$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c57acaf6-b0e3-38c8-84fa-910370bb05a4.roa File: c57acaf6-b0e3-38c8-84fa-910370bb05a4.roa (raw, json) Hash identifier: jgnt/0YMdCG4dDFPwGHNXlRTyQJdVECRhuz4rmSErTA= Subject key identifier: 16:0B:7B:22:AA:B8:B4:4C:3F:1E:5F:BC:D9:4D:28:40:A0:1B:46:0D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78508EFA6E0FD8F853BDE00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c57acaf6-b0e3-38c8-84fa-910370bb05a4.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.228.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:08:ef:a6:e0:fd:8f:85:3b:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=f63650a5-b17b-4267-82f0-1e1cc06ef7bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:bc:f4:e5:e3:92:9c:fd:ce:b0:d0:23:04:bd: 53:18:56:2f:31:1c:85:ae:2c:0e:ae:e7:a4:f9:4c: 47:08:eb:f1:98:89:04:98:2f:06:81:56:4d:e8:b7: 4c:3d:c9:90:c1:ec:6a:bc:d5:dc:fc:01:55:ab:23: 1a:c6:35:da:56:66:c5:05:9a:f2:0e:d2:89:4a:ba: c3:04:22:48:bb:6d:13:d5:71:d6:33:21:18:00:72: 82:d4:a7:7c:37:dd:6a:4d:dc:78:b8:7f:df:51:e1: a1:78:31:48:d4:a2:7d:b1:4e:55:bc:0f:ca:98:33: 9e:aa:a3:10:d0:c2:84:f1:2f:38:a0:d6:0b:45:af: 9e:09:0a:37:33:87:1e:76:e3:6f:ba:20:21:0e:bb: 62:5b:86:d8:eb:fa:7d:b6:3c:6b:4b:eb:f6:80:b1: d9:e2:14:6d:4f:ef:b2:10:d1:e6:67:64:5c:aa:2a: 61:9f:f2:a7:c9:4a:92:74:29:e7:97:98:7b:94:f5: 27:95:34:e2:0e:69:01:93:35:f9:e4:2b:11:61:df: 47:47:72:3b:6d:d7:9c:d6:b1:a9:c0:c4:be:da:08: 73:7f:7e:87:16:99:4f:2e:39:ea:39:fa:03:cb:3e: 3e:d4:8b:a2:12:49:c0:73:48:f0:13:55:d4:fe:7d: b4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:0B:7B:22:AA:B8:B4:4C:3F:1E:5F:BC:D9:4D:28:40:A0:1B:46:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c57acaf6-b0e3-38c8-84fa-910370bb05a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.228.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:50:2e:12:66:e8:26:2d:2e:68:93:5c:c4:9f:f9:69:ad:d8: ae:04:f4:a6:94:cf:f4:93:10:d3:dd:23:f3:6c:56:e0:50:61: 10:cb:93:98:a4:7d:ad:d2:09:06:ac:04:c1:87:d5:60:6e:65: b1:fa:c1:b3:7e:0b:a5:e6:da:fa:af:f9:ed:dc:1e:a7:c1:f1: cf:68:0c:0f:c7:ee:1e:4b:2b:84:fe:cd:f4:e3:c8:14:8f:e9: 62:d6:f1:aa:c7:37:95:e2:1d:78:7c:8c:59:0f:e8:ab:05:8e: 66:bd:f1:84:e5:3c:0e:b7:2b:56:20:7f:b9:d0:96:51:05:21: ae:77:0a:ec:ff:bb:b5:9d:d7:7f:99:42:92:bf:95:8b:1b:d6: 28:15:a9:62:79:4f:5f:4f:22:a1:04:f0:c4:f1:cd:d0:57:06: f1:f0:78:62:88:dc:1b:e9:c0:6f:26:84:86:cf:83:54:1f:a4: da:70:3a:63:b4:8c:b6:b9:46:b4:34:9e:dc:61:b1:f6:ae:a7: 40:93:35:ce:73:a0:41:8e:eb:fc:13:2b:97:71:1a:22:85:b1: f0:34:84:2e:23:d8:01:bc:2f:4a:3f:26:cf:47:af:5f:81:f8: 00:68:a0:5f:d7:a0:82:af:b1:22:f6:ae:5f:58:b6:4f:4b:39: c5:9c:6d:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhQjvpuD9j4U73gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZjYzNjUwYTUtYjE3Yi00MjY3LTgyZjAtMWUxY2MwNmVmN2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bz05eOSnP3OsNAjBL1TGFYvMRyFriwOruek +UxHCOvxmIkEmC8GgVZN6LdMPcmQwexqvNXc/AFVqyMaxjXaVmbFBZryDtKJSrrD BCJIu20T1XHWMyEYAHKC1Kd8N91qTdx4uH/fUeGheDFI1KJ9sU5VvA/KmDOeqqMQ 0MKE8S84oNYLRa+eCQo3M4ceduNvuiAhDrtiW4bY6/p9tjxrS+v2gLHZ4hRtT++y ENHmZ2Rcqiphn/KnyUqSdCnnl5h7lPUnlTTiDmkBkzX55CsRYd9HR3I7bdec1rGp wMS+2ghzf36HFplPLjnqOfoDyz4+1IuiEknAc0jwE1XU/n20vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYLeyKquLRMPx5fvNlNKECgG0YNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzU3YWNhZjYtYjBlMy0z OGM4LTg0ZmEtOTEwMzcwYmIwNWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+TQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1QLhJm6CYtLmiTXMSf+Wmt2K4E9KaUz/STENPdI/NsVuBQYRDLk5ik fa3SCQasBMGH1WBuZbH6wbN+C6Xm2vqv+e3cHqfB8c9oDA/H7h5LK4T+zfTjyBSP 6WLW8arHN5XiHXh8jFkP6KsFjma98YTlPA63K1Ygf7nQllEFIa53Cuz/u7Wd13+Z QpK/lYsb1igVqWJ5T19PIqEE8MTxzdBXBvHweGKI3BvpwG8mhIbPg1QfpNpwOmO0 jLa5RrQ0ntxhsfaup0CTNc5zoEGO6/wTK5dxGiKFsfA0hC4j2AG8L0o/Js9Hr1+B +ABooF/XoIKvsSL2rl9Ytk9LOcWcbWQ= -----END CERTIFICATE-----Generated at Sun May 4 19:19:14 2025 by rpki-client