$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22aa4d02-615a-3483-9e42-f7dbb847dc21.roa File: 22aa4d02-615a-3483-9e42-f7dbb847dc21.roa (raw, json) Hash identifier: d5D7btg0c9DEO1UwMGsgg5Y2ENeXL3eEh447cjPI4r0= Subject key identifier: CC:EC:8A:FB:5E:EC:C5:78:36:A2:BD:11:BA:1E:4D:16:A1:E7:60:D4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C188F5D17254442676880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22aa4d02-615a-3483-9e42-f7dbb847dc21.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.201.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:18:8f:5d:17:25:44:42:67:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=5ea545bd-87f1-4ab0-ba71-5498ac18de9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9d:78:47:f0:40:d7:d8:1b:74:41:2d:58:50: ad:77:59:ab:80:24:59:c0:97:aa:41:58:e6:a0:09: bf:b0:b4:a2:38:4f:58:55:60:eb:b2:15:67:42:81: d0:16:f4:ee:27:6b:6e:84:74:05:0d:13:81:3a:3a: d5:97:f9:21:e4:5a:13:24:45:24:08:e6:bf:62:a8: 2f:c5:2d:ae:db:fa:d9:1b:7c:79:82:e7:96:67:ea: 34:db:ed:2d:4d:6d:b3:98:f1:3a:96:bc:55:7b:1d: f2:35:d4:b4:88:bd:52:d4:de:4c:b1:15:87:31:37: 44:b1:d1:71:55:42:45:cc:ef:fa:54:74:2a:87:38: c3:ee:35:41:59:93:18:90:d5:fd:04:77:92:a1:26: 51:b9:99:32:70:21:b1:0e:0f:a9:ce:c9:cd:5c:6a: 60:6d:bf:2a:fa:51:3c:af:0f:9e:ea:23:98:d3:39: b1:44:43:80:41:26:48:64:5e:be:f7:57:fa:33:a7: 98:6b:e3:4b:92:0b:f2:af:ba:26:de:19:de:f8:ab: e5:2d:3f:53:17:3e:9d:02:73:87:f4:db:fb:a8:27: 6e:70:09:c6:4f:6a:0c:e7:b5:d1:06:e1:ec:3e:ba: 0c:0e:d5:a3:0b:45:09:e4:6d:a9:b3:a9:54:31:f9: d4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:EC:8A:FB:5E:EC:C5:78:36:A2:BD:11:BA:1E:4D:16:A1:E7:60:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/22aa4d02-615a-3483-9e42-f7dbb847dc21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.201.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:8d:76:8a:be:f8:93:1a:22:c1:0c:0c:4b:ec:b8:24:fd:70: da:ec:fd:a3:51:dd:4f:89:8f:b6:42:2a:b3:1a:52:f6:fb:dc: 7f:42:5a:a1:1d:9c:42:b6:7f:2d:3f:30:97:23:87:40:af:e8: 66:c4:26:0f:67:e6:b0:cb:1f:f3:1e:7b:c8:f6:aa:50:ce:a8: e4:19:96:ba:42:75:ee:50:1e:77:d1:d3:8f:48:08:5b:8e:d1: e7:9d:f5:eb:26:28:e0:cf:82:c2:06:01:7a:67:f4:cf:cb:04: 2f:1a:34:df:69:90:f3:6c:0f:9d:37:7a:1b:98:3e:87:5b:7a: b8:f7:bd:3b:ee:68:7f:b5:72:ed:fb:69:b0:2f:9c:5a:18:d4: 6e:69:79:f4:3d:5c:1c:d9:f7:fe:30:88:a0:d3:03:c6:4a:70: ce:23:14:a0:ff:7c:1d:99:2a:df:43:05:45:2c:49:af:cf:1b: f3:0f:20:47:da:60:94:18:d6:72:a3:e6:7a:16:3e:29:e6:8b: 75:f2:41:be:e7:14:87:47:0b:c4:53:fa:ea:2b:dd:79:7b:f0: 3f:90:c4:0d:03:35:ee:ed:93:07:96:2d:31:c7:ef:83:4d:53: 40:27:48:48:fc:a2:f5:d6:5e:4f:ee:63:87:a4:dd:c9:53:90: e2:e8:df:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITBiPXRclREJnaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NWVhNTQ1YmQtODdmMS00YWIwLWJhNzEtNTQ5OGFjMThkZTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgp14R/BA19gbdEEtWFCtd1mrgCRZwJeqQVjm oAm/sLSiOE9YVWDrshVnQoHQFvTuJ2tuhHQFDROBOjrVl/kh5FoTJEUkCOa/Yqgv xS2u2/rZG3x5gueWZ+o02+0tTW2zmPE6lrxVex3yNdS0iL1S1N5MsRWHMTdEsdFx VUJFzO/6VHQqhzjD7jVBWZMYkNX9BHeSoSZRuZkycCGxDg+pzsnNXGpgbb8q+lE8 rw+e6iOY0zmxREOAQSZIZF6+91f6M6eYa+NLkgvyr7om3hne+KvlLT9TFz6dAnOH 9Nv7qCducAnGT2oM57XRBuHsProMDtWjC0UJ5G2ps6lUMfnUFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzsivte7MV4NqK9EboeTRah52DUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjJhYTRkMDItNjE1YS0z NDgzLTllNDItZjdkYmI4NDdkYzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8nAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmNdoq++JMaIsEMDEvsuCT9cNrs/aNR3U+Jj7ZCKrMaUvb73H9CWqEd nEK2fy0/MJcjh0Cv6GbEJg9n5rDLH/Mee8j2qlDOqOQZlrpCde5QHnfR049ICFuO 0eed9esmKODPgsIGAXpn9M/LBC8aNN9pkPNsD503ehuYPodberj3vTvuaH+1cu37 abAvnFoY1G5pefQ9XBzZ9/4wiKDTA8ZKcM4jFKD/fB2ZKt9DBUUsSa/PG/MPIEfa YJQY1nKj5noWPinmi3XyQb7nFIdHC8RT+uor3Xl78D+QxA0DNe7tkweWLTHH74NN U0AnSEj8ovXWXk/uY4ek3clTkOLo35M= -----END CERTIFICATE-----Generated at Fri Apr 4 21:47:44 2025 by rpki-client