$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/71df1d2d-5834-3cbb-aa60-6cbca23d6243.roa File: 71df1d2d-5834-3cbb-aa60-6cbca23d6243.roa (raw, json) Hash identifier: xjb1EZqfRArJ6qFTVzkpGA/GC/0+zGCWw1vddVtaaCo= Subject key identifier: CB:54:E3:49:94:12:57:5A:78:52:F5:D2:24:61:4A:C1:81:8F:F1:F9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A7852B32D71F0E79FE0EEA80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/71df1d2d-5834-3cbb-aa60-6cbca23d6243.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.203.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:2b:32:d7:1f:0e:79:fe:0e:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=92d35d29-19fc-4fc6-815d-41acbca1f20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:06:db:c2:34:71:43:ed:6e:d0:53:ee:fa:21: c1:ba:a8:93:f5:62:74:d6:53:e3:8d:54:9b:47:f5: 0f:5d:ab:11:7e:fb:00:65:b9:83:59:ca:8d:64:b3: 12:ca:07:9a:fb:42:cf:5f:4f:b6:3c:7b:b1:72:0e: 03:d4:3d:05:cb:5b:e1:71:a4:3e:b8:2a:f7:fe:1a: 52:d3:e5:9c:6c:60:fe:2d:e9:c4:78:2f:8d:92:84: 88:5d:1d:8d:98:fd:ca:54:fd:a0:6a:d0:cc:5d:73: 51:57:6d:1b:09:98:2c:48:44:17:60:d7:6d:52:01: c0:ef:4f:1b:04:06:76:f0:0a:38:05:df:e9:79:f2: 01:95:bd:8a:65:77:06:24:3f:83:dd:1a:d1:da:53: a7:c1:a2:6b:00:ed:af:7a:52:8a:61:df:49:82:c8: 79:ed:c7:71:cb:29:9f:b1:07:f2:20:01:49:cf:92: 83:58:ca:63:17:b6:9a:30:03:b2:7a:ad:67:59:75: 0e:94:5e:01:d3:c9:53:40:c6:3e:e2:e0:ab:6a:ba: d3:e2:20:65:70:7f:63:84:1a:10:6e:9a:48:1d:f6: 12:b8:a7:4c:5b:9c:e0:51:a8:73:5e:9e:80:e5:5d: ee:df:66:dc:d9:ae:b5:1c:8c:5b:c3:1d:36:ec:bd: 6f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:54:E3:49:94:12:57:5A:78:52:F5:D2:24:61:4A:C1:81:8F:F1:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/71df1d2d-5834-3cbb-aa60-6cbca23d6243.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.203.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:5a:1a:f5:38:43:fd:d9:d7:b7:bf:e9:29:7f:7f:60:a9:0d: 09:6f:68:82:da:10:99:05:87:5c:a8:d1:bf:58:cf:89:d7:4a: 57:08:2d:81:b3:f5:93:3c:0a:b2:eb:47:ba:cb:e5:74:a6:eb: af:6d:26:e3:27:76:e1:1b:aa:7d:3f:9d:b8:f3:d1:c9:b8:92: ba:09:f6:b9:ce:3a:22:1b:84:70:d0:b6:9a:e6:4b:07:ce:01: dd:cf:74:ad:ab:cc:47:f0:a2:fc:82:73:97:ed:28:af:1e:8c: 53:2e:69:de:20:e4:a2:99:74:db:d0:82:85:b8:0b:e4:fe:33: 49:bd:4d:6f:41:61:84:99:05:07:00:dd:05:54:09:14:23:e3: 45:e5:57:6e:c9:57:be:79:ba:2a:90:1e:54:42:ef:8c:33:1d: 92:30:0b:c0:cb:c4:5d:ba:6f:68:5b:33:1a:ae:40:22:41:2d: 32:da:dd:cf:47:52:e4:19:67:c3:4f:23:16:ff:11:69:54:51: ac:8b:f2:d8:75:42:b4:f4:b9:18:8b:80:23:97:60:dd:60:28: 97:fc:cd:32:4f:d1:5e:ac:ff:14:5d:da:b6:a3:6b:32:40:93: ec:25:3e:a5:fe:87:d5:3a:a6:69:f0:ad:e7:7d:f7:8b:2e:39: c0:ea:98:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhSsy1x8Oef4O6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OTJkMzVkMjktMTlmYy00ZmM2LTgxNWQtNDFhY2JjYTFmMjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgbbwjRxQ+1u0FPu+iHBuqiT9WJ01lPjjVSb R/UPXasRfvsAZbmDWcqNZLMSygea+0LPX0+2PHuxcg4D1D0Fy1vhcaQ+uCr3/hpS 0+WcbGD+LenEeC+NkoSIXR2NmP3KVP2gatDMXXNRV20bCZgsSEQXYNdtUgHA708b BAZ28Ao4Bd/pefIBlb2KZXcGJD+D3RrR2lOnwaJrAO2velKKYd9Jgsh57cdxyymf sQfyIAFJz5KDWMpjF7aaMAOyeq1nWXUOlF4B08lTQMY+4uCrarrT4iBlcH9jhBoQ bppIHfYSuKdMW5zgUahzXp6A5V3u32bc2a61HIxbwx027L1vUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtU40mUEldaeFL10iRhSsGBj/H5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzFkZjFkMmQtNTgzNC0z Y2JiLWFhNjAtNmNiY2EyM2Q2MjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBI8viMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtaGvU4Q/3Z17e/6Sl/f2CpDQlvaILaEJkFh1yo0b9Yz4nXSlcILYGz 9ZM8CrLrR7rL5XSm669tJuMnduEbqn0/nbjz0cm4kroJ9rnOOiIbhHDQtprmSwfO Ad3PdK2rzEfwovyCc5ftKK8ejFMuad4g5KKZdNvQgoW4C+T+M0m9TW9BYYSZBQcA 3QVUCRQj40XlV27JV755uiqQHlRC74wzHZIwC8DLxF26b2hbMxquQCJBLTLa3c9H UuQZZ8NPIxb/EWlUUayL8th1QrT0uRiLgCOXYN1gKJf8zTJP0V6s/xRd2rajazJA k+wlPqX+h9U6pmnwred994suOcDqmBo= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:31 2025 by rpki-client