$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/06094c0e-3de8-39d2-80cb-3c4e63c9b482.roa File: 06094c0e-3de8-39d2-80cb-3c4e63c9b482.roa (raw, json) Hash identifier: Qxf6XIV1Nbon7OSFk3hU+bDdpUY1ILkMyHEm7gOAotM= Subject key identifier: 6D:5D:BE:F4:C6:3B:02:13:0A:C7:E8:B5:C7:47:50:C3:9D:E4:68:C3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C1D03F0E7207B86FDCF40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/06094c0e-3de8-39d2-80cb-3c4e63c9b482.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.192.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:1d:03:f0:e7:20:7b:86:fd:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=549dd87f-171b-4ec0-8f8c-232d87f62216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:19:6d:59:45:86:e3:a1:f8:98:a1:03:74:4a: 50:7d:21:a7:9b:ec:4b:f8:c5:6c:80:1c:2d:92:bf: b4:01:80:ca:03:cd:b0:d0:f0:d8:33:05:bc:52:8c: cf:28:cc:ad:0a:31:d2:f1:83:50:23:b6:fe:df:27: f4:e7:1c:be:f5:d1:f2:15:c2:3c:d2:df:8e:40:75: 47:e8:a8:00:12:89:6d:fe:0d:5f:49:94:fa:f9:17: 3d:f5:f6:e4:2f:d9:30:ca:56:c7:eb:64:0c:4c:95: 92:62:cd:98:5d:31:c0:7d:0c:a8:93:06:0c:29:24: 4b:fa:73:7d:6e:59:68:07:6c:87:e1:e8:fa:f9:fe: a1:e7:00:57:f2:7f:95:44:28:d8:f9:ff:b4:46:a0: ce:e6:83:9f:11:17:45:31:ae:e6:b8:57:4c:c4:a4: 0d:07:29:e0:c5:94:b5:64:d6:b8:b0:85:39:22:33: 85:14:1e:f8:49:45:60:10:12:9c:c9:9b:60:7e:e1: 7f:51:f5:7d:b5:22:49:82:75:f4:80:fe:3e:d5:f5: 06:8c:57:79:c8:69:bf:19:fd:23:e2:c6:5d:e6:ef: e8:8a:6a:3e:8b:01:11:b5:bd:a6:a4:5c:3c:26:21: 99:74:ab:7d:e2:5d:96:bd:b2:9e:ce:11:a4:c1:a8: 85:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5D:BE:F4:C6:3B:02:13:0A:C7:E8:B5:C7:47:50:C3:9D:E4:68:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/06094c0e-3de8-39d2-80cb-3c4e63c9b482.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.192.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:7a:2c:a4:cf:64:2e:90:5e:d1:c6:cd:10:d5:f2:f8:e1:9f: d8:c7:bc:62:e1:9f:97:9e:45:7d:12:09:ec:05:92:1c:fd:1a: 8b:43:f7:bf:45:a1:d7:85:9f:15:52:a0:6e:fd:2b:d4:22:fe: 94:7e:2f:cf:af:ec:90:67:43:e8:b4:74:c3:de:95:1a:fe:ff: e2:6f:1f:cd:b7:57:44:2e:fa:34:c4:5d:d8:e6:50:60:fa:a1: 29:2a:3e:f9:12:e4:83:a7:8e:67:ac:bc:ac:64:7a:d3:cc:62: 22:8f:28:f3:5a:20:55:31:ef:79:b2:6a:59:d8:bc:9c:44:9e: 21:2f:7f:d4:d3:47:7f:df:45:99:5b:09:9c:e4:6d:b1:b8:79: 52:af:f8:26:9c:66:d0:fc:79:05:c0:0b:72:09:37:97:8d:ad: ce:06:e7:c0:bb:66:e3:c9:60:e8:46:c4:69:54:b8:97:33:55: ed:0d:af:fd:23:29:df:92:79:86:65:f7:01:04:6a:d1:72:40: 41:a5:ae:78:b9:6d:8c:23:c5:53:79:7d:54:a3:57:2a:99:ca: fe:6d:fc:65:be:56:ce:4f:12:b5:3a:ef:7d:a5:71:f2:f3:80: 4e:d5:de:de:3b:d2:c5:87:08:9b:fc:bb:77:ce:f5:1f:ce:4a: 76:1e:bf:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITB0D8Ocge4b9z0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NTQ5ZGQ4N2YtMTcxYi00ZWMwLThmOGMtMjMyZDg3ZjYyMjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhltWUWG46H4mKEDdEpQfSGnm+xL+MVsgBwt kr+0AYDKA82w0PDYMwW8UozPKMytCjHS8YNQI7b+3yf05xy+9dHyFcI80t+OQHVH 6KgAEolt/g1fSZT6+Rc99fbkL9kwylbH62QMTJWSYs2YXTHAfQyokwYMKSRL+nN9 blloB2yH4ej6+f6h5wBX8n+VRCjY+f+0RqDO5oOfERdFMa7muFdMxKQNByngxZS1 ZNa4sIU5IjOFFB74SUVgEBKcyZtgfuF/UfV9tSJJgnX0gP4+1fUGjFd5yGm/Gf0j 4sZd5u/oimo+iwERtb2mpFw8JiGZdKt94l2WvbKezhGkwaiFuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1dvvTGOwITCsfotcdHUMOd5GjDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDYwOTRjMGUtM2RlOC0z OWQyLTgwY2ItM2M0ZTYzYzliNDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8BAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJ6LKTPZC6QXtHGzRDV8vjhn9jHvGLhn5eeRX0SCewFkhz9GotD979F odeFnxVSoG79K9Qi/pR+L8+v7JBnQ+i0dMPelRr+/+JvH823V0Qu+jTEXdjmUGD6 oSkqPvkS5IOnjmesvKxketPMYiKPKPNaIFUx73myalnYvJxEniEvf9TTR3/fRZlb CZzkbbG4eVKv+CacZtD8eQXAC3IJN5eNrc4G58C7ZuPJYOhGxGlUuJczVe0Nr/0j Kd+SeYZl9wEEatFyQEGlrni5bYwjxVN5fVSjVyqZyv5t/GW+Vs5PErU6732lcfLz gE7V3t470sWHCJv8u3fO9R/OSnYev8E= -----END CERTIFICATE-----Generated at Fri Apr 4 21:43:10 2025 by rpki-client