$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f1cd5758-bf41-30da-817a-870e66d4e99e.roa File: f1cd5758-bf41-30da-817a-870e66d4e99e.roa (raw, json) Hash identifier: JHi1SAnuIyuQPBeqxYHEIkwayaMLGWSum56wwH2tf/g= Subject key identifier: 60:E7:96:50:91:28:CA:2D:61:8F:AC:F7:9A:FA:E0:7F:B4:C3:6B:28 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BA30E2F187319023DCE40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f1cd5758-bf41-30da-817a-870e66d4e99e.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 19527 IP address blocks: 35.206.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:a3:0e:2f:18:73:19:02:3d:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=2c6fb5be-bf79-4db5-becb-15c412f41b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a0:43:ab:2d:2b:f7:69:5c:6a:f0:d6:1d:fe: bb:89:d1:af:6e:6e:6d:df:3e:cd:15:50:7e:b7:a2: ae:06:20:5c:b8:db:c3:4a:30:ef:aa:9a:7a:2e:b7: 00:53:29:50:82:3d:23:86:79:fb:78:f1:09:a1:7c: ca:b2:61:50:21:c8:23:09:f0:83:98:a3:cf:0a:1a: 53:df:ec:ba:fa:1d:c0:c5:d6:6d:2e:08:26:06:3e: b2:fc:7e:17:0f:9d:cd:4f:fd:a1:26:52:40:b6:2c: 5a:8e:d5:3b:f0:ef:d0:6a:92:47:58:16:31:0b:12: 28:1e:03:d6:ce:d6:da:e1:f8:8b:2d:37:60:d3:26: 51:0d:c0:73:a9:35:25:55:fe:e3:ff:88:b5:12:4d: ce:a2:07:30:0f:e1:e8:96:a4:98:ed:91:71:34:08: e0:67:a0:11:a4:b2:a2:26:ec:dc:e3:a9:78:86:f7: c1:df:ec:2f:c7:52:c1:ae:6e:33:3d:f3:34:1a:c9: f6:2f:86:8a:6d:ca:c1:41:af:11:58:13:f3:00:b4: e8:8f:10:64:3b:fd:2a:e0:57:09:6d:c7:3f:d2:58: 6d:41:3f:eb:f9:79:8d:27:19:e3:9c:b7:3a:f5:c2: 20:40:cd:72:2e:46:06:9e:5f:0f:49:27:f0:08:0d: 5d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E7:96:50:91:28:CA:2D:61:8F:AC:F7:9A:FA:E0:7F:B4:C3:6B:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f1cd5758-bf41-30da-817a-870e66d4e99e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.206.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:4d:be:c7:77:69:f9:3a:f0:27:da:e8:a9:b9:d4:9f:e3:32: c4:8a:5b:ab:61:99:f6:ae:55:7b:29:7f:29:a5:51:f6:d1:3e: af:4a:08:65:6a:47:bf:d6:aa:58:f1:9b:d2:80:1d:54:3d:dc: d0:4e:b3:66:5e:73:a6:1e:ec:2a:bb:f8:92:9a:a4:b0:05:e2: b6:b0:f0:98:ce:f1:c1:59:e8:88:a0:bc:dd:51:5d:b3:4c:4c: a2:a9:e7:52:e9:5b:41:b7:2f:78:d9:2f:7e:c6:fc:09:77:e1: 23:52:f8:58:af:a2:a6:50:04:c0:a3:e0:de:54:f2:22:a5:56: 2d:cb:01:16:3b:19:68:b2:e6:4d:c5:0b:0d:b2:7f:b4:43:ff: ee:a8:96:29:41:5f:50:0a:75:5e:45:0a:ba:3e:89:bf:47:ed: c7:3c:95:b6:e8:a7:7f:05:27:b9:4f:cb:f8:1f:1c:39:f3:4d: f3:52:2d:c0:e6:8f:40:1b:f9:c8:20:b2:e0:53:cc:83:85:f5: c8:79:91:77:78:03:db:fa:f0:bd:45:27:ea:42:aa:43:96:e3: 6c:b8:b3:cf:d6:8f:a3:29:20:67:00:68:65:61:01:64:f7:89: eb:1b:8d:ca:72:a0:8d:05:29:b4:80:ba:02:a1:3b:c7:28:c9: 7d:04:80:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS6MOLxhzGQI9zkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MmM2ZmI1YmUtYmY3OS00ZGI1LWJlY2ItMTVjNDEyZjQxYjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKBDqy0r92lcavDWHf67idGvbm5t3z7NFVB+ t6KuBiBcuNvDSjDvqpp6LrcAUylQgj0jhnn7ePEJoXzKsmFQIcgjCfCDmKPPChpT 3+y6+h3AxdZtLggmBj6y/H4XD53NT/2hJlJAtixajtU78O/QapJHWBYxCxIoHgPW ztba4fiLLTdg0yZRDcBzqTUlVf7j/4i1Ek3OogcwD+HolqSY7ZFxNAjgZ6ARpLKi Juzc46l4hvfB3+wvx1LBrm4zPfM0Gsn2L4aKbcrBQa8RWBPzALTojxBkO/0q4FcJ bcc/0lhtQT/r+XmNJxnjnLc69cIgQM1yLkYGnl8PSSfwCA1dQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDnllCRKMotYY+s95r64H+0w2soMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjFjZDU3NTgtYmY0MS0z MGRhLTgxN2EtODcwZTY2ZDRlOTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI84BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBNvsd3afk68Cfa6Km51J/jMsSKW6thmfauVXspfymlUfbRPq9KCGVq R7/Wqljxm9KAHVQ93NBOs2Zec6Ye7Cq7+JKapLAF4raw8JjO8cFZ6IigvN1RXbNM TKKp51LpW0G3L3jZL37G/Al34SNS+FivoqZQBMCj4N5U8iKlVi3LARY7GWiy5k3F Cw2yf7RD/+6olilBX1AKdV5FCro+ib9H7cc8lbbop38FJ7lPy/gfHDnzTfNSLcDm j0Ab+cggsuBTzIOF9ch5kXd4A9v68L1FJ+pCqkOW42y4s8/Wj6MpIGcAaGVhAWT3 iesbjcpyoI0FKbSAugKhO8coyX0EgDo= -----END CERTIFICATE-----Generated at Fri Apr 4 08:59:36 2025 by rpki-client