$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/238ca3a5-8db5-3863-9fea-5084e4dd311e.roa File: 238ca3a5-8db5-3863-9fea-5084e4dd311e.roa (raw, json) Hash identifier: 4dFH55rg3nU+JwsUiEBMsZbjhU0YcI4HYXhNvgbDy/U= Subject key identifier: 83:87:72:6B:1D:AB:47:1E:A2:77:68:38:87:86:69:23:E8:94:8E:9C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C07755BF33BF3A254E200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/238ca3a5-8db5-3863-9fea-5084e4dd311e.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.189.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:07:75:5b:f3:3b:f3:a2:54:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=2588e564-d9bc-4930-bfbf-01e096b3e5ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:78:81:56:70:88:4b:aa:16:86:50:f9:9d:54: cb:41:f9:78:62:50:f0:ae:45:7e:4b:4c:fd:88:cf: e4:fb:e4:61:23:6f:a7:0f:f7:96:37:83:4c:3f:81: 1a:b6:c6:56:ec:e8:c1:19:31:fd:64:98:b1:76:92: ae:94:ef:7a:8a:40:6e:cf:bb:a7:13:9d:48:6b:5f: 52:8a:fa:98:36:12:a7:e8:3d:bf:6e:30:03:ab:5e: 79:50:31:14:43:46:dc:b7:27:ed:89:3b:13:58:30: c7:0b:bc:58:04:e0:c5:0e:b1:92:2b:c2:5c:c9:f1: 69:91:3a:56:d3:3b:e0:45:9c:4a:d6:03:d3:05:25: f5:be:eb:c4:27:44:68:63:98:24:2b:74:99:b6:80: 69:ab:f2:7f:27:63:69:aa:ef:a0:ce:d9:14:a8:a5: 05:1d:14:09:f9:c4:94:9e:fb:e1:a9:4d:87:75:bc: 08:9d:cb:23:75:33:21:f4:71:28:9b:ef:62:d7:ef: fd:c3:f9:43:e6:b5:ac:73:ae:f4:ca:68:30:d6:68: 1c:76:dd:58:08:11:7e:aa:d9:90:af:13:b5:10:9e: 85:59:46:28:c4:ff:98:74:82:6e:64:a9:f7:26:27: a7:4b:c1:e1:54:a3:91:e2:68:cd:56:de:2d:70:4c: f7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:87:72:6B:1D:AB:47:1E:A2:77:68:38:87:86:69:23:E8:94:8E:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/238ca3a5-8db5-3863-9fea-5084e4dd311e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.189.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:52:3c:d8:42:a5:6a:26:49:d8:28:28:02:61:f0:25:1d:6f: 60:7e:ba:49:fc:38:31:ac:ab:42:61:20:49:96:58:ad:ca:03: c5:16:8b:73:14:92:b0:f9:80:f6:e3:ab:c4:9f:5b:4e:25:d4: 3d:c8:85:42:8a:98:dc:4e:de:a5:90:2c:36:29:00:72:bd:ca: 93:17:dd:f0:09:90:75:3d:73:68:8d:cc:6f:4a:17:41:82:73: 4e:8e:5c:74:97:12:da:dd:46:8c:a2:06:5f:9c:95:11:91:f5: 7b:ab:1e:00:5e:9d:89:df:a5:a4:8c:93:67:f0:92:18:12:7a: 56:f3:82:7e:08:11:a9:f5:34:aa:d8:cf:73:e9:cb:ee:8b:d9: 1e:3f:ee:88:54:93:f8:ba:02:fe:5f:4c:0e:a4:80:2d:3e:51: 78:97:16:c4:db:3d:1f:52:3d:73:1f:07:cf:a8:bc:c8:a3:a7: ee:1b:1a:6f:96:32:18:61:16:fc:c9:da:7b:a0:60:cf:44:21: 11:65:cd:79:af:a6:0d:07:c3:da:bf:27:d7:2c:7e:f8:8e:36: 08:b1:af:ab:1b:03:3a:ab:61:03:84:06:58:39:77:b7:d4:8d: fd:10:3f:84:13:8f:86:76:d1:07:a6:6b:4c:c9:7d:c4:d3:aa: 0e:a7:01:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITAd1W/M786JU4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MjU4OGU1NjQtZDliYy00OTMwLWJmYmYtMDFlMDk2YjNlNWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHiBVnCIS6oWhlD5nVTLQfl4YlDwrkV+S0z9 iM/k++RhI2+nD/eWN4NMP4EatsZW7OjBGTH9ZJixdpKulO96ikBuz7unE51Ia19S ivqYNhKn6D2/bjADq155UDEUQ0bctyftiTsTWDDHC7xYBODFDrGSK8JcyfFpkTpW 0zvgRZxK1gPTBSX1vuvEJ0RoY5gkK3SZtoBpq/J/J2Npqu+gztkUqKUFHRQJ+cSU nvvhqU2HdbwIncsjdTMh9HEom+9i1+/9w/lD5rWsc670ymgw1mgcdt1YCBF+qtmQ rxO1EJ6FWUYoxP+YdIJuZKn3JienS8HhVKOR4mjNVt4tcEz3kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOHcmsdq0ceondoOIeGaSPolI6cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjM4Y2EzYTUtOGRiNS0z ODYzLTlmZWEtNTA4NGU0ZGQzMTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI70AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxSPNhCpWomSdgoKAJh8CUdb2B+ukn8ODGsq0JhIEmWWK3KA8UWi3MU krD5gPbjq8SfW04l1D3IhUKKmNxO3qWQLDYpAHK9ypMX3fAJkHU9c2iNzG9KF0GC c06OXHSXEtrdRoyiBl+clRGR9XurHgBenYnfpaSMk2fwkhgSelbzgn4IEan1NKrY z3Ppy+6L2R4/7ohUk/i6Av5fTA6kgC0+UXiXFsTbPR9SPXMfB8+ovMijp+4bGm+W MhhhFvzJ2nugYM9EIRFlzXmvpg0Hw9q/J9csfviONgixr6sbAzqrYQOEBlg5d7fU jf0QP4QTj4Z20Qema0zJfcTTqg6nAe0= -----END CERTIFICATE-----Generated at Fri Apr 4 21:47:37 2025 by rpki-client