$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4b254641-3da0-3772-a082-60261fe92f1a.roa File: 4b254641-3da0-3772-a082-60261fe92f1a.roa (raw, json) Hash identifier: J2GcaCWniyei8QGVrslvxAbFAaiPyOc/+AOFNZkN0sg= Subject key identifier: 75:33:E8:ED:C7:CC:97:AB:6B:3C:C5:77:A2:E0:4C:40:BA:5F:F5:EF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785353897167DF46305CA80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4b254641-3da0-3772-a082-60261fe92f1a.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.203.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:35:38:97:16:7d:f4:63:05:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=38aea8d7-f1f9-40c0-bffc-eec27dc7aa8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:23:61:58:a9:dc:b6:d8:b6:24:85:a8:5d:b0: 6c:51:b5:57:18:ad:36:b7:9d:25:44:7c:3c:13:8e: 20:7f:4c:de:f2:d5:a2:61:23:d5:33:67:7e:91:6e: 8d:7b:dd:40:4b:c5:f7:87:0c:76:c0:e9:cf:a5:74: fb:1f:51:91:59:6f:d5:9d:83:e3:ce:e6:e3:cb:19: 7c:4e:af:63:e8:21:f1:98:a9:b3:ac:30:7a:48:47: ad:99:6c:c4:48:c9:5e:3a:54:ba:0f:d1:6e:51:f9: 62:7d:c7:19:a1:56:39:02:31:8e:f3:39:26:d5:e3: 7e:fc:56:2a:19:9a:fc:e0:d9:81:ac:9e:61:d8:d9: 21:4b:9a:00:16:5e:77:cf:79:cc:65:8a:07:ac:9d: c2:aa:d0:9f:a2:fd:5e:f8:80:e2:1e:38:c3:47:fc: 37:55:19:4d:c2:4f:c1:dd:31:11:84:43:bf:13:c1: 5b:57:13:dd:de:d2:9d:8e:20:08:f8:cd:0f:6e:e1: 06:62:6c:c2:b1:5b:92:d3:9d:a3:5a:cc:64:5c:82: a7:b7:54:ba:79:7e:5d:9e:3e:59:a0:86:83:2c:78: 05:7d:c5:08:05:ca:e8:ac:0f:90:a2:f4:95:ef:9a: ff:90:ca:4c:fd:94:51:e8:4a:c9:40:d9:36:b4:d9: 27:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:33:E8:ED:C7:CC:97:AB:6B:3C:C5:77:A2:E0:4C:40:BA:5F:F5:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4b254641-3da0-3772-a082-60261fe92f1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.203.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:c0:08:46:c9:b2:d0:56:7c:3c:67:57:18:d8:f3:84:59:57: f9:5a:33:41:9c:5c:78:35:41:02:b4:6c:6b:89:02:b7:91:9f: ce:d9:5f:12:28:d2:c4:e2:14:14:6a:f9:d8:9e:6f:12:49:71: b8:37:d4:96:f3:d3:a7:e3:80:09:73:3e:1d:ca:01:ce:df:8f: 36:0b:2c:f4:a0:6b:7e:a2:02:01:80:4e:80:cf:4a:68:d7:e4: e1:18:f7:43:e6:1d:9f:86:76:fe:ce:ee:9c:36:5a:3c:6b:96: 46:44:6f:be:05:a5:df:06:ec:2a:44:a8:66:6f:7f:5d:c6:5d: eb:d6:ae:e9:f1:01:3b:f3:7c:83:5c:57:ae:aa:13:8a:75:e0: ef:0f:86:76:41:8a:b4:61:31:cd:d6:c2:fd:a3:a3:03:60:4c: 8a:61:86:e2:4d:4f:d5:fe:8a:c7:89:47:1f:e0:4a:f9:38:bd: ca:50:c4:db:3e:89:7d:2e:53:53:5a:79:4c:3b:79:f7:0d:26: 38:cb:9b:50:8d:55:b6:2d:2e:10:ea:96:0a:1d:e1:fd:ad:78: 92:db:d0:03:73:4e:6d:69:c8:de:43:ed:0f:4a:78:b0:09:12: c2:b6:b2:55:e1:94:19:14:9f:7b:29:e0:76:88:86:ea:3b:2d: 9b:7e:1c:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhTU4lxZ99GMFyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MzhhZWE4ZDctZjFmOS00MGMwLWJmZmMtZWVjMjdkYzdhYThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCNhWKnctti2JIWoXbBsUbVXGK02t50lRHw8 E44gf0ze8tWiYSPVM2d+kW6Ne91AS8X3hwx2wOnPpXT7H1GRWW/VnYPjzubjyxl8 Tq9j6CHxmKmzrDB6SEetmWzESMleOlS6D9FuUflifccZoVY5AjGO8zkm1eN+/FYq GZr84NmBrJ5h2NkhS5oAFl53z3nMZYoHrJ3CqtCfov1e+IDiHjjDR/w3VRlNwk/B 3TERhEO/E8FbVxPd3tKdjiAI+M0PbuEGYmzCsVuS052jWsxkXIKnt1S6eX5dnj5Z oIaDLHgFfcUIBcrorA+QovSV75r/kMpM/ZRR6ErJQNk2tNknkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUz6O3HzJerazzFd6LgTEC6X/XvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGIyNTQ2NDEtM2RhMC0z NzcyLWEwODItNjAyNjFmZTkyZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI8voMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPACEbJstBWfDxnVxjY84RZV/laM0GcXHg1QQK0bGuJAreRn87ZXxIo 0sTiFBRq+diebxJJcbg31Jbz06fjgAlzPh3KAc7fjzYLLPSga36iAgGAToDPSmjX 5OEY90PmHZ+Gdv7O7pw2WjxrlkZEb74Fpd8G7CpEqGZvf13GXevWrunxATvzfINc V66qE4p14O8PhnZBirRhMc3Wwv2jowNgTIphhuJNT9X+iseJRx/gSvk4vcpQxNs+ iX0uU1NaeUw7efcNJjjLm1CNVbYtLhDqlgod4f2teJLb0ANzTm1pyN5D7Q9KeLAJ EsK2slXhlBkUn3sp4HaIhuo7LZt+HMM= -----END CERTIFICATE-----Generated at Sat Apr 26 20:25:07 2025 by rpki-client