$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/efddc706-5467-32a6-82ac-617a3c89c69e.roa File: efddc706-5467-32a6-82ac-617a3c89c69e.roa (raw, json) Hash identifier: JY3xC7j5A0jXKWrsRII1ROzZqajwcpdFeJ0r/Kbl4nY= Subject key identifier: F9:1A:C1:96:E9:09:C3:77:C2:27:84:C2:10:93:1A:19:3D:41:E8:C8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A784FD3DA09E38A2F57E7B80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/efddc706-5467-32a6-82ac-617a3c89c69e.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 139070 IP address blocks: 35.216.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:fd:3d:a0:9e:38:a2:f5:7e:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=97466110-bbaf-4b9f-ba4e-c11eb88f6a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4a:cd:bb:89:c4:1e:6c:29:34:f2:3e:19:9d: 01:9a:8f:e3:19:10:8a:0e:7d:32:18:b6:dc:f9:95: 7b:4b:bb:ea:7a:0f:76:f7:e3:ca:5e:09:de:4c:d1: 70:32:77:2d:d0:5d:a7:1a:99:f6:db:2a:5d:99:bc: b7:fd:01:aa:32:e9:81:ca:ef:df:51:b5:ba:7c:38: bf:d0:89:46:f0:92:a2:0b:65:6d:11:d4:cf:c8:49: f3:26:84:cf:29:69:70:72:e1:17:be:33:91:fd:ab: 3b:bb:8a:0c:04:27:13:e7:0c:6d:fe:65:f0:ac:ab: 0c:90:c9:f8:36:07:7b:dc:7d:b4:1e:f4:62:9f:76: b4:23:00:21:e3:61:43:2c:d3:e8:e4:a2:74:06:e5: 0c:71:0a:8c:ad:9f:13:38:bf:a1:f4:f3:3f:21:1a: d5:d7:d8:33:70:ef:2b:73:49:f2:14:9b:2c:91:a0: 51:68:f8:46:ca:81:0c:f6:b9:fb:f8:59:5d:d8:1f: 33:c1:59:44:90:28:9f:fd:f0:8d:50:3e:b7:06:b2: 0f:ee:aa:87:bb:82:36:b0:e0:61:e9:a0:7b:be:90: 4a:60:97:2b:b1:88:8d:08:44:2e:a4:5b:20:68:45: b9:51:d9:56:76:ed:4a:44:33:3f:e2:05:45:97:fc: 01:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1A:C1:96:E9:09:C3:77:C2:27:84:C2:10:93:1A:19:3D:41:E8:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/efddc706-5467-32a6-82ac-617a3c89c69e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.216.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:c1:11:3a:74:28:2f:70:45:36:3c:36:33:62:f2:3d:e9:b9: d2:d1:06:bd:31:17:1a:ff:86:0b:a1:e4:14:11:78:c8:8e:b1: 0e:61:00:3c:f1:bc:38:0f:06:78:88:1c:0c:5c:a9:94:39:96: 74:45:bc:e4:e9:43:fe:7d:f2:af:c5:58:2e:7e:51:69:35:54: 4e:24:7e:86:ee:53:0f:fe:d8:af:cf:bd:8a:30:e6:d4:e2:15: a7:38:36:b2:19:9c:ab:5e:53:71:3a:72:cc:21:1b:d2:ce:b6: 89:02:c5:62:ae:8a:1e:9a:cb:9a:fb:bd:3a:0f:b3:06:76:b4: 45:e8:10:30:18:e0:a9:ee:e1:c2:eb:04:8a:04:83:93:42:36: df:2a:6d:be:4a:ef:d4:c2:a3:bb:a3:eb:4b:f8:c9:09:62:8e: c5:5d:15:44:e0:41:21:31:32:e6:fd:52:1b:33:7b:85:2b:ba: fd:6d:87:94:5b:da:18:f1:4b:b6:5a:d5:58:a1:95:98:42:fc: eb:b3:a1:6c:43:4e:06:da:a5:72:95:d9:80:95:04:df:b9:f4: 95:6a:c5:7d:11:a4:2b:b5:64:29:74:1d:c8:b9:d3:49:ba:76: d6:b3:39:b6:80:78:d9:aa:74:df:ab:08:97:73:f0:5c:97:f6: b1:f9:07:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhP09oJ44ovV+e4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OTc0NjYxMTAtYmJhZi00YjlmLWJhNGUtYzExZWI4OGY2YTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkrNu4nEHmwpNPI+GZ0Bmo/jGRCKDn0yGLbc +ZV7S7vqeg929+PKXgneTNFwMnct0F2nGpn22ypdmby3/QGqMumByu/fUbW6fDi/ 0IlG8JKiC2VtEdTPyEnzJoTPKWlwcuEXvjOR/as7u4oMBCcT5wxt/mXwrKsMkMn4 Ngd73H20HvRin3a0IwAh42FDLNPo5KJ0BuUMcQqMrZ8TOL+h9PM/IRrV19gzcO8r c0nyFJsskaBRaPhGyoEM9rn7+Fld2B8zwVlEkCif/fCNUD63BrIP7qqHu4I2sOBh 6aB7vpBKYJcrsYiNCEQupFsgaEW5UdlWdu1KRDM/4gVFl/wBAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkawZbpCcN3wieEwhCTGhk9QejIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWZkZGM3MDYtNTQ2Ny0z MmE2LTgyYWMtNjE3YTNjODljNjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI9gAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTBETp0KC9wRTY8NjNi8j3pudLRBr0xFxr/hguh5BQReMiOsQ5hADzx vDgPBniIHAxcqZQ5lnRFvOTpQ/598q/FWC5+UWk1VE4kfobuUw/+2K/PvYow5tTi Fac4NrIZnKteU3E6cswhG9LOtokCxWKuih6ay5r7vToPswZ2tEXoEDAY4Knu4cLr BIoEg5NCNt8qbb5K79TCo7uj60v4yQlijsVdFUTgQSExMub9Uhsze4Uruv1th5Rb 2hjxS7Za1VihlZhC/OuzoWxDTgbapXKV2YCVBN+59JVqxX0RpCu1ZCl0Hci500m6 dtazObaAeNmqdN+rCJdz8FyX9rH5B1Y= -----END CERTIFICATE-----Generated at Sat Apr 26 19:26:23 2025 by rpki-client