$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/07639067-6063-3a5d-9f11-c2534b3185ec.roa File: 07639067-6063-3a5d-9f11-c2534b3185ec.roa (raw, json) Hash identifier: IO2nBWgVlulEmcwxGvKgj4PkEr+35zo/euCg0eAwDog= Subject key identifier: E3:7E:11:A8:40:F6:FD:43:AD:8E:D0:AD:46:14:71:C5:29:9B:9C:C6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BEED5CF7C0ADDDDFCEE40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/07639067-6063-3a5d-9f11-c2534b3185ec.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.238.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:ee:d5:cf:7c:0a:dd:dd:fc:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=2dfadbbd-3749-4aaf-ad2a-5576905c9e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8a:27:dc:1d:3e:c0:0a:e8:1d:58:6a:af:f9: c7:b8:09:49:d6:ec:e4:73:0c:51:df:07:b4:1e:47: 66:e6:a3:62:78:02:70:fd:41:4c:b6:9a:19:44:ad: 8f:ec:77:c8:68:01:92:76:b8:27:71:f3:30:f9:2a: 6e:ee:ca:7e:7f:c3:e5:ad:d4:22:b3:72:cf:30:cc: 36:8c:23:43:c5:97:06:59:f6:f8:6c:c1:75:1e:78: 42:19:fd:40:0d:f6:d3:47:16:15:b5:51:f9:46:51: 17:92:6e:c4:4e:83:7f:62:b1:de:c7:93:d7:f8:93: 6f:18:37:8f:ca:c1:1f:47:e5:a0:2d:8d:ff:41:b4: bf:5a:f8:69:22:f2:2b:38:ed:e0:ea:17:60:ce:dc: 39:ea:46:0a:2a:d4:54:91:50:96:86:96:ac:22:cf: c1:5b:29:56:3e:7a:68:3f:6b:8d:44:ed:72:c3:f2: 78:1a:62:5e:1a:65:f9:aa:c8:68:3f:5c:d7:4d:00: 7b:e4:7b:33:00:d4:bb:db:de:2d:b8:72:27:a6:4d: a7:61:fa:97:c7:4f:b6:be:0c:47:79:2b:18:86:16: 66:0d:79:31:32:69:57:aa:6d:7c:41:98:1d:e5:6a: 9f:22:0f:ea:82:20:62:4c:26:00:0b:85:bf:8e:37: 9e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:7E:11:A8:40:F6:FD:43:AD:8E:D0:AD:46:14:71:C5:29:9B:9C:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/07639067-6063-3a5d-9f11-c2534b3185ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:84:8b:a2:2b:aa:5c:74:4b:3e:b3:7d:74:b1:94:03:be:a0: b4:3b:91:7e:dd:f9:0d:41:4c:9c:ae:36:3a:61:1b:ef:74:26: 0e:c8:27:41:02:1a:a7:03:ec:94:a2:bc:71:e2:65:e0:18:67: 2d:09:f4:3b:0a:86:d6:26:cf:86:01:08:98:b8:7c:b6:16:f9: ff:5e:0c:e3:ba:cc:40:b3:11:0c:91:97:ec:b6:f3:e8:d7:aa: 7a:67:43:67:d6:30:af:b8:63:3b:bd:fb:57:c3:5d:58:c4:88: e9:8a:ca:ee:f8:16:13:d8:5a:e3:17:d9:98:f8:f5:7f:2c:94: bc:cc:90:71:79:72:ec:a3:f1:da:5d:b6:ea:1c:10:2b:ef:69: 3e:a9:4f:a2:93:31:07:41:06:64:10:69:fa:d4:3c:bf:bd:9c: 9e:3d:48:44:bc:cc:1c:11:ba:9e:8f:d8:61:3c:e4:40:45:cb: 32:f1:87:96:15:a3:5c:bf:f2:e2:80:d8:ab:03:ba:3a:f3:50: 0d:a6:93:a5:2e:47:75:7b:9a:d9:fe:96:69:1c:d9:de:0c:0b: 69:ba:29:62:b0:05:bd:5d:fb:0c:18:02:11:a4:53:6e:bb:e5: c3:c5:ae:52:21:36:6d:9e:a8:22:f5:f9:14:e6:96:a0:bb:c1: 52:64:ce:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+7Vz3wK3d387kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MmRmYWRiYmQtMzc0OS00YWFmLWFkMmEtNTU3NjkwNWM5ZTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioon3B0+wAroHVhqr/nHuAlJ1uzkcwxR3we0 Hkdm5qNieAJw/UFMtpoZRK2P7HfIaAGSdrgncfMw+Spu7sp+f8PlrdQis3LPMMw2 jCNDxZcGWfb4bMF1HnhCGf1ADfbTRxYVtVH5RlEXkm7EToN/YrHex5PX+JNvGDeP ysEfR+WgLY3/QbS/WvhpIvIrOO3g6hdgztw56kYKKtRUkVCWhpasIs/BWylWPnpo P2uNRO1yw/J4GmJeGmX5qshoP1zXTQB75HszANS7294tuHInpk2nYfqXx0+2vgxH eSsYhhZmDXkxMmlXqm18QZgd5WqfIg/qgiBiTCYAC4W/jjeecQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFON+EahA9v1DrY7QrUYUccUpm5zGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDc2MzkwNjctNjA2My0z YTVkLTlmMTEtYzI1MzRiMzE4NWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiEi6Irqlx0Sz6zfXSxlAO+oLQ7kX7d+Q1BTJyuNjphG+90Jg7IJ0EC GqcD7JSivHHiZeAYZy0J9DsKhtYmz4YBCJi4fLYW+f9eDOO6zECzEQyRl+y28+jX qnpnQ2fWMK+4Yzu9+1fDXVjEiOmKyu74FhPYWuMX2Zj49X8slLzMkHF5cuyj8dpd tuocECvvaT6pT6KTMQdBBmQQafrUPL+9nJ49SES8zBwRup6P2GE85EBFyzLxh5YV o1y/8uKA2KsDujrzUA2mk6UuR3V7mtn+lmkc2d4MC2m6KWKwBb1d+wwYAhGkU267 5cPFrlIhNm2eqCL1+RTmlqC7wVJkzsc= -----END CERTIFICATE-----Generated at Fri Apr 4 21:40:14 2025 by rpki-client