$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de5c2941-312a-3131-af3e-33a86372cfd9.roa File: de5c2941-312a-3131-af3e-33a86372cfd9.roa (raw, json) Hash identifier: qILKZ5rQ7De8GrrNDeI1S24xLmdgeygKEJjRZ5GdCuY= Subject key identifier: 4E:F3:02:AC:93:FD:5E:5A:95:7E:BB:5C:3B:05:55:D8:28:8F:3F:CD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784FB0832F1CAAFDB54EA00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de5c2941-312a-3131-af3e-33a86372cfd9.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.203.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:fb:08:32:f1:ca:af:db:54:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=bf0fdf4b-3431-42ac-84a1-c93e3a776c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:89:b2:30:aa:7a:5d:3f:07:39:8f:5f:6d:e8: 47:0d:52:2a:77:28:8c:2d:af:7c:94:87:cd:e1:b8: 14:19:2b:f2:5f:a0:b3:f5:89:a0:ca:4d:b5:5e:f8: d5:e7:52:ca:3a:d3:7a:2d:8a:fc:d0:40:2e:bd:0b: 45:90:d1:ef:16:58:39:df:c1:76:ee:01:04:3e:e6: d8:d8:d4:8a:2f:88:18:36:41:65:1c:a0:3f:97:77: 1d:53:e1:03:c0:18:f1:fb:01:a4:60:fa:c6:73:8d: ee:9b:c1:a9:f0:39:e9:c9:a4:44:8b:e6:28:13:f8: 0d:46:47:99:46:d9:5b:d8:7d:d1:fb:c4:67:95:0c: b2:df:dc:a2:f3:bc:a6:42:9e:2d:ef:2d:c8:34:ad: f0:9d:ed:cd:03:58:0b:71:29:32:60:88:b6:fe:21: 00:10:4a:63:3d:bb:51:94:b7:8e:19:31:c1:a4:1c: 10:3d:c8:fd:f2:3a:94:4b:c0:9e:f2:a5:1e:ff:ec: d9:4e:35:30:fc:a5:41:6c:b4:20:62:19:17:db:91: 68:55:06:64:37:64:d3:33:1d:5c:99:c5:54:0c:ff: 6d:2f:b9:c2:90:88:30:76:4a:cb:61:4e:d4:d4:b9: 7e:25:83:98:39:72:bc:65:41:2a:1c:1a:b6:88:6b: 34:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F3:02:AC:93:FD:5E:5A:95:7E:BB:5C:3B:05:55:D8:28:8F:3F:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/de5c2941-312a-3131-af3e-33a86372cfd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.203.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:39:39:ed:c7:fd:ea:c2:3e:60:77:10:9a:80:09:5c:c4:7c: da:02:4d:d8:e9:f2:72:26:a2:cb:f1:dd:0d:65:04:a1:56:c3: 73:62:00:6b:8b:d2:7c:55:94:27:bd:99:e5:54:cf:c7:08:bf: 2e:4f:3f:dd:d3:19:80:50:07:f2:5b:65:30:8e:81:d7:7e:27: d5:29:b7:6f:02:2c:46:41:8b:64:52:df:63:9e:63:a8:3e:e0: 67:b7:3d:ed:26:fc:5e:9c:1a:2f:69:e0:fe:4d:f3:41:52:84: 88:2c:2e:23:ad:0a:4a:24:8c:67:00:35:02:8d:7f:5c:1a:10: 91:d0:e3:da:37:56:0a:36:fb:96:0f:b2:5c:06:c2:de:87:4d: 0b:bc:9c:13:a0:00:1b:93:5a:fe:07:bf:6a:bb:f3:bc:e4:35: d2:c3:68:48:bd:c0:ab:62:48:7d:fd:f6:62:8f:b0:69:30:4d: 63:d5:08:7c:0f:96:a4:90:29:79:b7:ab:b7:14:21:42:b6:9d: e4:5f:56:dd:16:ed:a4:01:04:85:04:d8:48:92:37:c3:aa:80: 5c:6d:2c:bb:a1:e6:08:de:4c:3b:98:a6:72:43:2e:8c:a8:a0: 34:85:77:32:81:d3:56:69:50:74:eb:2f:3e:67:d4:a4:e2:77: f9:82:d6:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhPsIMvHKr9tU6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YmYwZmRmNGItMzQzMS00MmFjLTg0YTEtYzkzZTNhNzc2YzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjomyMKp6XT8HOY9fbehHDVIqdyiMLa98lIfN 4bgUGSvyX6Cz9Ymgyk21XvjV51LKOtN6LYr80EAuvQtFkNHvFlg538F27gEEPubY 2NSKL4gYNkFlHKA/l3cdU+EDwBjx+wGkYPrGc43um8Gp8DnpyaREi+YoE/gNRkeZ Rtlb2H3R+8RnlQyy39yi87ymQp4t7y3INK3wne3NA1gLcSkyYIi2/iEAEEpjPbtR lLeOGTHBpBwQPcj98jqUS8Ce8qUe/+zZTjUw/KVBbLQgYhkX25FoVQZkN2TTMx1c mcVUDP9tL7nCkIgwdkrLYU7U1Ll+JYOYOXK8ZUEqHBq2iGs0rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7zAqyT/V5alX67XDsFVdgojz/NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGU1YzI5NDEtMzEyYS0z MTMxLWFmM2UtMzNhODYzNzJjZmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI8vZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQ5Oe3H/erCPmB3EJqACVzEfNoCTdjp8nImosvx3Q1lBKFWw3NiAGuL 0nxVlCe9meVUz8cIvy5PP93TGYBQB/JbZTCOgdd+J9Upt28CLEZBi2RS32OeY6g+ 4Ge3Pe0m/F6cGi9p4P5N80FShIgsLiOtCkokjGcANQKNf1waEJHQ49o3Vgo2+5YP slwGwt6HTQu8nBOgABuTWv4Hv2q787zkNdLDaEi9wKtiSH399mKPsGkwTWPVCHwP lqSQKXm3q7cUIUK2neRfVt0W7aQBBIUE2EiSN8OqgFxtLLuh5gjeTDuYpnJDLoyo oDSFdzKB01ZpUHTrLz5n1KTid/mC1hQ= -----END CERTIFICATE-----Generated at Sat Apr 26 16:33:30 2025 by rpki-client