$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/238329cc-9d7c-33bd-9ca1-6eeaa3939f31.roa File: 238329cc-9d7c-33bd-9ca1-6eeaa3939f31.roa (raw, json) Hash identifier: LkvvshrAvxMKCKM1trQmAU5+64SS0/Y4jxGrKjo7ojM= Subject key identifier: 9E:72:2E:C7:3B:98:57:66:0A:5A:1D:BF:B4:E9:C7:70:D7:4E:39:DC Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BAB47B7EB57C1E4CE8700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/238329cc-9d7c-33bd-9ca1-6eeaa3939f31.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.204.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:ab:47:b7:eb:57:c1:e4:ce:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=ceba6148-5877-4ec3-b1c5-03984b150422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3d:39:e7:0f:1c:2c:b8:6c:b1:39:b5:f0:24: 61:fc:8b:18:a9:5f:c0:78:f5:5e:17:d1:6f:88:f1: be:47:03:ce:ff:bc:45:bb:f4:d1:be:cc:ea:3e:0a: 7f:93:52:c0:c6:4b:ce:00:42:48:0a:1a:3d:b0:b6: da:cc:32:5f:20:7f:93:39:74:d1:2e:50:f4:47:cd: 34:c5:5a:84:02:39:3a:60:12:da:5d:ee:53:f2:8b: 66:a1:ad:94:59:3d:72:0c:f7:5c:d5:fb:10:c1:36: be:70:39:19:a6:c4:1f:9d:fe:ea:89:0f:6f:e0:b9: fd:c4:2c:51:0f:25:a2:48:4a:15:83:7d:d7:28:78: 2f:b1:09:30:1c:fc:16:06:5f:d7:48:03:59:68:5b: 21:81:4f:d9:cd:80:ea:52:8a:ef:22:ba:69:c7:a9: 8c:43:19:a5:ee:3e:72:bb:ec:d2:2c:ab:cf:a6:ad: cb:2b:7d:d5:32:5e:77:f3:4f:fc:41:b2:e1:67:32: 54:e1:ac:3d:15:ee:66:01:c5:01:0a:1d:e1:37:03: 71:5b:f7:7c:a6:ec:0c:77:3f:51:80:f7:66:7b:a3: ba:db:ce:c2:b4:07:dd:dd:07:56:f5:8b:9b:f6:67: ad:e0:1e:be:67:a1:bc:ac:f9:cf:c3:b9:ef:a7:7b: dc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:72:2E:C7:3B:98:57:66:0A:5A:1D:BF:B4:E9:C7:70:D7:4E:39:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/238329cc-9d7c-33bd-9ca1-6eeaa3939f31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.204.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:08:2f:ca:af:4a:b7:00:08:07:31:95:9b:67:79:d5:fb:ed: 6a:6c:23:64:0c:c4:39:12:fc:41:90:bf:37:ab:ff:44:17:da: cf:68:16:63:bc:93:a4:68:73:66:b8:a0:d1:0c:16:b4:88:87: bd:c8:c9:a1:08:1b:e1:81:75:30:7c:04:18:2c:94:b0:96:33: 1b:e7:17:37:b6:60:40:fc:a3:9a:95:dd:f0:c2:37:07:63:d3: 08:bd:33:9f:c2:32:52:63:98:6a:ab:87:98:c0:44:dc:ca:6c: c1:2d:43:c2:22:39:9c:6c:40:92:c1:e5:20:0d:3c:7b:1f:fa: 7d:76:0f:31:c0:df:c1:00:5c:88:84:bf:70:99:8d:2b:6d:4d: 26:a3:74:59:b9:bc:84:79:03:41:9f:0c:5f:7b:9a:76:ee:95: dc:dc:13:7d:43:86:a3:99:75:f1:f2:e3:13:42:1a:ef:5a:4e: 29:d6:d7:c5:d6:f6:ed:20:e6:ff:b5:8c:02:9d:9a:61:c7:82: ad:f9:b4:e4:b0:58:01:b7:9d:2b:f9:1e:81:34:4e:67:63:82: 1f:44:1b:92:52:be:b3:03:ae:45:20:cb:eb:48:1f:e7:b2:95: 74:ae:c6:54:e0:76:27:45:c1:c4:5b:54:95:d7:cc:48:62:ac: eb:20:0d:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS6tHt+tXweTOhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk Y2ViYTYxNDgtNTg3Ny00ZWMzLWIxYzUtMDM5ODRiMTUwNDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD055w8cLLhssTm18CRh/IsYqV/AePVeF9Fv iPG+RwPO/7xFu/TRvszqPgp/k1LAxkvOAEJICho9sLbazDJfIH+TOXTRLlD0R800 xVqEAjk6YBLaXe5T8otmoa2UWT1yDPdc1fsQwTa+cDkZpsQfnf7qiQ9v4Ln9xCxR DyWiSEoVg33XKHgvsQkwHPwWBl/XSANZaFshgU/ZzYDqUorvIrppx6mMQxml7j5y u+zSLKvPpq3LK33VMl5380/8QbLhZzJU4aw9Fe5mAcUBCh3hNwNxW/d8puwMdz9R gPdme6O6287CtAfd3QdW9Yub9met4B6+Z6G8rPnPw7nvp3vcqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5yLsc7mFdmClodv7Tpx3DXTjncMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjM4MzI5Y2MtOWQ3Yy0z M2JkLTljYTEtNmVlYWEzOTM5ZjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8zgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKkIL8qvSrcACAcxlZtnedX77WpsI2QMxDkS/EGQvzer/0QX2s9oFmO8 k6Roc2a4oNEMFrSIh73IyaEIG+GBdTB8BBgslLCWMxvnFze2YED8o5qV3fDCNwdj 0wi9M5/CMlJjmGqrh5jARNzKbMEtQ8IiOZxsQJLB5SANPHsf+n12DzHA38EAXIiE v3CZjSttTSajdFm5vIR5A0GfDF97mnbuldzcE31DhqOZdfHy4xNCGu9aTinW18XW 9u0g5v+1jAKdmmHHgq35tOSwWAG3nSv5HoE0Tmdjgh9EG5JSvrMDrkUgy+tIH+ey lXSuxlTgdidFwcRbVJXXzEhirOsgDfQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:56 2025 by rpki-client