$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/04add4b9-6be4-3dc2-aafd-8900bab7156e.roa File: 04add4b9-6be4-3dc2-aafd-8900bab7156e.roa (raw, json) Hash identifier: NNXmyQHyE6F3nZggs1lNVflGj5+UIpWSicgXJw2yQ7c= Subject key identifier: F2:D1:6E:FC:33:9C:49:B3:02:D3:59:45:66:62:FB:78:C5:85:E7:E1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C148850A9D0F35A51BF80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/04add4b9-6be4-3dc2-aafd-8900bab7156e.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.194.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:14:88:50:a9:d0:f3:5a:51:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=4e8c1d42-0ced-4596-9939-556307dced2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:94:ed:71:a0:9e:94:c0:ec:02:cf:95:4b:33: 3a:94:22:c2:44:21:77:e8:04:ed:1d:96:75:6f:3f: a7:1b:37:46:44:03:82:97:00:12:31:3a:f3:ae:0e: ca:e1:ef:d2:9b:1e:51:10:25:54:38:7a:19:1e:f9: 59:9c:a4:81:ea:18:0a:f4:40:ce:86:9a:39:cf:90: a3:31:01:6b:01:d8:74:5f:91:0a:27:2a:7f:bd:e6: 09:79:1e:0c:7f:db:77:7d:81:df:ba:b7:3a:29:f2: 11:92:48:31:0e:57:7a:bb:2e:d0:ff:b6:13:c1:7f: b5:84:e2:79:b1:39:20:fc:a0:09:9f:e1:ad:f4:1e: 3a:6d:64:ea:97:f1:e4:be:83:d9:fc:17:df:fc:89: 32:bb:9e:cb:f8:a6:49:7f:83:ce:b7:33:ef:c8:f4: ad:52:30:b8:0d:3c:35:c3:ca:de:4f:24:3e:61:65: 0c:85:64:fd:ed:eb:94:a9:b5:0f:7b:67:f2:31:04: 4e:7f:52:cc:f4:d0:94:a0:de:85:b7:b9:98:6f:7d: 4e:db:48:1e:1f:9b:f1:b0:a3:70:14:67:4d:cb:95: 24:4d:0c:ae:f7:16:b4:43:86:7e:93:80:1f:a0:6d: e8:92:0d:7c:58:f6:ce:fe:cb:2a:3f:e1:20:d6:b6: 86:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D1:6E:FC:33:9C:49:B3:02:D3:59:45:66:62:FB:78:C5:85:E7:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/04add4b9-6be4-3dc2-aafd-8900bab7156e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.194.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:a4:84:df:3a:19:43:22:7a:7a:d1:5d:74:f0:1f:e8:ff:39: aa:94:df:b7:47:58:d7:fc:b8:cf:4c:74:d6:03:70:2a:e5:9a: 34:f3:25:54:a3:75:46:63:96:c2:fb:8e:17:2d:d8:72:6e:1e: b0:c1:a6:04:cb:41:16:ed:e1:6c:f0:cd:ad:a9:6e:4e:77:7f: 37:c0:19:bd:2b:e0:b4:8f:a5:89:4c:e3:4b:a0:9a:a6:ac:9c: cb:2a:aa:8d:69:b2:4c:fd:fb:35:38:0f:63:29:1a:8e:4d:4d: 32:94:35:f9:18:80:1b:86:b4:b0:64:eb:92:1b:5a:0d:43:17: 82:95:21:67:63:d4:3c:28:32:6c:25:96:ef:29:9c:00:fa:c3: c6:f3:f1:d6:fc:3b:f7:6c:1a:d3:f4:0a:32:cf:17:63:a7:f2: f2:f4:f8:88:f8:6c:e9:7d:86:96:f6:0e:c2:e8:1f:cb:1c:07: a7:26:a6:03:f2:19:04:5f:f5:72:62:e2:05:20:d4:46:23:d5: f0:7f:3b:20:fc:59:db:10:87:bb:8b:bb:cc:c3:90:59:e0:b1: 57:53:2d:05:65:18:83:39:cb:77:2f:94:d7:4d:5e:e3:e1:18: e9:b1:9f:35:3f:1c:bf:35:bf:9c:fc:95:d3:4b:1d:69:ae:e0: ff:b0:49:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITBSIUKnQ81pRv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NGU4YzFkNDItMGNlZC00NTk2LTk5MzktNTU2MzA3ZGNlZDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpTtcaCelMDsAs+VSzM6lCLCRCF36ATtHZZ1 bz+nGzdGRAOClwASMTrzrg7K4e/Smx5RECVUOHoZHvlZnKSB6hgK9EDOhpo5z5Cj MQFrAdh0X5EKJyp/veYJeR4Mf9t3fYHfurc6KfIRkkgxDld6uy7Q/7YTwX+1hOJ5 sTkg/KAJn+Gt9B46bWTql/HkvoPZ/Bff/Ikyu57L+KZJf4POtzPvyPStUjC4DTw1 w8reTyQ+YWUMhWT97euUqbUPe2fyMQROf1LM9NCUoN6Ft7mYb31O20geH5vxsKNw FGdNy5UkTQyu9xa0Q4Z+k4AfoG3okg18WPbO/ssqP+Eg1raGeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLRbvwznEmzAtNZRWZi+3jFhefhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDRhZGQ0YjktNmJlNC0z ZGMyLWFhZmQtODkwMGJhYjcxNTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8LwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqkhN86GUMienrRXXTwH+j/OaqU37dHWNf8uM9MdNYDcCrlmjTzJVSj dUZjlsL7jhct2HJuHrDBpgTLQRbt4Wzwza2pbk53fzfAGb0r4LSPpYlM40ugmqas nMsqqo1pskz9+zU4D2MpGo5NTTKUNfkYgBuGtLBk65IbWg1DF4KVIWdj1DwoMmwl lu8pnAD6w8bz8db8O/dsGtP0CjLPF2On8vL0+Ij4bOl9hpb2DsLoH8scB6cmpgPy GQRf9XJi4gUg1EYj1fB/OyD8WdsQh7uLu8zDkFngsVdTLQVlGIM5y3cvlNdNXuPh GOmxnzU/HL81v5z8ldNLHWmu4P+wSQ4= -----END CERTIFICATE-----Generated at Fri Mar 14 09:57:55 2025 by rpki-client