$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b2a3aea3-a626-34c6-a988-c509a0fa1ea2.roa File: b2a3aea3-a626-34c6-a988-c509a0fa1ea2.roa (raw, json) Hash identifier: yUd1Vdbq9zLA2xXnsa/9hqknzpPW87mAC2iqiKAidzI= Subject key identifier: C7:8B:42:3E:D8:C0:CB:65:0D:70:94:9E:A4:3A:09:5D:0B:90:8E:34 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BD1329018E6175DAA3A40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b2a3aea3-a626-34c6-a988-c509a0fa1ea2.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 35.204.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:d1:32:90:18:e6:17:5d:aa:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=88d68139-6caa-4297-9a2f-4b0a04d007e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4f:34:03:bb:41:e9:d6:30:e6:23:e8:73:5b: fb:2c:e5:b7:73:d0:f7:76:ce:2a:4e:09:d1:da:79: 15:80:9d:84:68:37:c3:20:60:a3:65:40:cc:ff:11: 72:0e:01:ae:3e:d2:63:80:86:fa:46:75:b4:9d:8d: 5b:3f:07:7b:ca:b9:02:52:01:39:ff:d5:21:57:7e: 77:6c:71:99:5b:bf:8b:33:ec:be:0d:70:96:77:a6: d5:39:44:23:09:55:94:1a:04:5a:e0:cd:1b:68:8c: 59:67:f8:61:5c:a7:e1:c4:e3:2f:16:3f:cc:91:be: e6:bb:27:ac:4f:2e:4e:c0:e9:62:5e:31:52:85:25: 85:5d:b1:c5:a5:24:34:a5:39:5c:53:6f:fc:6b:86: 1a:8a:4c:0a:19:22:d6:c2:4b:cf:bf:43:a3:e7:94: 1a:e7:bc:31:d8:00:c0:e0:68:e4:85:62:34:ed:db: 92:75:27:cc:9b:b2:81:90:77:65:0d:19:c1:fe:ef: e1:df:bc:5a:8f:7a:12:60:fe:6b:3f:13:48:58:8a: 32:9b:43:35:ae:d4:73:ab:d8:98:45:d2:f4:7d:a6: 71:5b:d1:e1:72:dc:e7:64:1e:34:25:6f:63:a8:75: c7:40:5c:64:1f:45:f8:f2:c8:e2:a0:1f:b2:25:92: e5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:8B:42:3E:D8:C0:CB:65:0D:70:94:9E:A4:3A:09:5D:0B:90:8E:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b2a3aea3-a626-34c6-a988-c509a0fa1ea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.204.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:a7:cd:c6:4b:e9:7f:30:e1:1d:47:0e:78:a4:22:ef:e3:48: a1:23:7a:ef:ad:e0:59:99:6f:84:63:f8:6d:b7:5a:62:a4:41: 41:50:47:97:ab:17:da:b0:c1:92:79:1a:83:5f:0d:f7:2d:f1: d9:b6:50:69:43:1f:f7:e0:23:9b:76:67:49:de:30:15:9d:7f: 02:98:c4:5e:6d:69:ee:68:4a:b4:c8:d7:9d:ca:b8:ce:ea:1e: 88:57:78:2f:71:33:91:2a:f3:59:f3:e0:42:b4:72:f6:d9:83: 94:cd:69:27:ad:37:29:6f:57:f7:70:3b:1d:a6:2a:4a:4b:85: d2:ed:8c:6b:2a:04:4b:f5:13:b5:f9:4f:69:23:05:1f:60:ac: e7:05:87:6e:c8:3a:c3:d3:32:53:44:92:42:4c:88:b6:01:12: c0:2f:1f:ca:54:c8:96:86:16:67:f4:7f:5c:80:f9:4c:76:5e: c6:74:18:2c:cb:ef:87:10:24:2b:cf:39:84:15:3e:a3:64:ef: 87:70:37:d9:67:43:ed:0e:e8:bd:53:1c:79:17:ec:bd:4e:83: a5:8d:9b:fc:ab:a0:9a:ee:43:fa:6d:e1:6a:ab:6b:9d:40:54: bb:62:a6:31:23:c4:33:88:cd:b3:04:7d:58:b8:1a:b7:b8:a5: 90:32:23:fe -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjIS9EykBjmF12qOkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ODhkNjgxMzktNmNhYS00Mjk3LTlhMmYtNGIwYTA0ZDAwN2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz080A7tB6dYw5iPoc1v7LOW3c9D3ds4qTgnR 2nkVgJ2EaDfDIGCjZUDM/xFyDgGuPtJjgIb6RnW0nY1bPwd7yrkCUgE5/9UhV353 bHGZW7+LM+y+DXCWd6bVOUQjCVWUGgRa4M0baIxZZ/hhXKfhxOMvFj/Mkb7muyes Ty5OwOliXjFShSWFXbHFpSQ0pTlcU2/8a4YaikwKGSLWwkvPv0Oj55Qa57wx2ADA 4GjkhWI07duSdSfMm7KBkHdlDRnB/u/h37xaj3oSYP5rPxNIWIoym0M1rtRzq9iY RdL0faZxW9HhctznZB40JW9jqHXHQFxkH0X48sjioB+yJZLlewIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMeLQj7YwMtlDXCUnqQ6CV0LkI40MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjJhM2FlYTMtYTYyNi0z NGM2LWE5ODgtYzUwOWEwZmExZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBI8wwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAPKfNxkvpfzDhHUcOeKQi7+NIoSN6763gWZlvhGP4bbdaYqRBQVBHl6sX 2rDBknkag18N9y3x2bZQaUMf9+Ajm3ZnSd4wFZ1/ApjEXm1p7mhKtMjXncq4zuoe iFd4L3EzkSrzWfPgQrRy9tmDlM1pJ603KW9X93A7HaYqSkuF0u2MayoES/UTtflP aSMFH2Cs5wWHbsg6w9MyU0SSQkyItgESwC8fylTIloYWZ/R/XID5THZexnQYLMvv hxAkK885hBU+o2Tvh3A32WdD7Q7ovVMceRfsvU6DpY2b/Kugmu5D+m3haqtrnUBU u2KmMSPEM4jNswR9WLgat7ilkDIj/g== -----END CERTIFICATE-----Generated at Fri Apr 4 08:51:33 2025 by rpki-client