$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0c82d788-f511-3112-b7b7-07452f3e4285.roa File: 0c82d788-f511-3112-b7b7-07452f3e4285.roa (raw, json) Hash identifier: rDaA5bkdjpdspq9V6XBGSHLqv0/KCAgMdpiMAOzVwHo= Subject key identifier: AE:34:4E:6B:84:B7:D9:EA:BA:DA:05:DC:70:4D:E0:0D:32:B9:AA:2F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BEE7DFB9F038768449E40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0c82d788-f511-3112-b7b7-07452f3e4285.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.242.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:ee:7d:fb:9f:03:87:68:44:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=ffb2606b-eef0-4646-84ed-eede264ce9d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:25:12:12:96:b4:dc:c6:f8:d1:99:13:10:ea: df:f2:ac:45:1f:21:69:58:fd:35:3b:1d:4f:87:e3: 9e:d7:12:7e:4a:2d:fb:54:a5:a7:10:32:5a:29:83: 4f:4f:2c:51:30:8e:91:c1:f6:71:bd:27:29:91:b0: 46:5b:b9:7d:05:d1:b9:98:13:70:72:0d:38:5e:65: f4:5b:35:04:67:be:cc:2f:f7:74:15:3b:22:d2:98: 48:02:d9:60:76:61:7b:82:8c:2b:53:c7:19:e6:67: 4c:7b:cf:fc:c2:b9:8c:0d:bf:6b:e7:1e:94:bf:e4: 35:3c:65:59:6c:dc:27:4c:9c:75:d6:76:e8:4f:79: 22:45:fd:54:4f:26:d8:e6:3e:c5:a7:ea:08:fd:43: 7a:a1:4a:fd:79:a5:35:cc:ea:52:00:57:c4:eb:ef: 88:e0:89:3a:90:54:02:94:69:05:b6:00:94:f6:ca: 04:9a:2c:03:70:18:59:dd:b2:c8:ad:07:3e:b5:f7: 2e:15:9b:18:d0:d1:5e:b7:b2:c5:5e:2a:c9:25:bc: 42:46:bb:7e:28:ab:54:b3:21:70:7d:f9:d4:a5:73: 34:87:00:e7:b2:60:47:93:46:cc:68:f8:d3:b0:e3: c6:02:e4:28:a3:16:8b:2c:6f:fa:8d:a7:42:68:46: e8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:34:4E:6B:84:B7:D9:EA:BA:DA:05:DC:70:4D:E0:0D:32:B9:AA:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0c82d788-f511-3112-b7b7-07452f3e4285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.242.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:2d:6a:04:d5:9e:e7:cf:62:ab:50:27:65:b5:d5:e3:de:b3: a2:de:4c:65:58:55:8e:e8:9f:c3:77:18:68:ee:15:b3:60:05: 26:c7:1b:5d:00:25:90:c7:e5:d6:2d:10:b2:54:1d:a6:d8:a7: 88:31:e3:81:13:71:ca:d3:37:99:4b:33:77:3f:bc:ce:8b:fd: 9b:63:6b:d4:da:fb:27:07:a2:4d:2e:c6:f5:5d:71:7d:e8:5a: 3e:9d:b2:b3:6d:57:be:76:b9:e5:1d:a6:13:46:2d:0b:be:eb: 08:ad:1a:ae:f4:9e:de:dc:67:98:70:6a:ca:1e:10:5a:d5:f6: 97:f0:3d:0a:c1:d5:48:fe:16:81:c2:f3:cf:35:98:6e:19:a4: bb:70:98:8a:d9:73:d3:62:49:23:ab:8c:10:5a:d0:07:c6:cf: 54:73:f9:ab:0e:1c:3b:c3:12:59:c5:f7:b9:64:63:d0:92:f6: e2:ea:7d:57:88:63:13:7e:8a:b1:7b:86:92:ad:da:c7:eb:f0: 8c:c9:bf:48:69:ea:0b:6c:5f:bf:7e:32:1f:1f:18:ad:38:88: f5:b3:a1:43:87:8b:f3:0e:4d:f8:23:e0:7f:46:5f:f5:78:67: 33:67:2d:91:0c:af:0d:c0:28:39:10:9e:07:41:c7:1c:e5:e4: 2c:d3:6b:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+59+58Dh2hEnkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZmZiMjYwNmItZWVmMC00NjQ2LTg0ZWQtZWVkZTI2NGNlOWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSUSEpa03Mb40ZkTEOrf8qxFHyFpWP01Ox1P h+Oe1xJ+Si37VKWnEDJaKYNPTyxRMI6RwfZxvScpkbBGW7l9BdG5mBNwcg04XmX0 WzUEZ77ML/d0FTsi0phIAtlgdmF7gowrU8cZ5mdMe8/8wrmMDb9r5x6Uv+Q1PGVZ bNwnTJx11nboT3kiRf1UTybY5j7Fp+oI/UN6oUr9eaU1zOpSAFfE6++I4Ik6kFQC lGkFtgCU9soEmiwDcBhZ3bLIrQc+tfcuFZsY0NFet7LFXirJJbxCRrt+KKtUsyFw ffnUpXM0hwDnsmBHk0bMaPjTsOPGAuQooxaLLG/6jadCaEbojQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK40TmuEt9nqutoF3HBN4A0yuaovMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGM4MmQ3ODgtZjUxMS0z MTEyLWI3YjctMDc0NTJmM2U0Mjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/KwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAtagTVnufPYqtQJ2W11ePes6LeTGVYVY7on8N3GGjuFbNgBSbHG10A JZDH5dYtELJUHabYp4gx44ETccrTN5lLM3c/vM6L/Ztja9Ta+ycHok0uxvVdcX3o Wj6dsrNtV752ueUdphNGLQu+6witGq70nt7cZ5hwasoeEFrV9pfwPQrB1Uj+FoHC 8881mG4ZpLtwmIrZc9NiSSOrjBBa0AfGz1Rz+asOHDvDElnF97lkY9CS9uLqfVeI YxN+irF7hpKt2sfr8IzJv0hp6gtsX79+Mh8fGK04iPWzoUOHi/MOTfgj4H9GX/V4 ZzNnLZEMrw3AKDkQngdBxxzl5CzTa9I= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:56 2025 by rpki-client