$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b085a786-3502-3cb5-93b9-66aa0fd4aeb0.roa File: b085a786-3502-3cb5-93b9-66aa0fd4aeb0.roa (raw, json) Hash identifier: 53vGrm3dPGPN2OQ4MSd9sA5JSnVRCaJtRY5b0+YK74M= Subject key identifier: 0C:7A:2E:6E:FC:CF:47:A7:AC:78:38:9E:81:10:20:82:8D:C8:00:0F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C0C5E78DC8E19F7A244E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b085a786-3502-3cb5-93b9-66aa0fd4aeb0.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.203.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:0c:5e:78:dc:8e:19:f7:a2:44:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=546b51a9-ee4b-4a0d-86fa-279446d9df0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cb:e7:49:25:28:16:5b:d9:12:05:7b:ac:a5: e5:ec:e6:a8:6e:fa:74:ed:42:d1:9a:f2:04:46:8a: 00:17:5d:4d:d0:b8:ba:3e:a8:43:08:48:62:1a:d1: 2b:9d:83:6f:bb:b5:08:f1:06:9e:75:36:89:a8:e6: b5:61:62:06:ee:ec:a4:72:d1:28:fe:86:69:d1:e3: d6:68:c9:68:d4:14:25:25:55:85:53:e8:ce:0d:d1: 6f:24:77:30:0a:bc:4f:38:4c:fc:8d:ae:b7:dc:4e: 57:5f:db:64:cf:59:78:98:34:e4:dd:1a:37:5d:5e: 0f:1e:db:0a:b0:f6:50:12:03:00:dd:62:cd:bf:74: 76:50:85:ba:22:15:8e:40:41:f5:84:4c:83:67:3a: c3:3b:22:df:5e:3b:80:50:36:9d:f2:db:bf:b4:b1: 63:ec:c0:c2:6b:2d:86:c4:74:18:47:c2:2f:a6:67: e7:c9:b7:4d:19:59:d7:95:2c:d3:15:e8:9f:08:4a: 6b:5a:00:2c:99:68:05:8f:e1:69:7c:30:7f:44:ef: f1:85:f7:3f:aa:03:1a:e0:0e:f5:9b:d4:fc:25:a6: 8c:fe:67:ea:38:00:c9:7c:34:39:7a:68:68:6a:47: a6:b2:dd:6d:a3:c1:4b:96:b6:0a:58:26:4b:27:9c: b9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7A:2E:6E:FC:CF:47:A7:AC:78:38:9E:81:10:20:82:8D:C8:00:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b085a786-3502-3cb5-93b9-66aa0fd4aeb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.203.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:6e:2c:65:28:ee:a4:ed:5e:1e:ff:2b:68:09:ad:37:ad:61: 8d:94:b2:43:68:bf:db:97:09:25:ba:ee:fa:4c:f9:78:3e:3f: a9:94:ad:12:a5:64:fd:ce:70:97:c6:b6:42:b3:28:89:41:8f: bc:b1:41:d6:fb:d6:aa:af:48:f3:40:83:01:f0:c5:df:65:6f: 3c:6f:50:88:b7:af:e7:98:3d:fe:80:70:cd:61:98:7f:d5:d8: 90:d5:03:42:6d:11:54:69:a7:63:63:63:02:5d:d9:d6:8e:48: 75:51:3c:9f:2c:67:39:00:d6:08:bb:1f:63:d9:76:68:a1:86: fd:1f:ab:8b:0d:15:f9:85:6c:39:b4:3d:e1:ab:0d:38:06:a6: 1f:38:b8:15:f5:07:61:f1:03:6d:79:71:45:c9:8d:94:d0:1e: 86:ae:61:9c:2c:35:23:5a:be:84:1f:da:02:ed:91:5a:4c:91: cb:28:02:91:d0:70:68:2e:16:2a:89:4a:68:df:89:e1:93:df: 10:88:5e:2a:82:3d:ce:4b:9f:67:46:e5:e3:19:3e:28:f6:e4: 3f:c3:ad:49:4e:99:05:01:b2:63:c4:da:11:87:a4:57:9b:e0: d1:55:6d:08:33:b5:6d:d8:01:eb:dc:cd:1b:c5:bf:c3:d2:67: d1:e8:84:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITAxeeNyOGfeiROAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NTQ2YjUxYTktZWU0Yi00YTBkLTg2ZmEtMjc5NDQ2ZDlkZjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MvnSSUoFlvZEgV7rKXl7Oaobvp07ULRmvIE RooAF11N0Li6PqhDCEhiGtErnYNvu7UI8QaedTaJqOa1YWIG7uykctEo/oZp0ePW aMlo1BQlJVWFU+jODdFvJHcwCrxPOEz8ja633E5XX9tkz1l4mDTk3Ro3XV4PHtsK sPZQEgMA3WLNv3R2UIW6IhWOQEH1hEyDZzrDOyLfXjuAUDad8tu/tLFj7MDCay2G xHQYR8IvpmfnybdNGVnXlSzTFeifCEprWgAsmWgFj+FpfDB/RO/xhfc/qgMa4A71 m9T8JaaM/mfqOADJfDQ5emhoakemst1to8FLlrYKWCZLJ5y5CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAx6Lm78z0enrHg4noEQIIKNyAAPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjA4NWE3ODYtMzUwMi0z Y2I1LTkzYjktNjZhYTBmZDRhZWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI8vdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZuLGUo7qTtXh7/K2gJrTetYY2UskNov9uXCSW67vpM+Xg+P6mUrRKl ZP3OcJfGtkKzKIlBj7yxQdb71qqvSPNAgwHwxd9lbzxvUIi3r+eYPf6AcM1hmH/V 2JDVA0JtEVRpp2NjYwJd2daOSHVRPJ8sZzkA1gi7H2PZdmihhv0fq4sNFfmFbDm0 PeGrDTgGph84uBX1B2HxA215cUXJjZTQHoauYZwsNSNavoQf2gLtkVpMkcsoApHQ cGguFiqJSmjfieGT3xCIXiqCPc5Ln2dG5eMZPij25D/DrUlOmQUBsmPE2hGHpFeb 4NFVbQgztW3YAevczRvFv8PSZ9HohMs= -----END CERTIFICATE-----Generated at Fri Apr 4 21:45:10 2025 by rpki-client