$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de4a152f-20e4-325d-b0ca-bfc80633c32c.roa File: de4a152f-20e4-325d-b0ca-bfc80633c32c.roa (raw, json) Hash identifier: ezZUKoryzYsadXiVHrxJrtMyvEVHkdbvt+cHHWzyRJY= Subject key identifier: 74:4C:E9:22:DE:7C:7D:7B:86:0F:AF:17:0B:7A:9E:AC:52:A4:0A:57 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784D625E78D297826E7E100 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de4a152f-20e4-325d-b0ca-bfc80633c32c.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.201.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:d6:25:e7:8d:29:78:26:e7:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=156eb3d4-b9ab-41b8-bb15-77dab4f9c2d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1a:08:f5:22:90:89:36:f0:2b:55:8c:f6:dd: 4e:63:56:18:5b:d0:ef:83:53:e4:36:6f:bf:c5:85: 1c:94:8d:7a:2a:0d:d5:f7:22:ef:70:40:36:44:eb: 3c:52:ca:63:53:5a:3d:98:d8:22:bc:35:83:20:25: 05:ff:80:15:6f:a8:b2:fa:5d:af:56:aa:0f:bb:62: 98:40:a9:0a:80:04:59:9c:81:5d:d8:ed:f1:e3:08: 5b:bc:fa:71:b8:e2:cd:e9:5e:d4:bc:72:f9:58:9b: d9:8f:23:a2:20:b0:e0:6a:da:63:9e:11:5a:7e:f1: 4f:fb:b0:e3:19:7e:76:cd:a2:b0:17:9f:a8:ab:c7: d0:a0:ee:30:71:cf:34:e0:e2:51:c3:c6:36:88:8e: 6b:f5:b6:3e:c2:03:0c:e1:4f:10:ab:c7:0b:22:b9: d3:47:4d:d7:4d:ab:9b:29:63:da:42:4d:22:4d:2c: c2:4a:4c:24:ef:20:4b:61:c2:d9:d7:17:82:14:66: 1e:b8:51:7a:f7:4e:5f:45:06:fa:bb:db:ef:57:bc: 0d:8c:b1:78:c6:2a:9f:ae:a4:c3:5c:0d:e3:58:bb: a1:9c:40:0b:2a:62:09:b8:31:5b:e5:ce:7e:dc:4e: 4d:c3:fc:1b:3d:fc:d3:ff:c5:5a:9a:6e:01:cf:de: 1e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:4C:E9:22:DE:7C:7D:7B:86:0F:AF:17:0B:7A:9E:AC:52:A4:0A:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de4a152f-20e4-325d-b0ca-bfc80633c32c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.201.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:99:36:7e:87:42:b6:58:66:5b:58:25:75:bc:32:78:79:af: d9:5b:4d:68:1e:a5:a3:42:3d:15:cb:a3:fc:44:70:37:20:c1: a8:07:d4:11:67:61:07:8f:b0:cd:ca:65:7d:1b:9c:c6:ef:0f: 40:b9:8f:10:07:82:2d:30:a4:c6:db:a6:7f:e7:ac:36:de:c1: 6a:dc:b6:54:fe:b9:c0:91:da:45:54:07:25:16:9c:df:d5:11: e6:19:c6:2c:ae:62:ed:7f:f4:8a:07:4c:2f:db:b1:30:09:39: da:2b:08:4b:b5:aa:78:58:c3:08:d6:1a:59:d7:b5:14:61:a1: 0b:32:46:c2:2c:51:3f:29:9d:f7:73:81:fb:61:f5:a9:ea:19: 60:90:3c:7b:80:57:94:22:cf:b4:66:ca:80:c4:e5:6d:53:9e: 1a:8e:bf:25:d0:a0:27:46:c4:82:0a:55:ee:b0:dc:ca:ef:a5: fd:e1:15:a2:69:81:b7:8a:d4:a6:77:93:75:64:d9:3a:c5:5f: bd:ca:f6:44:a5:30:0c:68:76:c5:66:64:b4:9c:08:96:3f:27: 8e:2b:e7:6a:b4:bc:e0:64:c4:3f:a9:ed:f6:80:fd:08:5a:f4: 13:8e:7b:ed:a4:da:d0:f7:17:39:a9:d7:e7:de:34:0f:5b:65: 5a:67:2e:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhNYl540peCbn4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MTU2ZWIzZDQtYjlhYi00MWI4LWJiMTUtNzdkYWI0ZjljMmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRoI9SKQiTbwK1WM9t1OY1YYW9Dvg1PkNm+/ xYUclI16Kg3V9yLvcEA2ROs8UspjU1o9mNgivDWDICUF/4AVb6iy+l2vVqoPu2KY QKkKgARZnIFd2O3x4whbvPpxuOLN6V7UvHL5WJvZjyOiILDgatpjnhFafvFP+7Dj GX52zaKwF5+oq8fQoO4wcc804OJRw8Y2iI5r9bY+wgMM4U8Qq8cLIrnTR03XTaub KWPaQk0iTSzCSkwk7yBLYcLZ1xeCFGYeuFF6905fRQb6u9vvV7wNjLF4xiqfrqTD XA3jWLuhnEALKmIJuDFb5c5+3E5Nw/wbPfzT/8Vamm4Bz94elQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRM6SLefH17hg+vFwt6nqxSpApXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGU0YTE1MmYtMjBlNC0z MjVkLWIwY2EtYmZjODA2MzNjMzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI8kkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyZNn6HQrZYZltYJXW8Mnh5r9lbTWgepaNCPRXLo/xEcDcgwagH1BFn YQePsM3KZX0bnMbvD0C5jxAHgi0wpMbbpn/nrDbewWrctlT+ucCR2kVUByUWnN/V EeYZxiyuYu1/9IoHTC/bsTAJOdorCEu1qnhYwwjWGlnXtRRhoQsyRsIsUT8pnfdz gfth9anqGWCQPHuAV5Qiz7RmyoDE5W1TnhqOvyXQoCdGxIIKVe6w3Mrvpf3hFaJp gbeK1KZ3k3Vk2TrFX73K9kSlMAxodsVmZLScCJY/J44r52q0vOBkxD+p7faA/Qha 9BOOe+2k2tD3Fzmp1+feNA9bZVpnLik= -----END CERTIFICATE-----Generated at Sat Apr 26 18:07:48 2025 by rpki-client