$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2448fbdc-168d-368d-b0df-b0669d1b3108.roa File: 2448fbdc-168d-368d-b0df-b0669d1b3108.roa (raw, json) Hash identifier: qPqX/NbXow6rWhfMNmBwW70S4Kaw55qZYv2vt6jrMBI= Subject key identifier: C2:93:6B:0C:23:C3:4A:BD:04:7A:CD:86:05:4D:6B:B5:77:49:99:D9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784D27508E7A0C79A690500 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2448fbdc-168d-368d-b0df-b0669d1b3108.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.235.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:d2:75:08:e7:a0:c7:9a:69:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=2d5dbc8f-bf26-4690-bc3d-7bd7ce76cc28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ac:dd:51:18:9c:39:8b:6b:f0:ff:86:03:16: 69:af:8f:6d:5e:3f:d2:bc:64:dc:98:58:8c:92:e2: 0c:e6:32:bf:4f:0d:b3:9c:6e:34:3d:bd:d1:84:33: 05:19:16:9e:ba:a4:9a:6e:e7:f4:33:3e:15:2f:2d: 80:53:8a:24:62:88:b9:f3:17:b5:ea:32:17:5a:11: 61:24:6b:bf:13:a5:9b:49:6b:82:d8:61:26:69:bd: 4c:76:64:b3:4d:95:9c:a6:dc:61:f8:17:7f:dc:a4: ec:e7:03:16:12:71:fc:a2:f4:b5:c0:97:99:bd:1f: 7d:94:60:10:d1:1c:81:23:84:39:bc:92:ca:ab:9f: 5f:a6:64:7c:d9:a6:93:8c:8e:1e:24:09:0a:88:d0: 89:bb:02:13:22:d3:ef:34:cc:d2:60:c5:3e:1c:d3: 74:a8:61:f7:77:c6:91:7d:37:aa:14:b1:93:8b:b5: e7:05:67:c5:bc:5d:0a:90:f5:12:d2:49:65:9f:35: da:17:37:13:46:6f:45:c2:a0:70:bc:57:ac:af:91: 5a:2d:95:7b:25:8b:53:2f:57:19:d1:75:42:eb:c1: 64:e6:6d:ae:d3:6b:e3:8a:4e:f8:7c:99:47:7c:2c: 7c:a3:14:ae:0c:c0:d5:17:d5:7f:70:94:c1:c1:1b: d3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:93:6B:0C:23:C3:4A:BD:04:7A:CD:86:05:4D:6B:B5:77:49:99:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2448fbdc-168d-368d-b0df-b0669d1b3108.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.235.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:86:3a:20:18:df:75:f0:60:9c:5a:a3:25:b7:33:d1:73:65: 7e:ce:95:af:3b:1a:96:00:21:36:4f:ba:2a:82:2e:ea:4f:ac: 29:23:a9:14:31:1e:27:e9:43:90:35:bd:45:a5:d5:e2:21:69: 26:72:77:27:0d:4a:57:9f:47:52:b1:03:92:96:bd:63:99:f7: c0:97:6d:23:d4:11:ec:a6:90:04:6e:92:69:b1:26:61:c0:ef: a0:1b:f1:55:5d:54:74:bf:4b:7a:63:a6:4e:2c:23:96:51:13: 88:ba:40:87:7c:05:f0:04:f4:df:de:cf:bc:84:c1:8c:77:8a: 81:55:79:de:8f:97:86:fe:f1:58:7d:5d:bd:3e:ec:6b:3e:fa: 3b:a2:9e:ad:0f:69:c7:2d:65:60:8e:18:76:53:dc:14:e9:f3: 6a:bc:3e:a7:9b:27:fb:d7:cd:16:63:91:5e:a5:09:de:2c:4a: 62:9d:29:53:f6:05:38:57:5c:57:f7:6d:0e:ba:fe:09:1f:9d: 7c:c1:50:64:14:f1:2f:97:11:65:4b:c9:b9:4d:6a:fe:71:af: c2:41:0c:57:07:fa:fa:e1:05:48:5d:55:fb:3d:e3:22:3c:b5: dd:cc:14:45:13:f4:f5:14:a3:14:32:d6:d4:e5:fa:a3:66:ce: 40:98:0b:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNJ1COegx5ppBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MmQ1ZGJjOGYtYmYyNi00NjkwLWJjM2QtN2JkN2NlNzZjYzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6zdURicOYtr8P+GAxZpr49tXj/SvGTcmFiM kuIM5jK/Tw2znG40Pb3RhDMFGRaeuqSabuf0Mz4VLy2AU4okYoi58xe16jIXWhFh JGu/E6WbSWuC2GEmab1MdmSzTZWcptxh+Bd/3KTs5wMWEnH8ovS1wJeZvR99lGAQ 0RyBI4Q5vJLKq59fpmR82aaTjI4eJAkKiNCJuwITItPvNMzSYMU+HNN0qGH3d8aR fTeqFLGTi7XnBWfFvF0KkPUS0kllnzXaFzcTRm9FwqBwvFesr5FaLZV7JYtTL1cZ 0XVC68Fk5m2u02vjik74fJlHfCx8oxSuDMDVF9V/cJTBwRvTowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKTawwjw0q9BHrNhgVNa7V3SZnZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjQ0OGZiZGMtMTY4ZC0z NjhkLWIwZGYtYjA2NjlkMWIzMTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI+vYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuGOiAY33XwYJxaoyW3M9FzZX7Ola87GpYAITZPuiqCLupPrCkjqRQx HifpQ5A1vUWl1eIhaSZydycNSlefR1KxA5KWvWOZ98CXbSPUEeymkARukmmxJmHA 76Ab8VVdVHS/S3pjpk4sI5ZRE4i6QId8BfAE9N/ez7yEwYx3ioFVed6Pl4b+8Vh9 Xb0+7Gs++juinq0PacctZWCOGHZT3BTp82q8PqebJ/vXzRZjkV6lCd4sSmKdKVP2 BThXXFf3bQ66/gkfnXzBUGQU8S+XEWVLyblNav5xr8JBDFcH+vrhBUhdVfs94yI8 td3MFEUT9PUUoxQy1tTl+qNmzkCYC3c= -----END CERTIFICATE-----Generated at Sat Apr 26 18:04:50 2025 by rpki-client