36:b2:d8:a8:2d:c3:00:41:0f:5a:25:3a:b5: 65:57:10:d4:99:01:14:db:58:53:3b:e5:7f:f5:67: 5b:23:2d:9a:10:65:1f:91:8a:e1:2e:47:e5:50:fc: ce:ce:d3:50:c5:29:93:02:4c:b3:55:a4:59:ab:18: 5c:ca:ba:a6:ad:6d:6d:5a:23:f0:16:8e:08:81:26: 1f:b0:6e:1f:63:d9:a6:a5:9e:81:cd:77:61:d6:b3: 18:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:11:27:B5:95:78:52:F6:58:5D:A6:61:C9:B6:89:E5:58:02:1B:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/91ec3823-56e5-31a1-aa66-0ab975dea16d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.189.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:80:6c:97:c4:20:71:6b:ea:3d:51:54:8b:61:18:fe:08:42: 31:31:29:32:17:b9:61:69:ce:ee:19:a0:d2:27:28:59:da:7a: 8f:3f:55:8c:ad:69:2f:04:13:13:15:ed:03:ea:a1:d1:78:a0: 3a:94:8d:05:4b:9c:27:38:8f:e4:44:27:cc:4f:3e:d1:67:1d: 3e:07:05:33:87:9b:f4:75:a0:c5:f8:2f:eb:a3:92:49:3f:80: 47:ec:76:47:31:a0:1a:f5:c2:46:d1:90:24:f0:d8:b3:f5:9c: dd:0f:0d:d1:8a:3a:7e:af:6f:47:4b:e9:ff:e0:b8:c7:62:be: 5d:bf:75:8a:06:06:34:da:7d:83:5d:e9:6c:e0:9a:8a:ec:8a: 6e:7d:ca:5a:9e:30:95:2c:48:d9:7e:ad:7f:bb:e5:83:84:42: 4c:43:f6:9d:c1:0c:46:34:60:89:d9:ed:9a:bd:91:81:d8:64: f7:dd:4b:55:f5:79:85:5e:09:5c:bf:21:10:63:1d:a1:33:d3: bf:b7:69:7c:75:2a:83:61:fc:50:63:2b:f1:e6:f7:21:57:27: 13:f9:fc:a8:4a:f4:0c:ea:6e:e9:35:85:cf:a0:d0:b3:72:56: 6d:eb:98:53:07:1a:e8:08:84:9d:a5:08:6d:52:7a:7e:6b:39: f9:e8:a2:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxeilqJZ321dM2zaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQzMDAyMzgwM1oXDTI1MDcyOTAyMzgwM1owLzEtMCsGA1UEAxMk YWIyODQyODEtZTZjOS00ZTYzLWI2NDMtMTUyMTU2ZjIzNzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTaxW/wSoFR0YudrpuYBnLEyGxWbhRadFGhm rcZetD+KCHfCkR7S0FkeYiXF5an33QWCRoFiTcn1Vs8fqnFH+UExYOGPekGW0tz3 sOnRS13zPW7ufKFfVo/m/AprW26IFGrS19rbValmfT52ixCTyZfR3Jr1BonbVjHz Xt8w7YsQVeQyYz48KYbkDkqyCARDtgv74wlEd7Ql8qhoHkgbFumdlNP28zay2Kgt wwBBD1olOrVlVxDUmQEU21hTO+V/9WdbIy2aEGUfkYrhLkflUPzOztNQxSmTAkyz VaRZqxhcyrqmrW1tWiPwFo4IgSYfsG4fY9mmpZ6BzXdh1rMY4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHURJ7WVeFL2WF2mYcm2ieVYAhvxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTFlYzM4MjMtNTZlNS0z MWExLWFhNjYtMGFiOTc1ZGVhMTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFI72AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJyAbJfEIHFr6j1RVIthGP4IQjExKTIXuWFpzu4ZoNInKFnaeo8/VYyt aS8EExMV7QPqodF4oDqUjQVLnCc4j+REJ8xPPtFnHT4HBTOHm/R1oMX4L+ujkkk/ gEfsdkcxoBr1wkbRkCTw2LP1nN0PDdGKOn6vb0dL6f/guMdivl2/dYoGBjTafYNd 6Wzgmorsim59ylqeMJUsSNl+rX+75YOEQkxD9p3BDEY0YInZ7Zq9kYHYZPfdS1X1 eYVeCVy/IRBjHaEz07+3aXx1KoNh/FBjK/Hm9yFXJxP5/KhK9Azqbuk1hc+g0LNy Vm3rmFMHGugIhJ2lCG1Sen5rOfnoooI= -----END CERTIFICATE-----Generated at Sun May 4 19:53:46 2025 by rpki-client