$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/35cd0b65-4359-3b3d-a4f2-971da0a86ee3.roa File: 35cd0b65-4359-3b3d-a4f2-971da0a86ee3.roa (raw, json) Hash identifier: e1WdOa62yUD0R/Kz/FZz9DKqpolAcwSwH4DwqKbWx8g= Subject key identifier: 70:C3:EB:56:4C:E3:24:A2:86:73:E8:4C:97:88:15:3C:A0:09:89:37 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285849C20AA9B9FBF3912559E63D80 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/35cd0b65-4359-3b3d-a4f2-971da0a86ee3.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 20115 IP address blocks: 35.144.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:a9:b9:fb:f3:91:25:59:e6:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=1ffe5ade-3c12-4ad3-9040-75ddffa7c50b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:99:7d:81:22:92:6f:05:06:51:bc:35:43:e8: d0:aa:c9:2b:f7:ad:03:43:57:9d:b9:84:90:d3:1e: fd:cd:ff:bf:b0:32:48:1d:ad:19:53:8c:0f:01:52: 34:86:33:2b:15:69:ed:7e:9b:6d:07:f4:74:b7:dd: 05:66:51:ac:1e:78:96:77:44:80:19:72:e5:79:81: d9:89:0c:d8:6a:b5:ae:4f:b4:f2:e7:4e:df:83:0c: 1a:a9:ea:54:bc:ef:03:d3:9f:ea:89:90:b9:b1:41: 16:84:5b:0c:bf:5c:3c:89:c8:b2:67:5b:12:68:a0: 99:e2:b2:11:8d:9e:5c:13:5a:d4:a8:a2:bd:76:3d: 12:eb:fe:e8:a5:fc:90:31:04:5f:0a:66:d6:87:0d: 00:60:70:af:b9:2a:ad:f8:3c:11:bb:a9:e4:4c:4b: 0c:2f:e6:de:dd:62:f6:ec:58:ef:94:bf:3e:d1:87: 2d:94:d8:bf:c8:8a:eb:ea:ef:cd:ce:36:93:bb:bd: 1b:ba:da:32:8a:b4:d2:d5:af:46:f4:f0:55:6b:a4: c6:f2:11:65:56:b7:f6:6d:f9:56:6b:2e:0c:91:80: 1e:4c:c9:69:a9:8c:dd:3c:0d:99:ab:11:aa:a2:5f: 72:a4:bb:06:40:3c:06:5b:ac:aa:0c:e6:da:7e:26: a1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C3:EB:56:4C:E3:24:A2:86:73:E8:4C:97:88:15:3C:A0:09:89:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/35cd0b65-4359-3b3d-a4f2-971da0a86ee3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 35.144.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:2b:ab:a8:52:0b:5c:18:87:96:d3:eb:cf:2e:3d:2d:f1:3c: 4a:f1:29:60:b3:1d:12:38:8a:3f:a1:28:2a:10:5c:2e:b4:b4: 39:12:11:40:af:3b:ce:bd:a3:49:48:01:6e:33:c4:32:1b:b0: 8e:2e:42:0d:ed:b7:2e:3f:60:ab:64:ea:c5:e4:c7:ed:0a:1e: 78:6e:d6:c9:91:27:f4:88:af:6f:2b:a8:40:81:0c:e6:00:bb: 6f:44:ac:ff:d6:41:ef:0c:73:25:5c:8a:4f:33:6b:57:68:bb: 01:1e:26:06:37:d1:5e:ac:5e:ff:10:9c:89:69:d7:79:2d:a3: 64:7b:18:20:e1:08:b5:41:1f:9a:33:bd:dd:f1:95:c2:12:1c: 48:c2:bf:a1:4f:39:eb:72:65:25:4f:1f:ff:d9:3c:21:9f:f6: 59:96:9f:37:ba:82:f0:5b:48:0e:25:aa:1e:b7:29:99:05:84: 35:1c:12:5e:7c:b0:32:49:7a:73:37:69:bd:c0:15:67:32:24: e7:dd:9f:a5:92:60:c1:ff:2b:b9:8a:fe:0e:bb:f6:7d:69:e8: 42:21:c4:24:16:22:54:d7:d9:1a:6d:1a:be:04:15:bc:fe:c9: a3:7d:28:7f:77:ef:42:fb:cb:55:d9:a7:8c:05:e9:2d:84:c2: 7b:74:99:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCqm5+/ORJVnmPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk MWZmZTVhZGUtM2MxMi00YWQzLTkwNDAtNzVkZGZmYTdjNTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZl9gSKSbwUGUbw1Q+jQqskr960DQ1eduYSQ 0x79zf+/sDJIHa0ZU4wPAVI0hjMrFWntfpttB/R0t90FZlGsHniWd0SAGXLleYHZ iQzYarWuT7Ty507fgwwaqepUvO8D05/qiZC5sUEWhFsMv1w8iciyZ1sSaKCZ4rIR jZ5cE1rUqKK9dj0S6/7opfyQMQRfCmbWhw0AYHCvuSqt+DwRu6nkTEsML+be3WL2 7FjvlL8+0YctlNi/yIrr6u/NzjaTu70butoyirTS1a9G9PBVa6TG8hFlVrf2bflW ay4MkYAeTMlpqYzdPA2ZqxGqol9ypLsGQDwGW6yqDObafiahkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDD61ZM4ySihnPoTJeIFTygCYk3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMzVjZDBiNjUtNDM1OS0z YjNkLWE0ZjItOTcxZGEwYTg2ZWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI5CAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKIrq6hSC1wYh5bT688uPS3xPErxKWCzHRI4ij+hKCoQXC60tDkSEUCv O869o0lIAW4zxDIbsI4uQg3tty4/YKtk6sXkx+0KHnhu1smRJ/SIr28rqECBDOYA u29ErP/WQe8McyVcik8za1douwEeJgY30V6sXv8QnIlp13kto2R7GCDhCLVBH5oz vd3xlcISHEjCv6FPOetyZSVPH//ZPCGf9lmWnze6gvBbSA4lqh63KZkFhDUcEl58 sDJJenM3ab3AFWcyJOfdn6WSYMH/K7mK/g679n1p6EIhxCQWIlTX2RptGr4EFbz+ yaN9KH9370L7y1XZp4wF6S2Ewnt0mRA= -----END CERTIFICATE-----Generated at Sat May 10 04:10:30 2025 by rpki-client