$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25cf0945-d5e8-3596-b1e6-0f7575079833.roa File: 25cf0945-d5e8-3596-b1e6-0f7575079833.roa (raw, json) Hash identifier: iuHjNzlFaktZZ293vXw9rY5VhiEdv+zCHejZfZws21k= Subject key identifier: F7:C1:45:B2:76:DE:EF:43:0F:A0:0F:0B:B7:0F:32:FB:81:CD:69:7A Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784D9260FA6A3AD04CC2600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25cf0945-d5e8-3596-b1e6-0f7575079833.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.243.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:d9:26:0f:a6:a3:ad:04:cc:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=b24dc015-0993-48a5-b678-985fba3b928a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:58:ff:13:60:02:6c:a6:a7:c2:6e:b7:55:1f: 37:b8:c5:4a:28:d6:64:c9:cc:21:b9:80:a5:56:1a: 05:ed:38:a5:4c:7f:57:1e:af:40:53:ee:b5:f0:39: 19:fa:3d:0d:e2:bc:4a:69:c6:f4:0a:ee:1f:ee:68: 2a:0f:e3:f0:af:bb:11:19:cc:da:31:4f:ce:61:70: 17:4f:d4:fd:5e:3e:85:65:1d:c8:02:fe:69:12:09: 2c:73:52:21:a7:97:ed:9b:32:71:ad:f5:ae:47:63: 25:49:25:24:a7:ac:09:eb:19:a6:e5:0d:ef:3b:d4: a9:dc:8a:a3:fe:3d:61:b3:87:f1:8a:df:8b:0d:6c: 8b:d0:89:d4:db:15:fb:2b:0e:c3:77:ea:06:55:64: 24:8f:7b:5c:8d:58:b8:39:65:f5:9d:b2:1e:4e:c3: 0d:cd:fd:40:c3:cf:a1:d5:1a:d2:41:2a:cc:ae:51: 40:64:99:a8:0a:87:fa:12:6b:b9:e5:39:f8:ee:fb: 55:02:bd:20:a1:3f:dc:8b:46:45:44:d7:f0:c1:52: 24:85:2b:4f:21:49:b7:69:89:5b:a6:cc:af:38:42: 88:b1:b4:08:52:92:a8:44:2d:c1:c8:7c:23:9c:46: e5:03:1b:15:17:b4:9b:5a:c8:ae:a3:c0:a2:c2:04: d9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C1:45:B2:76:DE:EF:43:0F:A0:0F:0B:B7:0F:32:FB:81:CD:69:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25cf0945-d5e8-3596-b1e6-0f7575079833.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.243.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:89:02:0a:14:24:ee:a8:64:f0:43:b8:aa:fb:dd:f2:5a:4b: 44:e7:55:c0:2a:48:c1:5e:82:0b:90:60:cd:21:88:d0:1c:e7: 40:65:33:e5:7e:2f:37:36:ea:3d:82:7c:02:4d:d2:b8:16:44: 49:4b:1d:f8:30:aa:ad:05:a7:37:fb:c0:67:95:ba:2d:d8:be: d2:22:79:24:1b:7c:89:35:45:81:2e:4b:cf:60:e8:64:95:50: 9c:77:ac:0d:7e:d9:76:ed:06:f8:d7:d6:3f:46:a3:7c:ee:89: 26:82:40:61:3f:2c:9f:4f:91:d9:7c:89:7f:25:dc:8a:ed:98: 30:a5:dd:75:0d:5b:e6:9d:fa:fe:cb:d8:8d:e8:ff:98:0c:89: 58:69:8e:11:3f:7d:76:67:81:94:56:e6:26:e5:3a:fa:36:70: 0f:12:ce:a6:e0:8d:61:e1:8d:34:ea:3a:7a:aa:af:a5:5a:f9: a5:93:b7:73:15:aa:1d:01:d5:24:57:63:06:09:55:ba:78:b1: 27:b4:35:4c:06:8c:86:8a:97:d1:63:b9:24:3a:7b:c3:29:48: 13:72:be:0f:cb:13:d3:0c:d1:32:bb:cf:23:cb:99:c6:68:37: a4:05:58:89:f0:9e:ed:d2:82:f4:42:16:13:6a:35:49:41:3d: 29:dc:7d:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNkmD6ajrQTMJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YjI0ZGMwMTUtMDk5My00OGE1LWI2NzgtOTg1ZmJhM2I5MjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Vj/E2ACbKanwm63VR83uMVKKNZkycwhuYCl VhoF7TilTH9XHq9AU+618DkZ+j0N4rxKacb0Cu4f7mgqD+Pwr7sRGczaMU/OYXAX T9T9Xj6FZR3IAv5pEgksc1Ihp5ftmzJxrfWuR2MlSSUkp6wJ6xmm5Q3vO9Sp3Iqj /j1hs4fxit+LDWyL0InU2xX7Kw7Dd+oGVWQkj3tcjVi4OWX1nbIeTsMNzf1Aw8+h 1RrSQSrMrlFAZJmoCof6Emu55Tn47vtVAr0goT/ci0ZFRNfwwVIkhStPIUm3aYlb psyvOEKIsbQIUpKoRC3ByHwjnEblAxsVF7SbWsiuo8CiwgTZmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfBRbJ23u9DD6APC7cPMvuBzWl6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjVjZjA5NDUtZDVlOC0z NTk2LWIxZTYtMGY3NTc1MDc5ODMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI/MoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmJAgoUJO6oZPBDuKr73fJaS0TnVcAqSMFegguQYM0hiNAc50BlM+V+ Lzc26j2CfAJN0rgWRElLHfgwqq0Fpzf7wGeVui3YvtIieSQbfIk1RYEuS89g6GSV UJx3rA1+2XbtBvjX1j9Go3zuiSaCQGE/LJ9Pkdl8iX8l3IrtmDCl3XUNW+ad+v7L 2I3o/5gMiVhpjhE/fXZngZRW5iblOvo2cA8SzqbgjWHhjTTqOnqqr6Va+aWTt3MV qh0B1SRXYwYJVbp4sSe0NUwGjIaKl9FjuSQ6e8MpSBNyvg/LE9MM0TK7zyPLmcZo N6QFWInwnu3SgvRCFhNqNUlBPSncfZ4= -----END CERTIFICATE-----Generated at Sat Apr 26 16:41:46 2025 by rpki-client