$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3f3aab0-3526-3b7e-aaf8-ed2504d7f01e.roa File: e3f3aab0-3526-3b7e-aaf8-ed2504d7f01e.roa (raw, json) Hash identifier: ZiZLCT3qXLCu/nIUbG6orFURNX9iJT8Ws2Unu2dSokg= Subject key identifier: CA:DA:48:52:37:2C:A9:A3:91:D5:9C:53:60:53:8E:00:7A:5F:84:33 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A785120A1EFED26E8DFAB180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3f3aab0-3526-3b7e-aaf8-ed2504d7f01e.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 35.201.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:85:12:0a:1e:fe:d2:6e:8d:fa:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=5ef66e6e-c443-4997-ba91-68a7d0ee949e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9c:21:ec:ae:74:e7:b6:27:84:e5:13:12:88: 04:26:0b:a8:06:2a:8f:c1:5a:9b:f5:00:5a:1f:8d: a6:e9:e1:66:40:64:9a:2c:9e:be:ec:e8:67:97:a1: dc:b5:83:9c:cd:8c:fa:db:ab:5e:12:ea:25:2c:3c: 29:61:17:f4:e6:55:f3:73:c4:de:21:cf:b6:4d:7b: c4:1d:32:a2:96:69:e9:7c:e8:53:8d:a9:60:cb:85: 84:1c:6e:c9:fc:39:f7:8c:5a:8d:7f:e6:7f:d8:d1: a5:eb:9f:c7:ce:51:83:ab:c2:ba:67:8d:d3:36:9e: ca:72:1c:f5:bc:e8:3e:00:87:4f:7d:5b:28:94:d3: b5:0a:da:4e:98:5e:67:f8:d4:3d:cb:0a:f1:83:24: 76:93:d7:c0:92:b9:3a:40:77:a2:b9:65:f2:ed:3c: d0:40:e0:bf:41:c6:b6:49:3b:d1:a9:b3:ab:77:9b: 75:35:bb:4d:04:d3:58:f4:ef:e5:d7:0a:68:fe:a6: b8:21:aa:31:1d:8a:e0:f4:c1:b5:a5:e7:4e:fe:b5: ca:7f:0a:85:92:19:2f:14:86:ca:47:ca:31:18:87: 1f:c2:3e:d4:a1:58:a4:8e:af:36:04:22:57:b6:d8: 72:1d:f3:a2:21:d9:35:88:ab:93:17:19:e9:e0:b1: 38:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DA:48:52:37:2C:A9:A3:91:D5:9C:53:60:53:8E:00:7A:5F:84:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3f3aab0-3526-3b7e-aaf8-ed2504d7f01e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.201.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:a1:de:a0:48:07:77:61:b8:cc:73:53:91:c5:51:eb:be:72: 3a:7f:02:5a:6d:53:d9:e0:87:6a:04:c2:59:5b:c1:43:69:a0: df:27:ea:b7:7a:ed:6c:26:76:3e:d0:5f:60:58:ef:93:0b:d0: 66:0b:80:f1:2e:af:ea:4a:6a:9a:d2:50:3d:07:1f:85:19:c8: b4:7f:0a:51:ab:ec:78:9a:36:a9:89:f0:f9:56:19:c8:0d:c8: 53:62:63:32:d2:c1:a3:20:fb:25:b2:5a:bf:54:2f:7d:fb:f5: 42:d5:cf:66:4e:0f:ff:b4:50:d2:c9:58:bd:e6:b9:79:31:aa: 8d:6b:98:34:db:2e:6a:16:ac:72:0e:0f:6d:5b:d4:1f:51:73: b6:f8:a4:bb:71:36:4a:61:fd:43:ff:07:42:e0:62:fb:0d:d3: 25:21:0f:4a:39:e9:24:8f:f9:d5:a1:9a:1e:39:bf:f1:aa:fd: 1c:e7:66:47:9f:25:30:d0:47:60:c8:6c:e5:50:87:e7:60:9a: 43:42:49:77:b5:54:1b:22:3b:7a:01:02:25:10:aa:cb:87:ee: bd:64:73:15:de:a1:59:3a:ae:66:19:12:42:c1:c0:ae:0e:8d: 14:ea:99:64:e2:2d:f9:9e:5f:9d:86:ea:1c:68:91:7a:8a:14: 9a:aa:27:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhRIKHv7Sbo36sYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NWVmNjZlNmUtYzQ0My00OTk3LWJhOTEtNjhhN2QwZWU5NDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45wh7K5057YnhOUTEogEJguoBiqPwVqb9QBa H42m6eFmQGSaLJ6+7Ohnl6HctYOczYz626teEuolLDwpYRf05lXzc8TeIc+2TXvE HTKilmnpfOhTjalgy4WEHG7J/Dn3jFqNf+Z/2NGl65/HzlGDq8K6Z43TNp7Kchz1 vOg+AIdPfVsolNO1CtpOmF5n+NQ9ywrxgyR2k9fAkrk6QHeiuWXy7TzQQOC/Qca2 STvRqbOrd5t1NbtNBNNY9O/l1wpo/qa4IaoxHYrg9MG1pedO/rXKfwqFkhkvFIbK R8oxGIcfwj7UoVikjq82BCJXtthyHfOiIdk1iKuTFxnp4LE4fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMraSFI3LKmjkdWcU2BTjgB6X4QzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTNmM2FhYjAtMzUyNi0z YjdlLWFhZjgtZWQyNTA0ZDdmMDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI8khMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOh3qBIB3dhuMxzU5HFUeu+cjp/AlptU9ngh2oEwllbwUNpoN8n6rd6 7Wwmdj7QX2BY75ML0GYLgPEur+pKaprSUD0HH4UZyLR/ClGr7HiaNqmJ8PlWGcgN yFNiYzLSwaMg+yWyWr9UL3379ULVz2ZOD/+0UNLJWL3muXkxqo1rmDTbLmoWrHIO D21b1B9Rc7b4pLtxNkph/UP/B0LgYvsN0yUhD0o56SSP+dWhmh45v/Gq/RznZkef JTDQR2DIbOVQh+dgmkNCSXe1VBsiO3oBAiUQqsuH7r1kcxXeoVk6rmYZEkLBwK4O jRTqmWTiLfmeX52G6hxokXqKFJqqJ4U= -----END CERTIFICATE-----Generated at Sun May 4 18:57:09 2025 by rpki-client