$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d7afd3b-6b77-3b2b-8517-169206df0eb2.roa File: 0d7afd3b-6b77-3b2b-8517-169206df0eb2.roa (raw, json) Hash identifier: T6iaQMP0KVsRme4mHpAt3XPoVm4/rnlraa2X0ugPuY8= Subject key identifier: C2:4D:B8:84:03:52:1A:B4:2F:65:6B:9C:04:64:99:FB:94:57:1E:F9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BFA919634EC7BB4004FC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d7afd3b-6b77-3b2b-8517-169206df0eb2.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.198.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:fa:91:96:34:ec:7b:b4:00:4f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=a02ccd65-514e-41ed-923f-4855e2fc5dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:39:ad:9a:79:63:49:e3:8e:2a:a3:d0:3b:a9: 0d:82:ac:16:8a:92:00:18:04:59:62:15:7b:4b:a1: 4f:52:3d:89:cb:3d:6f:9c:a6:cd:bc:32:b8:8c:20: 49:1f:3d:fe:20:64:3e:1d:88:0c:8f:40:62:a6:4e: df:00:73:ca:b1:4d:6b:ab:b8:69:3e:c3:3b:27:a5: b1:5f:9e:c9:f3:a0:ff:23:22:56:34:44:e1:9a:fa: c4:64:49:44:0b:24:83:90:ff:e0:37:8c:93:ae:6c: a2:45:15:8e:39:d9:6c:c2:85:7c:96:9b:36:71:ba: d6:69:86:c4:d9:b0:5c:4d:1c:42:8f:db:ab:94:17: 6a:40:b9:a9:23:1f:51:3b:13:ee:97:a2:d9:6b:60: 5d:65:6c:d2:17:7c:03:76:0b:51:6a:ec:c9:78:9c: 66:9b:12:26:8e:3f:74:98:46:12:32:1b:b2:1f:23: bf:35:1b:79:3a:2e:2c:91:f9:93:f1:8d:7b:2c:68: d0:e1:ad:fe:35:77:76:6d:15:5a:90:18:c3:91:6e: 0d:67:bf:d2:62:79:54:00:cb:d0:5d:86:22:b1:ed: 11:e6:03:3f:a6:82:91:eb:3d:ba:48:8f:53:a3:df: 1b:32:e1:3f:f3:42:ec:45:5c:b1:13:03:68:d9:b2: 67:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:4D:B8:84:03:52:1A:B4:2F:65:6B:9C:04:64:99:FB:94:57:1E:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d7afd3b-6b77-3b2b-8517-169206df0eb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.198.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:f2:5d:e5:38:f8:59:85:2d:a3:1f:f6:aa:88:6c:05:e2:0f: 19:b7:ba:4b:ff:23:a6:ca:5a:05:8b:85:0a:59:67:25:4e:40: e8:7a:0b:fa:28:f9:a4:bf:59:e9:27:8e:f4:fe:89:cb:eb:b1: 69:30:26:02:06:10:c5:98:79:25:1b:7f:cd:5e:74:40:ce:af: 03:f2:8a:80:5a:9d:4f:da:86:a9:cc:fa:4d:ee:c1:04:20:e9: b9:88:81:f6:a7:c4:e3:d4:dd:6a:a0:c0:bb:61:02:ee:66:e7: 04:23:60:7e:68:c2:f5:99:d3:7a:57:4e:16:5d:e9:d9:c4:27: 47:ae:83:cc:33:5c:d2:0d:94:4a:e7:6f:f7:2a:e7:5d:5d:ac: f6:05:52:6c:96:00:43:99:9f:0b:f9:eb:ce:b7:fa:27:52:4c: 16:54:68:10:27:07:1c:16:61:c8:25:c7:7d:24:e5:5f:b2:c3: 14:4b:62:c7:10:8a:5d:45:6b:f4:be:26:a1:b8:98:6e:86:7f: a2:10:9b:e9:34:bf:3e:12:a7:1c:10:86:3f:23:c0:af:93:b8: de:9c:e4:61:61:af:47:64:ed:27:db:40:35:9d:1c:ac:eb:80: 31:52:5b:7c:c8:07:b7:c8:1b:29:d3:4f:1f:8f:ac:d9:d8:8d: 9c:d5:98:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS/qRljTse7QAT8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YTAyY2NkNjUtNTE0ZS00MWVkLTkyM2YtNDg1NWUyZmM1ZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDmtmnljSeOOKqPQO6kNgqwWipIAGARZYhV7 S6FPUj2Jyz1vnKbNvDK4jCBJHz3+IGQ+HYgMj0Bipk7fAHPKsU1rq7hpPsM7J6Wx X57J86D/IyJWNEThmvrEZElECySDkP/gN4yTrmyiRRWOOdlswoV8lps2cbrWaYbE 2bBcTRxCj9urlBdqQLmpIx9ROxPul6LZa2BdZWzSF3wDdgtRauzJeJxmmxImjj90 mEYSMhuyHyO/NRt5Oi4skfmT8Y17LGjQ4a3+NXd2bRVakBjDkW4NZ7/SYnlUAMvQ XYYise0R5gM/poKR6z26SI9To98bMuE/80LsRVyxEwNo2bJnVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJNuIQDUhq0L2VrnARkmfuUVx75MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMGQ3YWZkM2ItNmI3Ny0z YjJiLTg1MTctMTY5MjA2ZGYwZWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8ZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILyXeU4+FmFLaMf9qqIbAXiDxm3ukv/I6bKWgWLhQpZZyVOQOh6C/oo +aS/WeknjvT+icvrsWkwJgIGEMWYeSUbf81edEDOrwPyioBanU/ahqnM+k3uwQQg 6bmIgfanxOPU3WqgwLthAu5m5wQjYH5owvWZ03pXThZd6dnEJ0eug8wzXNINlErn b/cq511drPYFUmyWAEOZnwv56863+idSTBZUaBAnBxwWYcglx30k5V+ywxRLYscQ il1Fa/S+JqG4mG6Gf6IQm+k0vz4SpxwQhj8jwK+TuN6c5GFhr0dk7SfbQDWdHKzr gDFSW3zIB7fIGynTTx+PrNnYjZzVmO0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:36 2025 by rpki-client