$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/964f30b0-33a6-3ea2-8be7-756e7851ea4c.roa File: 964f30b0-33a6-3ea2-8be7-756e7851ea4c.roa (raw, json) Hash identifier: LxwQKBtUHvKwbWsXnyt/gMcVGiMetgaK8k7GyMKpRzw= Subject key identifier: 01:2F:DF:96:B6:40:8C:73:63:B2:EC:22:10:80:6F:24:52:9C:0F:FA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A78528BA352A30D4B2CFCF00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/964f30b0-33a6-3ea2-8be7-756e7851ea4c.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.203.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:28:ba:35:2a:30:d4:b2:cf:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=5cc312ad-4e6d-4222-baa6-2147d00247ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:5e:3b:f8:3b:5a:c9:c9:57:3b:79:38:90:d5: af:7b:e5:a6:5f:5e:67:ef:90:86:5c:95:71:fb:c4: 72:6e:bd:30:cc:b0:9d:a5:db:d4:93:a5:0b:c8:e7: 7d:4b:c4:bb:72:bf:e9:31:ff:65:0b:df:6c:bc:43: 78:51:08:ce:46:23:98:b9:ca:07:fe:72:a4:e9:14: f3:8c:73:08:0e:f0:34:89:93:63:45:cb:a9:03:f3: 21:02:e2:96:3a:e9:e5:a8:99:71:fc:03:ac:31:e4: 17:de:42:70:f0:50:72:10:75:f8:1c:2e:01:5a:c0: d1:f6:5b:6d:6c:24:3e:b7:4c:b5:ee:31:cb:a4:80: 03:ad:19:42:40:3a:ea:d5:12:c1:32:c4:98:69:1f: 45:e2:fb:c8:1d:5d:f4:17:c9:1a:aa:23:66:36:f4: 26:6a:ab:9a:5e:67:22:a0:49:e7:00:9f:26:fc:46: 3b:1e:2b:76:0d:0a:06:04:71:4b:bd:50:ab:15:35: 59:d1:14:88:3d:54:51:a9:4f:74:b6:a6:21:e3:76: 13:36:c1:21:67:9d:a4:53:5a:52:c0:2a:5b:ed:6f: 90:fa:3a:bd:30:9a:35:25:97:98:61:ea:22:a7:dd: e1:1e:36:eb:19:5c:2f:d9:cc:1f:35:1b:a8:2f:83: 63:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2F:DF:96:B6:40:8C:73:63:B2:EC:22:10:80:6F:24:52:9C:0F:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/964f30b0-33a6-3ea2-8be7-756e7851ea4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.203.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:57:1f:04:c9:56:2e:6e:d6:27:72:4c:46:5f:25:13:f6:7b: 55:9c:5d:26:5b:1e:75:c4:2d:f8:7c:d2:3d:47:fa:04:32:cd: 86:1f:e4:76:47:a9:6c:e8:2d:d5:db:f7:f4:05:84:ae:a5:05: 24:8e:9f:4a:6d:ef:b9:4a:df:6f:fd:38:98:84:09:43:67:99: 93:6f:a8:1e:12:2a:6e:01:df:aa:70:52:64:24:48:64:c7:bf: ea:2f:09:f5:ed:3b:2b:b1:4b:bf:17:87:43:54:49:ac:85:3a: e2:c6:30:ce:42:a1:f1:14:ea:01:95:c2:40:1f:59:1c:3d:b5: 01:89:d8:a6:2f:6e:b6:da:6e:2d:8f:8e:1b:d4:e0:97:38:6e: ce:8d:d3:b7:15:7b:4b:1f:6e:7c:f0:3e:c7:0b:ed:04:b2:58: 22:38:33:ff:c7:2e:b2:e0:8a:3f:a7:6a:9b:42:f4:7b:e3:e5: 0c:b3:43:34:69:bd:0d:2e:3f:bd:54:d4:0c:c6:2e:b2:15:d6: 96:37:2a:03:9c:70:0d:ac:85:8a:31:98:cd:fc:4d:94:7c:9c: e8:22:ab:81:8b:e7:48:90:cf:ee:b4:2a:95:94:77:2c:ab:67: 39:a5:22:10:c1:12:b2:70:36:d6:3c:95:3f:8d:5a:39:f7:76: 97:08:8a:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhSi6NSow1LLPzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NWNjMzEyYWQtNGU2ZC00MjIyLWJhYTYtMjE0N2QwMDI0N2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5147+DtayclXO3k4kNWve+WmX15n75CGXJVx +8Rybr0wzLCdpdvUk6ULyOd9S8S7cr/pMf9lC99svEN4UQjORiOYucoH/nKk6RTz jHMIDvA0iZNjRcupA/MhAuKWOunlqJlx/AOsMeQX3kJw8FByEHX4HC4BWsDR9ltt bCQ+t0y17jHLpIADrRlCQDrq1RLBMsSYaR9F4vvIHV30F8kaqiNmNvQmaquaXmci oEnnAJ8m/EY7Hit2DQoGBHFLvVCrFTVZ0RSIPVRRqU90tqYh43YTNsEhZ52kU1pS wCpb7W+Q+jq9MJo1JZeYYeoip93hHjbrGVwv2cwfNRuoL4NjfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEv35a2QIxzY7LsIhCAbyRSnA/6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTY0ZjMwYjAtMzNhNi0z ZWEyLThiZTctNzU2ZTc4NTFlYTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI8vbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNXHwTJVi5u1idyTEZfJRP2e1WcXSZbHnXELfh80j1H+gQyzYYf5HZH qWzoLdXb9/QFhK6lBSSOn0pt77lK32/9OJiECUNnmZNvqB4SKm4B36pwUmQkSGTH v+ovCfXtOyuxS78Xh0NUSayFOuLGMM5CofEU6gGVwkAfWRw9tQGJ2KYvbrbabi2P jhvU4Jc4bs6N07cVe0sfbnzwPscL7QSyWCI4M//HLrLgij+naptC9Hvj5QyzQzRp vQ0uP71U1AzGLrIV1pY3KgOccA2shYoxmM38TZR8nOgiq4GL50iQz+60KpWUdyyr ZzmlIhDBErJwNtY8lT+NWjn3dpcIisM= -----END CERTIFICATE-----Generated at Sat Apr 26 17:47:37 2025 by rpki-client