$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/139dfd56-ae68-327a-b11e-00a97fe9a2ec.roa File: 139dfd56-ae68-327a-b11e-00a97fe9a2ec.roa (raw, json) Hash identifier: wi4SeG0bpPMyYomxlPoPD0Q88nExiPBuKR8iUgFxfk8= Subject key identifier: B8:6D:80:18:0B:CC:F8:7D:FE:32:5C:E5:33:56:56:DF:C9:AC:F2:98 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BEBDED86079456C5930E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/139dfd56-ae68-327a-b11e-00a97fe9a2ec.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.238.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:eb:de:d8:60:79:45:6c:59:30:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=3d4155b5-44ce-438d-910a-f6c5af03b1ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:02:7c:06:39:10:0d:64:9a:a1:f1:5b:5d:dd: 97:d3:30:bf:c4:47:ea:09:9b:e6:19:4f:0f:b6:cc: e4:af:9a:65:70:e1:d3:ac:1d:20:3d:cb:8c:95:08: 36:69:1c:2f:2d:1f:96:46:a9:60:94:ee:22:df:8a: c0:0a:5b:94:85:37:ac:3b:2d:4e:89:95:5d:81:27: 40:01:e5:76:82:59:e6:bc:ae:a4:3c:78:17:cd:79: e1:2f:ec:ee:23:1f:17:e2:60:f4:47:2f:e4:ef:5f: 07:c7:42:50:34:4b:48:62:30:11:82:e1:e0:7b:a9: d1:ac:74:94:27:e2:1f:55:8a:5a:60:88:c0:d7:8d: 62:75:60:5c:12:04:f4:68:1a:7c:d5:c4:55:0b:f8: 31:be:e7:ba:af:38:36:73:35:e3:05:c8:9d:b9:92: 92:fe:bb:4a:28:ee:eb:9b:80:2f:cb:46:e2:18:32: 23:0d:21:50:a3:05:70:ea:a0:85:c4:2a:64:e6:13: 5f:bd:13:51:e1:0b:9d:80:4f:81:4d:a8:5f:51:ad: 89:bb:c8:6c:8b:bd:cb:ee:a6:6a:78:33:82:47:f0: 40:d8:f5:fb:48:32:55:33:4e:bd:83:f2:d6:12:ab: fb:09:3f:e1:e0:ee:64:ca:00:63:e2:b6:8a:af:46: ef:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:6D:80:18:0B:CC:F8:7D:FE:32:5C:E5:33:56:56:DF:C9:AC:F2:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/139dfd56-ae68-327a-b11e-00a97fe9a2ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:64:88:1e:b1:a5:94:ca:e5:83:4a:67:bb:1f:f4:2b:45:4d: 29:33:55:de:52:23:00:c0:40:87:6b:f4:f1:f7:bf:02:c2:aa: 4a:3e:b6:5c:43:86:78:e9:83:af:8c:60:ee:7a:d9:c3:0f:2c: 5b:74:b7:81:85:9c:e0:96:c2:32:04:52:61:af:52:70:bd:c9: 9e:4c:c5:b4:b1:22:5f:e4:4a:83:82:a3:19:4d:96:af:18:f3: 66:7f:b2:69:d7:96:30:7a:88:fb:35:1c:95:5b:6f:8c:8d:aa: d9:38:88:b7:58:18:dd:2d:61:62:ec:21:1d:2f:2a:ee:90:aa: 52:6c:ee:ad:25:dd:76:b4:99:35:18:4c:cb:1d:df:87:b1:15: 30:ae:db:4a:57:00:a1:57:89:0f:5f:d1:7a:27:11:fc:f0:01: b1:22:3e:e3:d0:d4:8c:4c:0b:d7:de:ca:3d:45:52:be:bb:01: 21:80:81:4e:38:85:e0:09:a5:cd:c5:03:df:49:b0:4d:e1:8c: 1a:48:98:74:7a:b4:bd:23:d6:c0:53:c7:e3:a8:19:2f:bd:23: e2:bf:59:4c:6b:ba:00:50:b5:13:48:bc:62:94:26:7d:e2:0f: 23:9d:06:81:16:ee:37:0d:f0:71:1c:88:69:3d:9d:9d:af:20: e8:e6:4f:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+ve2GB5RWxZMOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk M2Q0MTU1YjUtNDRjZS00MzhkLTkxMGEtZjZjNWFmMDNiMWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgJ8BjkQDWSaofFbXd2X0zC/xEfqCZvmGU8P tszkr5plcOHTrB0gPcuMlQg2aRwvLR+WRqlglO4i34rACluUhTesOy1OiZVdgSdA AeV2glnmvK6kPHgXzXnhL+zuIx8X4mD0Ry/k718Hx0JQNEtIYjARguHge6nRrHSU J+IfVYpaYIjA141idWBcEgT0aBp81cRVC/gxvue6rzg2czXjBciduZKS/rtKKO7r m4Avy0biGDIjDSFQowVw6qCFxCpk5hNfvRNR4QudgE+BTahfUa2Ju8hsi73L7qZq eDOCR/BA2PX7SDJVM069g/LWEqv7CT/h4O5kygBj4raKr0bvKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhtgBgLzPh9/jJc5TNWVt/JrPKYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTM5ZGZkNTYtYWU2OC0z MjdhLWIxMWUtMDBhOTdmZTlhMmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpkiB6xpZTK5YNKZ7sf9CtFTSkzVd5SIwDAQIdr9PH3vwLCqko+tlxD hnjpg6+MYO562cMPLFt0t4GFnOCWwjIEUmGvUnC9yZ5MxbSxIl/kSoOCoxlNlq8Y 82Z/smnXljB6iPs1HJVbb4yNqtk4iLdYGN0tYWLsIR0vKu6QqlJs7q0l3Xa0mTUY TMsd34exFTCu20pXAKFXiQ9f0XonEfzwAbEiPuPQ1IxMC9feyj1FUr67ASGAgU44 heAJpc3FA99JsE3hjBpImHR6tL0j1sBTx+OoGS+9I+K/WUxrugBQtRNIvGKUJn3i DyOdBoEW7jcN8HEciGk9nZ2vIOjmTzo= -----END CERTIFICATE-----Generated at Fri Apr 4 21:47:47 2025 by rpki-client