$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5b66589-cc75-3b3c-8fd1-571170c6000f.roa File: a5b66589-cc75-3b3c-8fd1-571170c6000f.roa (raw, json) Hash identifier: HdrV5AiBNYTvUi7iJtPFrIfK/bPYRc/oNsa2Gtu50Xk= Subject key identifier: B0:94:5F:83:C3:CD:F6:FB:D3:00:BB:E8:9F:D6:0A:04:6A:53:57:1E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784FD557F10370311E5A200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5b66589-cc75-3b3c-8fd1-571170c6000f.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 19527 IP address blocks: 35.216.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:fd:55:7f:10:37:03:11:e5:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=21305f17-3ab0-4ec5-8ba1-0c3c25a5fea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:16:ca:0c:91:5b:0b:36:e5:82:c7:09:64:81: 9a:6a:5c:e3:f0:77:5d:b3:41:9f:a8:a4:79:19:fd: 55:4c:19:32:e9:da:63:76:99:83:07:8b:73:76:76: 36:c4:a0:a1:1b:3d:b3:aa:34:90:c5:0d:66:1f:b9: a7:a0:91:d0:ba:ff:ce:14:ee:76:88:ce:ff:b9:59: c5:90:ff:a7:7c:66:9a:71:28:2c:0e:7a:48:65:b6: fb:90:6d:3f:36:87:3b:be:e1:9d:8b:42:30:23:b1: 77:14:0a:b0:c0:30:68:c9:10:31:2c:91:da:bb:95: 92:53:63:d3:3a:9a:38:d8:6c:7f:46:b2:03:cc:9a: ee:60:33:6c:2a:43:b8:76:b5:5b:8f:fc:94:c2:58: 4c:79:4c:20:46:78:7f:7d:10:c3:f2:b2:e9:c2:ae: ca:91:88:7f:8b:6a:5f:4d:9b:44:38:f3:73:b8:e6: 9d:5d:db:a7:ad:a0:ea:57:94:74:61:18:5f:b2:91: 08:17:1f:5c:b2:4e:28:fd:fd:a5:9c:c0:8f:ad:56: 6f:cb:30:95:84:b3:44:8c:eb:ac:1e:eb:90:ef:c4: f5:d2:fb:6e:9d:f2:56:3e:98:12:02:f1:c6:10:86: f9:1f:5d:de:ef:10:4b:6b:e7:f6:40:84:48:db:10: b0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:94:5F:83:C3:CD:F6:FB:D3:00:BB:E8:9F:D6:0A:04:6A:53:57:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5b66589-cc75-3b3c-8fd1-571170c6000f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.216.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:eb:0e:30:8f:43:30:3b:4c:98:41:2f:f2:1f:cf:fa:b8:8c: 28:22:9a:53:42:e6:b4:5b:de:1e:6d:9d:09:a8:1a:65:10:7b: 9f:97:e9:e0:ab:aa:18:60:57:53:b2:88:54:ab:f8:2e:90:04: d3:9c:36:b4:02:39:b9:43:f6:a4:d1:87:a2:24:fd:f5:7a:4a: 63:e1:63:3b:03:43:d6:e3:22:2c:bb:d2:bb:37:d6:c3:5b:c8: 9b:e9:4b:e8:12:7c:26:68:3c:95:58:d2:7c:18:69:33:60:9d: 2d:19:a5:19:82:90:5e:41:99:63:2d:46:05:c0:78:28:78:38: 75:ed:02:4a:27:46:be:e6:e9:c6:3c:dc:78:db:78:07:0a:f3: ea:08:fe:15:99:02:24:77:42:5a:38:22:fd:c2:cf:1c:f0:bc: 47:94:d7:d1:94:7d:19:09:fb:5c:9e:e1:44:8c:87:f1:87:42: dd:f7:89:75:36:5c:99:94:35:3f:32:f5:32:67:40:37:83:6d: 17:75:bc:8f:17:6c:d4:8a:f6:51:8b:f0:c3:f2:e9:5b:9e:12: 29:e9:79:21:f6:31:8c:99:35:28:4f:2a:60:71:94:6a:0d:cc: 7e:8c:c0:1b:2e:36:62:9b:52:bb:09:20:e2:f5:92:86:76:a8: c3:e9:f1:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhP1VfxA3AxHlogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MjEzMDVmMTctM2FiMC00ZWM1LThiYTEtMGMzYzI1YTVmZWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRbKDJFbCzblgscJZIGaalzj8Hdds0GfqKR5 Gf1VTBky6dpjdpmDB4tzdnY2xKChGz2zqjSQxQ1mH7mnoJHQuv/OFO52iM7/uVnF kP+nfGaacSgsDnpIZbb7kG0/Noc7vuGdi0IwI7F3FAqwwDBoyRAxLJHau5WSU2PT Opo42Gx/RrIDzJruYDNsKkO4drVbj/yUwlhMeUwgRnh/fRDD8rLpwq7KkYh/i2pf TZtEOPNzuOadXdunraDqV5R0YRhfspEIFx9csk4o/f2lnMCPrVZvyzCVhLNEjOus HuuQ78T10vtunfJWPpgSAvHGEIb5H13e7xBLa+f2QIRI2xCwhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCUX4PDzfb70wC76J/WCgRqU1ceMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTViNjY1ODktY2M3NS0z YjNjLThmZDEtNTcxMTcwYzYwMDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI9gAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLrDjCPQzA7TJhBL/Ifz/q4jCgimlNC5rRb3h5tnQmoGmUQe5+X6eCr qhhgV1OyiFSr+C6QBNOcNrQCOblD9qTRh6Ik/fV6SmPhYzsDQ9bjIiy70rs31sNb yJvpS+gSfCZoPJVY0nwYaTNgnS0ZpRmCkF5BmWMtRgXAeCh4OHXtAkonRr7m6cY8 3HjbeAcK8+oI/hWZAiR3Qlo4Iv3CzxzwvEeU19GUfRkJ+1ye4USMh/GHQt33iXU2 XJmUNT8y9TJnQDeDbRd1vI8XbNSK9lGL8MPy6VueEinpeSH2MYyZNShPKmBxlGoN zH6MwBsuNmKbUrsJIOL1koZ2qMPp8bs= -----END CERTIFICATE-----Generated at Sat May 10 02:23:44 2025 by rpki-client