$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a25d9b05-8936-3496-b7d1-1a01153be688.roa File: a25d9b05-8936-3496-b7d1-1a01153be688.roa (raw, json) Hash identifier: u4RuUKAoJE7nsfrV8DOXK4Dw26G3DJn1DRAj0RneAW4= Subject key identifier: 2A:0E:4C:5C:B6:FF:F2:49:90:72:F9:9A:4C:2C:1E:0E:E3:4B:85:8D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BF86CF9260A1A42FCCC20 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a25d9b05-8936-3496-b7d1-1a01153be688.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.201.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:f8:6c:f9:26:0a:1a:42:fc:cc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=24df80a5-846b-4bfb-90e5-8797de71c974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e8:28:49:7d:86:35:68:47:48:a7:19:f4:b0: 16:a8:84:9a:a6:30:09:74:f3:68:fb:2a:4c:5e:6e: aa:28:8e:9f:a6:f8:02:ce:4b:16:13:33:35:54:4b: b2:78:a0:d8:40:a0:8a:c3:31:4e:e0:69:03:17:b4: c4:65:9d:8f:18:12:65:bc:99:03:ad:f7:21:a8:e4: 26:6b:ac:77:b3:97:a9:6e:57:08:1a:ae:fc:27:da: 62:99:80:43:e8:fe:4e:db:e6:9a:85:40:1f:2b:71: 74:06:62:86:67:3e:eb:59:0f:eb:46:dc:c8:0c:67: 1d:f3:4b:5d:9b:9c:fc:dd:ce:a4:08:6d:6b:9a:9b: 88:14:8e:2b:c3:31:73:7e:6e:e1:18:4d:ec:1d:24: 6c:7a:60:dc:78:55:25:20:33:77:ab:ad:10:1a:e5: 23:54:d6:9f:6c:73:da:86:8c:d4:b7:73:c4:e7:dc: fc:35:0d:6a:89:a2:61:6c:7c:6d:50:d2:66:20:e7: 5f:92:e0:72:d2:ae:8e:5a:f4:72:e6:b8:0a:34:bb: 54:9f:cd:0e:6d:22:2a:1b:68:86:df:7a:58:55:99: 05:1c:8a:a1:e4:7f:1b:73:c6:5d:4e:c0:11:3d:45: b6:bc:55:11:fc:44:21:d9:c7:6c:72:54:5c:ef:d3: a9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:0E:4C:5C:B6:FF:F2:49:90:72:F9:9A:4C:2C:1E:0E:E3:4B:85:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a25d9b05-8936-3496-b7d1-1a01153be688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.201.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:2e:1e:2e:37:d1:88:72:fb:cf:b0:d1:45:ed:4b:06:7f:5c: da:f2:98:46:49:e0:0a:05:f6:2d:64:7e:9f:1c:0c:f1:80:e4: 4f:bd:cd:34:05:93:85:ef:00:dd:b3:a9:30:80:f0:0f:fc:2c: 4f:87:54:50:ee:bd:b0:c9:70:48:3e:af:6f:7b:d4:8a:9f:57: 2b:10:f2:65:be:0c:3b:51:3b:fb:23:f5:03:ba:df:69:c2:2a: e1:39:26:c5:c1:40:2e:bb:ff:23:e5:f7:db:58:d4:a1:fb:13: b2:f6:73:d6:28:f1:a9:ac:0d:2f:3d:ed:98:79:d7:bd:9e:f8: 1c:96:4f:fe:6e:d7:ed:c1:5e:6d:dc:f7:21:3a:db:d0:46:d2: 4a:bd:f2:b5:10:4a:25:c9:3f:39:0d:85:70:19:7d:ee:e0:11: 1b:47:00:58:7b:47:a0:3e:45:07:95:73:64:c5:5d:66:ce:1a: 3a:a5:8c:8b:cc:5d:14:cb:ac:ad:79:25:dd:18:f7:de:68:aa: 86:b5:e0:c5:10:b6:cf:19:38:2a:bf:c9:a2:ff:86:6f:69:32: 27:b3:5c:54:d6:52:f7:c1:e3:97:b4:fc:37:89:45:ff:1a:2e: 69:46:ea:f1:76:37:44:cf:45:92:df:a4:2e:9f:f7:49:3e:ab: 19:b5:0e:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS/hs+SYKGkL8zCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MjRkZjgwYTUtODQ2Yi00YmZiLTkwZTUtODc5N2RlNzFjOTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+goSX2GNWhHSKcZ9LAWqISapjAJdPNo+ypM Xm6qKI6fpvgCzksWEzM1VEuyeKDYQKCKwzFO4GkDF7TEZZ2PGBJlvJkDrfchqOQm a6x3s5epblcIGq78J9pimYBD6P5O2+aahUAfK3F0BmKGZz7rWQ/rRtzIDGcd80td m5z83c6kCG1rmpuIFI4rwzFzfm7hGE3sHSRsemDceFUlIDN3q60QGuUjVNafbHPa hozUt3PE59z8NQ1qiaJhbHxtUNJmIOdfkuBy0q6OWvRy5rgKNLtUn80ObSIqG2iG 33pYVZkFHIqh5H8bc8ZdTsARPUW2vFUR/EQh2cdsclRc79Op/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoOTFy2//JJkHL5mkwsHg7jS4WNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTI1ZDliMDUtODkzNi0z NDk2LWI3ZDEtMWEwMTE1M2JlNjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI8kgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0uHi430Yhy+8+w0UXtSwZ/XNrymEZJ4AoF9i1kfp8cDPGA5E+9zTQF k4XvAN2zqTCA8A/8LE+HVFDuvbDJcEg+r2971IqfVysQ8mW+DDtRO/sj9QO632nC KuE5JsXBQC67/yPl99tY1KH7E7L2c9Yo8amsDS897Zh5172e+ByWT/5u1+3BXm3c 9yE629BG0kq98rUQSiXJPzkNhXAZfe7gERtHAFh7R6A+RQeVc2TFXWbOGjqljIvM XRTLrK15Jd0Y995oqoa14MUQts8ZOCq/yaL/hm9pMiezXFTWUvfB45e0/DeJRf8a LmlG6vF2N0TPRZLfpC6f90k+qxm1DsA= -----END CERTIFICATE-----Generated at Fri Apr 4 21:42:55 2025 by rpki-client