$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b2a3aea3-a626-34c6-a988-c509a0fa1ea2.roa File: b2a3aea3-a626-34c6-a988-c509a0fa1ea2.roa (raw, json) Hash identifier: 947OppSmzOAxNJF8l4T10BEnalLXG9bDwhcyR+KS4MI= Subject key identifier: 7B:06:6F:9C:99:B0:D8:25:71:8C:3A:A3:F4:FA:FB:C5:A2:B9:11:53 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784EEF4971B23D252DCF8E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b2a3aea3-a626-34c6-a988-c509a0fa1ea2.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 35.204.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ee:f4:97:1b:23:d2:52:dc:f8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=6b9bef82-76fc-4b15-a0a7-ae99250f8c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:71:22:ce:e1:53:e8:01:96:14:03:b6:c0:83: ed:5b:2f:79:42:0e:00:fe:cf:3a:a8:59:40:71:10: 40:7e:e0:98:58:7c:f3:c5:1c:43:23:1f:cd:84:06: e4:5b:76:c6:23:a8:35:cd:97:09:37:04:02:db:36: 4e:8c:5e:50:17:64:0b:1a:eb:17:db:cf:a3:e9:b6: 4b:7c:72:32:b8:30:b0:a6:be:65:f0:cd:a5:8f:43: 2f:59:c0:72:d2:8c:87:bc:84:46:4f:6c:7c:47:cd: cf:e9:fd:c4:5f:94:c5:17:c6:5f:2b:ed:02:14:84: 15:41:88:ba:5d:69:d7:14:3e:3b:7d:59:ca:54:97: 56:0b:cf:4a:55:42:f2:e9:44:13:d2:32:9c:96:b5: 32:af:ec:92:f2:8c:63:f6:f3:94:55:b1:c2:32:b6: 79:e7:83:50:e7:d6:0a:ec:f2:90:2d:8d:64:e6:47: eb:10:38:33:fc:58:68:a9:6d:12:59:4e:32:cf:1b: 5f:40:ee:02:d4:3b:ae:7a:5d:b1:f5:fd:0c:4e:7a: 30:d7:35:f2:9e:95:ab:01:31:48:c8:df:25:b7:36: 52:6b:53:a6:fa:66:46:78:94:ed:60:ca:78:26:d9: 9e:d8:a5:bf:46:15:5f:ba:5e:77:00:5f:b4:a9:1f: df:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:06:6F:9C:99:B0:D8:25:71:8C:3A:A3:F4:FA:FB:C5:A2:B9:11:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b2a3aea3-a626-34c6-a988-c509a0fa1ea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.204.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:33:b6:28:07:fd:5a:14:10:ed:1e:b7:a0:f3:85:5e:7e:27: 3f:fb:0a:68:69:86:a3:28:4d:47:6c:e6:c0:13:0c:74:43:84: 3d:bc:67:22:2b:6d:a7:37:47:da:43:99:e4:eb:43:88:fc:e0: 3a:fe:7c:8b:84:8e:14:cd:51:bf:30:2e:41:e8:8e:f7:dc:c1: c5:45:e1:b9:b3:71:4f:ef:53:b7:06:24:1e:36:03:01:e6:20: ff:b0:43:5e:82:87:9e:ef:01:48:f5:51:df:56:b6:af:3d:5b: d3:85:52:be:b1:d8:e6:27:77:9c:e4:42:e9:4b:f1:60:8e:6a: 37:b6:69:f3:74:5d:f9:10:87:ae:d4:f0:8e:be:fb:83:69:a8: ca:19:ad:de:a5:33:11:a9:74:05:47:56:f3:f1:61:2c:cb:31: a7:23:b1:2a:bf:4f:39:56:cf:38:a2:9a:a3:3f:59:39:97:f6: 41:5e:97:95:b4:c3:63:81:40:f2:5a:4e:0f:25:50:59:69:32: 04:b7:2a:d7:cf:06:d3:7e:a1:67:72:dc:93:9a:27:02:05:22: 84:79:65:5d:e5:52:a6:6a:6b:04:17:4d:35:99:7a:d0:eb:b3: 7f:15:ad:26:f2:89:74:da:9e:41:6d:1a:97:8d:ef:4d:c6:c4: 23:a0:2e:a1 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmnhO70lxsj0lLc+OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NmI5YmVmODItNzZmYy00YjE1LWEwYTctYWU5OTI1MGY4YzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXEizuFT6AGWFAO2wIPtWy95Qg4A/s86qFlA cRBAfuCYWHzzxRxDIx/NhAbkW3bGI6g1zZcJNwQC2zZOjF5QF2QLGusX28+j6bZL fHIyuDCwpr5l8M2lj0MvWcBy0oyHvIRGT2x8R83P6f3EX5TFF8ZfK+0CFIQVQYi6 XWnXFD47fVnKVJdWC89KVULy6UQT0jKclrUyr+yS8oxj9vOUVbHCMrZ554NQ59YK 7PKQLY1k5kfrEDgz/FhoqW0SWU4yzxtfQO4C1Duuel2x9f0MTnow1zXynpWrATFI yN8ltzZSa1Om+mZGeJTtYMp4Jtme2KW/RhVful53AF+0qR/fMwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHsGb5yZsNglcYw6o/T6+8WiuRFTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjJhM2FlYTMtYTYyNi0z NGM2LWE5ODgtYzUwOWEwZmExZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBI8wwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAfzO2KAf9WhQQ7R63oPOFXn4nP/sKaGmGoyhNR2zmwBMMdEOEPbxnIitt pzdH2kOZ5OtDiPzgOv58i4SOFM1RvzAuQeiO99zBxUXhubNxT+9TtwYkHjYDAeYg /7BDXoKHnu8BSPVR31a2rz1b04VSvrHY5id3nORC6UvxYI5qN7Zp83Rd+RCHrtTw jr77g2moyhmt3qUzEal0BUdW8/FhLMsxpyOxKr9POVbPOKKaoz9ZOZf2QV6XlbTD Y4FA8lpODyVQWWkyBLcq188G036hZ3Lck5onAgUihHllXeVSpmprBBdNNZl60Ouz fxWtJvKJdNqeQW0al43vTcbEI6AuoQ== -----END CERTIFICATE-----Generated at Sun Apr 27 11:32:58 2025 by rpki-client