$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd7efcc9-f1fa-307f-9f59-0cc22f1c0c07.roa File: fd7efcc9-f1fa-307f-9f59-0cc22f1c0c07.roa (raw, json) Hash identifier: jqMkO320S7kLYEgZcPqvKn2K5wNWOQkm7hwVFs2iHuE= Subject key identifier: 6D:02:20:C8:63:34:F1:D5:D6:CE:BE:F3:12:BE:F5:2D:05:AD:B1:F5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784C5B021989DF593D738E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd7efcc9-f1fa-307f-9f59-0cc22f1c0c07.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 19527 IP address blocks: 35.217.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:c5:b0:21:98:9d:f5:93:d7:38:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=661d474a-a847-4341-9875-0552610df520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:fa:59:83:b9:39:f0:fa:94:3f:92:15:44:52: 6f:86:25:90:80:b4:b9:f3:5f:7f:35:d9:6b:2f:57: 2d:df:64:6b:cb:2f:95:45:b7:81:8f:c5:c1:44:d7: 06:3e:1b:c8:c6:06:03:e8:c1:2e:ba:ac:55:b9:7b: e3:24:02:51:06:2e:8a:4f:8a:1a:dd:36:bf:b6:37: 29:7e:d4:dd:37:a4:f6:27:c6:71:62:82:48:7d:a5: 11:b0:2c:54:d8:74:88:0b:f8:ee:32:4e:80:a9:73: d1:ac:74:76:f3:a4:b5:44:ef:84:24:36:bb:21:11: bc:43:58:a3:48:5c:24:b4:89:0f:2b:92:c7:b0:a6: 77:1a:da:69:fb:3f:ac:9e:ef:c1:50:17:a3:3a:65: 46:c7:eb:05:34:82:02:38:03:bd:88:3d:84:c2:18: cb:b5:d3:cc:8e:7a:49:ec:cb:f1:ba:8d:f0:a3:ee: 29:2d:cd:a8:7b:58:93:37:95:0e:fc:02:5d:b0:d8: 40:a2:f2:58:fe:b4:22:fc:c9:70:22:87:c0:86:81: ee:4b:ab:17:03:33:96:de:5a:75:01:0c:fc:9e:67: fc:66:58:5a:af:19:16:d9:61:80:c7:27:9e:4c:7a: f8:e5:db:06:0f:6c:0f:df:95:6a:68:e6:e5:53:02: 11:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:02:20:C8:63:34:F1:D5:D6:CE:BE:F3:12:BE:F5:2D:05:AD:B1:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd7efcc9-f1fa-307f-9f59-0cc22f1c0c07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.217.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:d4:8e:8d:76:21:61:ea:3d:e9:80:13:8e:72:d8:ba:20:9a: fa:ad:86:60:e9:c1:a7:ac:fc:6c:a9:1f:19:2f:fa:3e:e7:50: 8c:ed:c1:8f:e5:63:02:b7:a7:34:13:ad:7a:9a:6d:21:3d:53: 42:50:15:7d:49:c4:93:79:02:c1:5d:dd:55:c6:87:96:2c:97: 56:86:95:19:23:32:59:f6:d0:7d:e8:07:09:11:67:79:10:b1: f2:33:8d:28:40:6c:7b:39:b9:5d:0d:95:70:08:c7:97:55:d2: 05:ef:54:3c:66:a6:89:8b:00:49:75:00:87:01:78:5d:b8:26: d9:ab:08:9b:6c:34:b8:c3:2f:2f:29:f4:10:e9:86:4d:81:9f: 44:14:3b:5c:9e:8d:14:11:89:a4:ef:e2:59:7e:f8:7b:09:5f: e6:81:6c:5f:b3:57:c1:eb:b0:a2:e1:7e:ac:93:0c:50:69:80: fd:b1:48:98:59:7d:2a:a3:c3:e8:83:7f:de:fd:fd:c0:50:cc: 7e:f3:19:f1:bb:94:5c:92:20:b3:3c:af:98:f1:90:98:27:ea: 82:07:c7:a3:0b:63:3d:4c:1d:93:83:eb:6d:1a:11:5a:93:b1: f9:f7:24:33:32:df:25:89:04:62:2e:5d:02:f3:17:42:62:11: 23:31:ef:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMWwIZid9ZPXOOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NjYxZDQ3NGEtYTg0Ny00MzQxLTk4NzUtMDU1MjYxMGRmNTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/pZg7k58PqUP5IVRFJvhiWQgLS5819/Ndlr L1ct32Rryy+VRbeBj8XBRNcGPhvIxgYD6MEuuqxVuXvjJAJRBi6KT4oa3Ta/tjcp ftTdN6T2J8ZxYoJIfaURsCxU2HSIC/juMk6AqXPRrHR286S1RO+EJDa7IRG8Q1ij SFwktIkPK5LHsKZ3Gtpp+z+snu/BUBejOmVGx+sFNIICOAO9iD2EwhjLtdPMjnpJ 7Mvxuo3wo+4pLc2oe1iTN5UO/AJdsNhAovJY/rQi/MlwIofAhoHuS6sXAzOW3lp1 AQz8nmf8ZlharxkW2WGAxyeeTHr45dsGD2wP35VqaOblUwIROwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0CIMhjNPHV1s6+8xK+9S0FrbH1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmQ3ZWZjYzktZjFmYS0z MDdmLTlmNTktMGNjMjJmMWMwYzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGI9lAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbUjo12IWHqPemAE45y2LogmvqthmDpwaes/GypHxkv+j7nUIztwY/l YwK3pzQTrXqabSE9U0JQFX1JxJN5AsFd3VXGh5Ysl1aGlRkjMln20H3oBwkRZ3kQ sfIzjShAbHs5uV0NlXAIx5dV0gXvVDxmpomLAEl1AIcBeF24JtmrCJtsNLjDLy8p 9BDphk2Bn0QUO1yejRQRiaTv4ll++HsJX+aBbF+zV8HrsKLhfqyTDFBpgP2xSJhZ fSqjw+iDf979/cBQzH7zGfG7lFySILM8r5jxkJgn6oIHx6MLYz1MHZOD620aEVqT sfn3JDMy3yWJBGIuXQLzF0JiESMx7+c= -----END CERTIFICATE-----Generated at Sun May 4 18:33:51 2025 by rpki-client