$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00848c69-e0a2-30a1-87c4-14728f62595e.roa File: 00848c69-e0a2-30a1-87c4-14728f62595e.roa (raw, json) Hash identifier: IV0rMphG1M026SmVWD7DY4Hv7GNQnkCn+lDae4mkrMw= Subject key identifier: 97:C1:97:19:FC:BF:83:5C:44:28:7A:BF:72:3C:CA:4A:CA:F0:E7:6C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BF66F685DA90B53A0CCC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00848c69-e0a2-30a1-87c4-14728f62595e.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.192.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:f6:6f:68:5d:a9:0b:53:a0:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=b2d29aed-30bf-4518-b7d1-b802798d2d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d8:76:f0:4e:d0:78:ed:6d:2f:12:8f:04:e1: fd:23:11:31:89:82:db:0f:cc:00:77:03:04:cf:42: 34:f8:5e:67:0b:a3:b1:ab:c9:13:aa:e3:a8:36:79: 2a:21:2b:69:83:da:2e:1b:b1:1c:60:ff:0b:5b:65: da:d5:a1:c7:8a:cd:b1:3a:16:c5:9a:2d:95:d3:12: 2b:3a:c2:4a:07:fb:1e:5a:7a:6a:71:71:cd:e7:3c: a7:ac:25:e9:3b:cd:3c:43:39:db:5e:6d:e0:3e:ce: 92:d0:b2:17:1c:38:1b:db:e6:fb:1c:76:70:89:83: d5:2d:a1:57:44:dd:3d:eb:c4:30:23:1c:9a:d1:b5: 03:1f:19:33:bf:1a:d0:7e:2a:93:31:cc:ae:97:00: 6b:8d:d1:53:bf:41:45:11:7a:11:30:48:2a:3f:27: 61:43:df:e5:8d:4d:f6:47:ac:e8:da:96:1f:41:83: a0:ff:5c:88:49:41:3b:e0:a8:fa:c1:ac:fe:f1:89: 13:ba:89:38:26:5a:aa:26:68:2e:ce:02:f8:d7:c2: 6b:9b:bb:cf:0d:66:bc:65:94:75:24:28:24:8c:15: 2b:f7:ec:54:20:7b:25:d8:8a:59:29:13:dd:c3:3b: 02:73:2d:55:b6:62:4a:c5:07:56:92:88:35:c3:3c: f1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C1:97:19:FC:BF:83:5C:44:28:7A:BF:72:3C:CA:4A:CA:F0:E7:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00848c69-e0a2-30a1-87c4-14728f62595e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.192.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:c5:85:9f:1f:79:0a:a9:16:1a:09:11:4e:63:b4:c1:fa:26: a2:20:89:1f:0b:a5:2a:1d:91:18:f0:e0:73:97:d0:28:dc:11: 9e:1c:0f:2c:c6:88:26:ec:e8:f9:b9:b1:cd:10:39:5e:90:94: 3c:78:c4:02:73:f7:88:a8:63:b2:cc:b5:7c:db:76:e7:d7:82: 7b:0c:a6:6d:d5:a4:2a:7b:4e:12:7b:d3:86:87:9c:75:c7:a5: 51:62:5d:d5:5e:27:93:f8:6f:ae:1a:c0:e1:4e:61:08:e0:dd: 59:fc:dc:de:09:9a:f2:d5:d8:14:96:78:a0:57:c4:85:36:32: 3e:cb:65:9d:df:73:21:98:d7:82:1b:72:f1:25:a8:2a:4c:e5: b5:39:ed:20:5f:c7:27:d9:ef:82:e8:71:14:2d:2b:76:73:ae: 7a:9c:12:c6:dc:bf:e2:b2:d0:55:11:13:0c:c7:84:a3:b1:46: 86:ae:f4:9d:e0:d9:29:17:d1:a9:41:be:93:33:74:41:7a:7e: a8:5b:35:63:70:84:4e:c5:64:b8:e7:88:e1:49:83:a1:3d:82: ea:ed:02:62:de:d0:10:32:3e:f1:15:eb:8a:11:43:97:5d:b9: 6f:9f:49:61:af:3d:0a:6b:61:74:9e:34:1d:cc:dc:3d:e3:a7: be:ca:ed:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS/ZvaF2pC1OgzMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YjJkMjlhZWQtMzBiZi00NTE4LWI3ZDEtYjgwMjc5OGQyZDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9h28E7QeO1tLxKPBOH9IxExiYLbD8wAdwME z0I0+F5nC6Oxq8kTquOoNnkqIStpg9ouG7EcYP8LW2Xa1aHHis2xOhbFmi2V0xIr OsJKB/seWnpqcXHN5zynrCXpO808QznbXm3gPs6S0LIXHDgb2+b7HHZwiYPVLaFX RN0968QwIxya0bUDHxkzvxrQfiqTMcyulwBrjdFTv0FFEXoRMEgqPydhQ9/ljU32 R6zo2pYfQYOg/1yISUE74Kj6waz+8YkTuok4JlqqJmguzgL418Jrm7vPDWa8ZZR1 JCgkjBUr9+xUIHsl2IpZKRPdwzsCcy1VtmJKxQdWkog1wzzxWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfBlxn8v4NcRCh6v3I8ykrK8OdsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDA4NDhjNjktZTBhMi0z MGExLTg3YzQtMTQ3MjhmNjI1OTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8DwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzFhZ8feQqpFhoJEU5jtMH6JqIgiR8LpSodkRjw4HOX0CjcEZ4cDyzG iCbs6Pm5sc0QOV6QlDx4xAJz94ioY7LMtXzbdufXgnsMpm3VpCp7ThJ704aHnHXH pVFiXdVeJ5P4b64awOFOYQjg3Vn83N4JmvLV2BSWeKBXxIU2Mj7LZZ3fcyGY14Ib cvElqCpM5bU57SBfxyfZ74LocRQtK3ZzrnqcEsbcv+Ky0FUREwzHhKOxRoau9J3g 2SkX0alBvpMzdEF6fqhbNWNwhE7FZLjniOFJg6E9gurtAmLe0BAyPvEV64oRQ5dd uW+fSWGvPQprYXSeNB3M3D3jp77K7Vc= -----END CERTIFICATE-----Generated at Fri Apr 4 21:40:16 2025 by rpki-client