$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/04520f85-1b57-3274-956d-926923f36365.roa File: 04520f85-1b57-3274-956d-926923f36365.roa (raw, json) Hash identifier: qowUO7Ld32xbIn1gd877cLzEDZp1V2+xQK3BIRbYAXk= Subject key identifier: 28:C7:E4:BE:DD:E7:D5:4B:DE:16:85:31:E1:BB:F3:7F:9D:ED:37:67 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BE3B6290BBD9E8AC5A780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/04520f85-1b57-3274-956d-926923f36365.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.185.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:e3:b6:29:0b:bd:9e:8a:c5:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=ec0a0e8e-7142-4187-a8a0-14cf9554f083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:80:c7:d3:16:9d:39:8b:b6:f6:0d:ba:2e:7f: 04:f9:b1:d7:87:02:d6:90:0b:81:ba:73:df:6d:1c: 75:17:e1:cd:e5:5c:df:d3:a1:10:ad:dd:4e:af:17: 5d:2f:dc:04:56:84:f4:9e:15:68:3d:c6:5d:91:84: ce:c0:88:6d:90:dd:63:77:04:01:7a:11:80:24:67: d0:66:06:65:f6:3f:bc:47:64:d7:c2:1f:dd:9e:be: bd:bd:1c:90:fa:21:6d:d2:43:a0:74:08:1d:81:02: 5d:63:ce:8e:09:1d:7c:a3:6b:fa:12:18:1d:d8:21: 26:f4:84:32:67:3d:d8:ef:38:ac:f9:c0:5e:e9:9f: 02:57:f7:17:4d:9f:22:bf:b7:4e:39:49:17:58:cd: 15:a9:3e:47:27:c7:22:29:3a:38:98:8d:d7:17:bb: 77:e6:15:94:37:13:26:0b:72:08:9f:51:f8:38:4b: d4:a2:b3:c0:f0:44:fc:54:04:bd:15:15:14:26:2a: 44:52:ac:8c:18:81:be:fb:5b:89:63:7c:95:c3:51: 5b:1c:d0:ca:b1:54:4e:83:89:9b:ad:91:7e:55:9e: e4:9f:2a:46:5f:e5:11:7f:a0:65:0b:22:2a:43:71: cd:55:86:64:51:f6:c8:25:dd:b0:ca:00:d9:12:68: 8c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C7:E4:BE:DD:E7:D5:4B:DE:16:85:31:E1:BB:F3:7F:9D:ED:37:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/04520f85-1b57-3274-956d-926923f36365.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.185.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:90:00:1e:96:4b:07:e6:9b:75:f8:b6:b8:66:33:d0:43:cd: 6a:91:70:ab:77:d1:1f:3e:26:29:ca:1a:8d:b0:b1:b9:03:fc: b3:fb:e2:9e:e0:09:09:ba:8e:48:bc:3d:7c:16:92:80:71:6b: aa:24:95:40:ac:f5:b3:82:25:54:bc:4d:6b:e2:82:94:a4:d7: bc:22:e0:0d:82:36:9a:c1:d5:34:24:b9:ee:2e:37:22:fd:a9: 1b:72:40:0c:28:24:99:2b:a0:7d:07:bf:ee:42:a9:e9:b3:3a: 1c:5f:ef:c1:10:88:8c:94:44:db:b6:8d:61:ca:68:5b:0b:ca: fe:9b:c2:76:44:6d:dd:36:6b:8c:8d:ba:47:dd:aa:1d:8a:3b: 48:1a:5d:9f:aa:4f:94:42:a2:dc:18:f6:30:5c:24:86:6b:0f: 93:2b:44:8f:af:78:f3:c0:50:60:93:12:d0:ed:3b:e1:b9:f3: 1c:dd:89:61:06:51:68:76:db:de:0a:b7:57:24:91:34:f1:c7: 87:78:d3:9d:fc:bb:af:66:66:4c:ea:6e:12:cb:7e:46:88:72: 45:82:29:bc:65:c9:70:5c:4e:05:e8:23:f0:09:42:f2:1b:ec: 82:7b:08:56:f2:77:a6:b4:17:93:e3:a4:e6:26:f2:1f:57:7c: ea:c0:c9:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+O2KQu9norFp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZWMwYTBlOGUtNzE0Mi00MTg3LWE4YTAtMTRjZjk1NTRmMDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IDH0xadOYu29g26Ln8E+bHXhwLWkAuBunPf bRx1F+HN5Vzf06EQrd1OrxddL9wEVoT0nhVoPcZdkYTOwIhtkN1jdwQBehGAJGfQ ZgZl9j+8R2TXwh/dnr69vRyQ+iFt0kOgdAgdgQJdY86OCR18o2v6Ehgd2CEm9IQy Zz3Y7zis+cBe6Z8CV/cXTZ8iv7dOOUkXWM0VqT5HJ8ciKTo4mI3XF7t35hWUNxMm C3IIn1H4OEvUorPA8ET8VAS9FRUUJipEUqyMGIG++1uJY3yVw1FbHNDKsVROg4mb rZF+VZ7knypGX+URf6BlCyIqQ3HNVYZkUfbIJd2wygDZEmiMHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjH5L7d59VL3haFMeG783+d7TdnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDQ1MjBmODUtMWI1Ny0z Mjc0LTk1NmQtOTI2OTIzZjM2MzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7mgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+QAB6WSwfmm3X4trhmM9BDzWqRcKt30R8+JinKGo2wsbkD/LP74p7g CQm6jki8PXwWkoBxa6oklUCs9bOCJVS8TWvigpSk17wi4A2CNprB1TQkue4uNyL9 qRtyQAwoJJkroH0Hv+5CqemzOhxf78EQiIyURNu2jWHKaFsLyv6bwnZEbd02a4yN ukfdqh2KO0gaXZ+qT5RCotwY9jBcJIZrD5MrRI+vePPAUGCTEtDtO+G58xzdiWEG UWh2294Kt1ckkTTxx4d40538u69mZkzqbhLLfkaIckWCKbxlyXBcTgXoI/AJQvIb 7IJ7CFbyd6a0F5PjpOYm8h9XfOrAyWU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:13 2025 by rpki-client