$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd98b34e-cfd4-370a-82b9-5ffb62b4468c.roa File: bd98b34e-cfd4-370a-82b9-5ffb62b4468c.roa (raw, json) Hash identifier: DTjfEbPq9fPCGpUYcnIbhvHZkIid5DoQYRKj+QBJg3U= Subject key identifier: 22:C2:8F:6D:A4:46:CB:0F:5A:05:CB:E2:B7:E6:E6:53:63:C4:00:E2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784FF16DBA1D58CCD718420 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd98b34e-cfd4-370a-82b9-5ffb62b4468c.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.203.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ff:16:db:a1:d5:8c:cd:71:84:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=e0c2d694-c423-4ac6-b518-45fc152f9e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3c:97:2d:6e:12:84:81:72:4d:07:33:d5:a3: 30:da:45:50:f7:e0:77:62:ca:cc:50:66:18:8d:fa: d8:bc:76:75:d4:82:cf:ca:37:e1:0a:5d:b6:50:5e: c3:b6:b9:66:b0:78:01:21:e7:f0:5d:30:95:6a:5a: f7:71:6d:65:dd:64:87:c5:32:06:ed:83:8e:fc:0e: db:d7:ea:ad:61:24:98:17:ab:67:61:e6:a6:2b:a3: f5:e9:b4:82:f3:38:28:eb:4a:8b:09:41:ed:7b:d4: 5b:58:cd:8d:cf:27:d2:b0:5c:bd:6e:0f:54:38:73: fe:43:90:2d:6c:e9:c9:ea:79:73:d0:b7:2c:e1:01: 48:18:38:c0:3a:84:c4:9b:89:40:a1:b0:06:34:63: 72:5a:54:10:eb:29:bc:e0:30:f3:51:3e:a1:97:cd: 6b:b9:77:aa:5d:aa:ec:77:6a:35:30:06:ff:7f:f0: 6c:0a:3d:4a:88:8c:dc:ba:f6:8d:c0:22:1e:36:89: e6:19:c6:a3:dd:14:bf:28:64:89:63:cb:b2:10:3d: 3b:29:fb:40:5c:ff:91:75:7e:eb:dd:c1:1a:15:02: f5:3b:40:69:49:dc:09:b2:fe:1b:eb:9b:19:8a:d1: 1f:bd:a8:0d:92:6e:31:24:80:e8:89:b0:00:a9:14: 52:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C2:8F:6D:A4:46:CB:0F:5A:05:CB:E2:B7:E6:E6:53:63:C4:00:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd98b34e-cfd4-370a-82b9-5ffb62b4468c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.203.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:e5:bc:75:1e:27:02:13:7b:31:38:fd:a5:ea:d0:3c:5e:06: 2a:ed:a8:9c:be:33:22:d8:cf:99:2e:55:ed:f5:8a:79:8e:31: cd:3a:c6:11:f7:42:3e:6c:82:dd:a1:18:8d:17:1b:89:4a:ca: ed:54:32:2f:f6:92:15:20:ed:0c:bf:37:ed:0e:cf:b5:b6:9f: b0:11:af:dc:80:66:cc:d4:5f:26:7d:51:2b:cb:b1:48:47:20: 25:86:93:45:70:1c:72:00:e7:d4:18:17:4c:e4:ac:09:bb:1c: e3:1a:f4:83:35:32:3e:74:74:0e:22:a1:cd:d7:5c:99:b6:b0: a5:e3:d6:09:d5:73:0d:6a:20:4a:26:84:83:c6:a0:36:8e:bc: 03:07:c8:87:47:31:fd:75:d7:aa:f4:a3:5f:5e:3a:33:87:83: 83:45:5f:14:06:f7:d6:9c:e9:02:78:5b:7d:b6:5e:9c:f6:69: fb:9d:b5:d7:0b:eb:b3:93:2f:cb:41:52:6f:69:1f:8a:a5:67: 68:b4:91:a3:94:c5:5a:8d:8f:f2:99:56:94:ad:fd:76:73:95: 82:7b:1d:04:ea:11:f4:8a:ed:58:2e:31:c2:b4:10:b6:96:61: 2b:cf:cd:0d:9b:d3:4d:03:58:b2:78:da:d0:e7:e9:a6:e9:c2: 16:49:81:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhP8W26HVjM1xhCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZTBjMmQ2OTQtYzQyMy00YWM2LWI1MTgtNDVmYzE1MmY5ZThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTyXLW4ShIFyTQcz1aMw2kVQ9+B3YsrMUGYY jfrYvHZ11ILPyjfhCl22UF7DtrlmsHgBIefwXTCValr3cW1l3WSHxTIG7YOO/A7b 1+qtYSSYF6tnYeamK6P16bSC8zgo60qLCUHte9RbWM2NzyfSsFy9bg9UOHP+Q5At bOnJ6nlz0Lcs4QFIGDjAOoTEm4lAobAGNGNyWlQQ6ym84DDzUT6hl81ruXeqXars d2o1MAb/f/BsCj1KiIzcuvaNwCIeNonmGcaj3RS/KGSJY8uyED07KftAXP+RdX7r 3cEaFQL1O0BpSdwJsv4b65sZitEfvagNkm4xJIDoibAAqRRSDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLCj22kRssPWgXL4rfm5lNjxADiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmQ5OGIzNGUtY2ZkNC0z NzBhLTgyYjktNWZmYjYyYjQ0NjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI8vfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPlvHUeJwITezE4/aXq0DxeBirtqJy+MyLYz5kuVe31inmOMc06xhH3 Qj5sgt2hGI0XG4lKyu1UMi/2khUg7Qy/N+0Oz7W2n7ARr9yAZszUXyZ9USvLsUhH ICWGk0VwHHIA59QYF0zkrAm7HOMa9IM1Mj50dA4ioc3XXJm2sKXj1gnVcw1qIEom hIPGoDaOvAMHyIdHMf1116r0o19eOjOHg4NFXxQG99ac6QJ4W322Xpz2afudtdcL 67OTL8tBUm9pH4qlZ2i0kaOUxVqNj/KZVpSt/XZzlYJ7HQTqEfSK7VguMcK0ELaW YSvPzQ2b000DWLJ42tDn6abpwhZJgYk= -----END CERTIFICATE-----Generated at Sat Apr 26 18:34:46 2025 by rpki-client