$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b7b14f0d-1a6a-3994-94ac-4f48c92fa0e4.roa File: b7b14f0d-1a6a-3994-94ac-4f48c92fa0e4.roa (raw, json) Hash identifier: AJNlRZqHjT11br4fyGqLNnd6B5OmnjIvTyO4nAf+i90= Subject key identifier: 2F:50:B6:0F:6D:6A:9B:8C:A6:62:27:45:69:E9:25:E5:5C:38:01:47 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784F88A2912DAFDE5E6EAC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b7b14f0d-1a6a-3994-94ac-4f48c92fa0e4.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.201.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:f8:8a:29:12:da:fd:e5:e6:ea:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=ce296cb2-ef81-40c5-a445-c568835a5f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:af:ce:80:a2:e8:5c:f9:b8:ba:ff:4a:b4:a3: e1:ea:29:2f:89:63:7d:f9:47:15:73:c9:a3:63:46: 6f:89:89:ae:32:6f:d8:d5:05:66:7a:d6:c1:2a:1d: ce:0f:28:9e:b0:2c:f8:b1:be:6d:67:b7:55:c7:6a: ef:21:85:68:e0:cc:63:07:52:7e:c1:d2:e0:00:6e: ac:c5:26:3f:2b:38:28:b9:89:28:65:ee:85:db:ab: c8:1b:b3:14:8b:39:f1:b3:0f:3e:84:ad:c9:db:24: e2:3a:c4:dc:5f:93:38:eb:51:0e:7c:70:de:4f:ff: 16:dd:e0:05:52:1d:00:c7:1f:5a:81:f5:e8:62:f7: ef:98:df:08:00:d6:1e:43:03:da:a3:68:a1:b8:d1: 30:ed:3c:88:32:e6:e1:bf:da:66:3d:62:70:44:64: 9e:60:6f:20:25:2d:4f:d5:94:02:46:c1:f9:7a:1d: ca:28:88:22:2f:2d:05:d6:49:82:7b:b4:9a:3d:7c: de:63:26:a6:20:ae:e9:67:37:f4:be:07:48:4c:67: 04:86:dc:83:92:80:a8:fb:2b:e9:ce:45:83:24:39: 13:4c:63:97:a6:ac:f9:70:9e:e5:ad:1b:5e:fe:94: e2:5d:46:f9:01:e2:30:4e:6e:3a:2d:15:00:00:65: 71:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:50:B6:0F:6D:6A:9B:8C:A6:62:27:45:69:E9:25:E5:5C:38:01:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b7b14f0d-1a6a-3994-94ac-4f48c92fa0e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.201.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:7c:43:8c:1f:16:e1:5d:35:38:18:29:ff:db:41:ce:2b:77: b4:99:5e:24:d4:9f:12:18:76:ed:27:d6:7c:ad:f3:eb:4e:7f: c6:84:56:08:df:84:87:78:7c:45:9c:07:a2:df:38:cc:e8:f8: 25:37:df:e3:be:1c:cd:84:7e:0e:58:53:3d:88:4b:3a:cd:9b: 36:36:51:7e:71:36:bf:8c:8b:18:2a:8b:de:98:86:27:35:e0: f1:b6:cd:cd:39:c0:96:c4:55:8c:00:b4:d7:57:8e:c7:b6:c9: 97:fc:87:16:e0:c2:b3:61:70:80:bd:04:47:79:16:54:6f:f2: 67:ac:df:19:2a:12:e9:93:60:49:72:b0:8d:cf:cc:03:6f:cb: 6c:78:3f:58:d0:16:3e:b8:e3:5a:1c:b6:6c:78:a8:8a:78:69: a1:3b:15:2e:b0:49:0d:e9:2d:39:f1:5c:84:38:02:47:16:55: 21:cb:b8:96:b7:74:d2:0e:d4:db:76:fe:f3:f7:4d:6c:52:38: 45:61:1b:a6:61:7c:04:07:a5:77:4c:20:ae:61:96:74:c8:bf: de:10:29:47:a8:70:b8:5c:80:a1:51:bd:ae:49:cf:64:2e:ee: bd:dd:78:66:4f:59:e2:e9:0d:94:65:b9:fd:70:22:35:c5:f9: fa:a5:85:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPiKKRLa/eXm6sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk Y2UyOTZjYjItZWY4MS00MGM1LWE0NDUtYzU2ODgzNWE1Zjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAia/OgKLoXPm4uv9KtKPh6ikviWN9+UcVc8mj Y0ZviYmuMm/Y1QVmetbBKh3ODyiesCz4sb5tZ7dVx2rvIYVo4MxjB1J+wdLgAG6s xSY/KzgouYkoZe6F26vIG7MUiznxsw8+hK3J2yTiOsTcX5M461EOfHDeT/8W3eAF Uh0Axx9agfXoYvfvmN8IANYeQwPao2ihuNEw7TyIMubhv9pmPWJwRGSeYG8gJS1P 1ZQCRsH5eh3KKIgiLy0F1kmCe7SaPXzeYyamIK7pZzf0vgdITGcEhtyDkoCo+yvp zkWDJDkTTGOXpqz5cJ7lrRte/pTiXUb5AeIwTm46LRUAAGVxxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9Qtg9tapuMpmInRWnpJeVcOAFHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjdiMTRmMGQtMWE2YS0z OTk0LTk0YWMtNGY0OGM5MmZhMGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI8krMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJ8Q4wfFuFdNTgYKf/bQc4rd7SZXiTUnxIYdu0n1nyt8+tOf8aEVgjf hId4fEWcB6LfOMzo+CU33+O+HM2Efg5YUz2ISzrNmzY2UX5xNr+Mixgqi96Yhic1 4PG2zc05wJbEVYwAtNdXjse2yZf8hxbgwrNhcIC9BEd5FlRv8mes3xkqEumTYEly sI3PzANvy2x4P1jQFj6441octmx4qIp4aaE7FS6wSQ3pLTnxXIQ4AkcWVSHLuJa3 dNIO1Nt2/vP3TWxSOEVhG6ZhfAQHpXdMIK5hlnTIv94QKUeocLhcgKFRva5Jz2Qu 7r3deGZPWeLpDZRluf1wIjXF+fqlhYg= -----END CERTIFICATE-----Generated at Sat Apr 26 18:01:52 2025 by rpki-client