$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17cfe2dc-b644-33bb-bded-1f0961feddfc.roa File: 17cfe2dc-b644-33bb-bded-1f0961feddfc.roa (raw, json) Hash identifier: juutW3+XKkcFIRx0MZpCsnzrg2Qs8WeF4OEt6hRuwg8= Subject key identifier: 69:85:FC:6D:78:32:1C:60:37:04:27:50:E3:CB:5D:81:A1:1D:7B:09 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BEC8DF3B16BE03C702C60 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17cfe2dc-b644-33bb-bded-1f0961feddfc.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.222.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:ec:8d:f3:b1:6b:e0:3c:70:2c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=142a2833-3be8-4d4c-b75e-fc4b3857bdf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:17:82:c7:14:3c:e8:34:8f:87:c5:c1:60:53: b0:41:cd:f8:c6:50:2a:97:65:03:3a:26:01:6b:e1: fd:91:2b:50:62:29:0f:13:27:66:b5:b0:b4:1d:58: 5c:cb:1f:07:07:29:4a:0d:3e:ad:92:9f:98:c1:3f: f8:5f:77:fa:17:99:74:36:d3:93:6b:7d:8b:86:96: 2c:f2:b4:e4:6e:de:1c:05:3d:45:e2:ed:70:2d:f2: 0c:a5:4f:38:f3:db:88:57:19:12:7f:9e:8e:e8:b1: 69:99:7d:a2:1a:ed:c0:57:0a:41:4d:d5:8d:4b:de: 9f:00:a2:33:4f:71:a7:c7:f5:8b:7c:f1:ba:38:0a: db:b2:ec:fb:65:fd:1e:4f:46:f9:b4:6d:cc:44:e1: a2:71:a7:cd:55:2b:2c:27:90:53:81:49:20:c2:79: 5f:a9:91:d9:65:42:61:8f:ca:31:ec:fc:22:92:8e: ee:8c:d1:43:c7:ef:fe:10:47:6d:d1:4d:f8:b8:ab: a0:0f:25:cb:3d:96:aa:fa:de:f0:b2:ca:ab:d2:4e: e2:f3:1b:4d:fc:c8:e0:2e:73:a9:e1:27:73:08:9c: c7:c8:ba:f6:67:7f:b1:64:d9:b6:1c:17:b8:ff:65: af:1e:b6:2c:24:0c:4a:c0:6a:80:11:07:60:61:84: ee:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:85:FC:6D:78:32:1C:60:37:04:27:50:E3:CB:5D:81:A1:1D:7B:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17cfe2dc-b644-33bb-bded-1f0961feddfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.222.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:b7:74:f6:23:1b:b6:1d:6c:d6:55:ea:89:a1:23:14:9f:0d: da:f3:8e:42:62:7b:42:36:ba:5b:93:75:69:50:c3:e2:a2:f4: 8b:4a:ca:d5:6b:03:53:3d:63:90:ed:ab:57:b3:49:10:53:f0: 75:50:dd:28:de:73:48:6c:5e:57:e2:64:f9:83:8d:1b:b4:5a: 1e:de:5d:d2:cf:43:de:a9:41:da:c1:9d:83:3a:0e:e3:69:f7: f9:fd:38:41:18:a6:ac:b9:8a:e7:d1:03:e6:fd:42:40:ab:ae: f5:96:53:26:1b:d0:eb:41:d7:ae:47:59:0d:de:ef:7b:18:08: b3:ef:b6:ac:7f:36:44:35:ae:36:80:69:e8:73:ed:3f:cb:ea: 73:6f:2d:cb:2c:87:b2:a3:81:0d:41:c8:13:b0:d8:e5:93:bf: bf:f2:dd:89:dd:4d:18:ec:9c:99:64:ce:a2:9b:ff:64:e9:45: 93:e9:09:c0:76:60:00:53:a8:9e:51:c5:d7:78:68:9f:2a:4a: 58:da:f8:c4:3a:53:51:d2:e8:f4:f4:af:17:24:99:6c:be:a3: 7c:99:66:78:8d:ce:4d:b7:51:64:29:8b:b8:75:cf:48:9d:57: 7d:d0:56:bc:e7:83:50:13:3d:dd:47:11:94:08:2d:64:ef:a9: 5b:d3:1e:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+yN87Fr4DxwLGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MTQyYTI4MzMtM2JlOC00ZDRjLWI3NWUtZmM0YjM4NTdiZGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBeCxxQ86DSPh8XBYFOwQc34xlAql2UDOiYB a+H9kStQYikPEydmtbC0HVhcyx8HBylKDT6tkp+YwT/4X3f6F5l0NtOTa32LhpYs 8rTkbt4cBT1F4u1wLfIMpU8489uIVxkSf56O6LFpmX2iGu3AVwpBTdWNS96fAKIz T3Gnx/WLfPG6OArbsuz7Zf0eT0b5tG3MROGicafNVSssJ5BTgUkgwnlfqZHZZUJh j8ox7Pwiko7ujNFDx+/+EEdt0U34uKugDyXLPZaq+t7wssqr0k7i8xtN/MjgLnOp 4SdzCJzHyLr2Z3+xZNm2HBe4/2WvHrYsJAxKwGqAEQdgYYTu9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmF/G14MhxgNwQnUOPLXYGhHXsJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMTdjZmUyZGMtYjY0NC0z M2JiLWJkZWQtMWYwOTYxZmVkZGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI95IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIK3dPYjG7YdbNZV6omhIxSfDdrzjkJie0I2uluTdWlQw+Ki9ItKytVr A1M9Y5Dtq1ezSRBT8HVQ3Sjec0hsXlfiZPmDjRu0Wh7eXdLPQ96pQdrBnYM6DuNp 9/n9OEEYpqy5iufRA+b9QkCrrvWWUyYb0OtB165HWQ3e73sYCLPvtqx/NkQ1rjaA aehz7T/L6nNvLcssh7KjgQ1ByBOw2OWTv7/y3YndTRjsnJlkzqKb/2TpRZPpCcB2 YABTqJ5Rxdd4aJ8qSlja+MQ6U1HS6PT0rxckmWy+o3yZZniNzk23UWQpi7h1z0id V33QVrzng1ATPd1HEZQILWTvqVvTHgg= -----END CERTIFICATE-----Generated at Fri Apr 4 21:47:51 2025 by rpki-client