$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25cf0945-d5e8-3596-b1e6-0f7575079833.roa File: 25cf0945-d5e8-3596-b1e6-0f7575079833.roa (raw, json) Hash identifier: WNsfbynpuFz0+6AlLR1Y8aTO9zd8uwA68FJIrJ7tOHM= Subject key identifier: 6D:79:20:C6:C7:F3:E3:28:BA:D4:0E:F3:E6:ED:CA:E7:84:4A:B6:F4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BBB1D86F1BC9033C9D680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25cf0945-d5e8-3596-b1e6-0f7575079833.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.243.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:bb:1d:86:f1:bc:90:33:c9:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=825e13a2-24bf-40b4-b5f5-ab5d45d91fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:02:89:38:34:83:2f:22:88:27:54:f1:63:0d: e2:c3:61:92:90:ef:ef:55:a4:46:e1:4e:57:a3:6f: a8:ea:25:e0:bb:b6:79:c2:ac:59:74:c5:15:88:9e: 4f:f3:a5:e3:ed:99:79:81:89:98:75:a6:83:04:22: b4:70:14:64:05:a0:b0:15:c8:95:08:9b:17:e6:5e: 99:4a:68:36:7d:4d:10:75:84:fe:ab:77:41:c4:62: 33:68:dc:e6:15:7f:10:66:70:f9:9b:a1:79:2d:46: 03:34:50:bb:4c:3a:9c:a5:ab:25:a7:0f:90:50:a5: 2d:37:e9:0b:e4:3b:f8:22:54:4b:0c:86:71:eb:e4: fc:b0:f8:e6:16:4b:15:63:fb:6e:f2:06:c6:9b:cf: db:f6:fd:ce:eb:fd:1a:d0:ab:78:46:aa:ed:b9:17: 08:56:30:17:f3:20:21:83:ea:53:11:4c:f5:f4:03: f4:34:c9:d0:59:07:5f:b0:90:a7:14:57:55:b9:ef: 66:19:e6:86:21:26:a0:b0:08:31:df:fe:d4:de:ec: c2:1c:fb:52:e3:1e:cb:42:e3:15:0b:90:82:3c:a0: 70:06:b7:86:d8:53:1c:89:0e:51:00:e4:e3:62:f4: 15:c3:8f:fd:41:50:f6:76:33:98:ea:83:69:dc:f1: 21:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:79:20:C6:C7:F3:E3:28:BA:D4:0E:F3:E6:ED:CA:E7:84:4A:B6:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/25cf0945-d5e8-3596-b1e6-0f7575079833.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.243.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:b0:27:61:c6:fe:5c:f7:75:db:93:d0:38:cb:0e:f2:b9:5e: 2a:7d:60:36:2f:0d:78:81:43:e4:4e:50:b3:06:50:19:8d:a4: 01:28:0d:c3:b2:32:17:ad:8b:bc:05:f4:e7:45:8c:7d:20:4d: 53:a7:16:00:d4:46:68:73:86:f5:ee:c1:67:66:11:19:8c:9c: 6a:a5:2f:ec:82:09:bc:81:40:31:69:2e:14:a9:ab:b9:4f:54: e8:89:83:f9:b5:0c:8a:8d:8e:a7:fe:e6:46:20:ce:b8:d3:cc: d0:1d:3d:8a:51:18:2c:09:74:69:53:56:a2:b8:40:c4:73:e5: ee:22:9d:6d:5e:52:08:79:3f:c1:05:ba:2b:bb:c1:d2:db:a4: 98:a2:25:1d:fb:50:96:b3:88:7a:8e:4c:c3:6e:64:db:37:0c: 42:5b:e8:e6:70:e6:fe:25:88:76:43:fb:47:fa:a0:fd:80:1c: cb:bd:b8:89:b9:65:d9:56:ed:b3:42:de:3f:6c:23:0a:5f:04: 63:4d:c7:8d:ba:32:1b:9d:9e:b9:70:ec:df:fe:0d:d5:f9:d9: 0e:46:ae:15:c5:f9:63:04:19:f3:bf:d7:ff:96:95:ce:aa:36: 42:55:fa:b6:fe:e8:42:33:14:9f:29:f1:28:07:d3:34:39:db: 28:53:d9:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS7sdhvG8kDPJ1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ODI1ZTEzYTItMjRiZi00MGI0LWI1ZjUtYWI1ZDQ1ZDkxZmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAKJODSDLyKIJ1TxYw3iw2GSkO/vVaRG4U5X o2+o6iXgu7Z5wqxZdMUViJ5P86Xj7Zl5gYmYdaaDBCK0cBRkBaCwFciVCJsX5l6Z Smg2fU0QdYT+q3dBxGIzaNzmFX8QZnD5m6F5LUYDNFC7TDqcpaslpw+QUKUtN+kL 5Dv4IlRLDIZx6+T8sPjmFksVY/tu8gbGm8/b9v3O6/0a0Kt4RqrtuRcIVjAX8yAh g+pTEUz19AP0NMnQWQdfsJCnFFdVue9mGeaGISagsAgx3/7U3uzCHPtS4x7LQuMV C5CCPKBwBreG2FMciQ5RAOTjYvQVw4/9QVD2djOY6oNp3PEhuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG15IMbH8+MoutQO8+btyueESrb0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjVjZjA5NDUtZDVlOC0z NTk2LWIxZTYtMGY3NTc1MDc5ODMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI/MoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiwJ2HG/lz3dduT0DjLDvK5Xip9YDYvDXiBQ+ROULMGUBmNpAEoDcOy Mheti7wF9OdFjH0gTVOnFgDURmhzhvXuwWdmERmMnGqlL+yCCbyBQDFpLhSpq7lP VOiJg/m1DIqNjqf+5kYgzrjTzNAdPYpRGCwJdGlTVqK4QMRz5e4inW1eUgh5P8EF uiu7wdLbpJiiJR37UJaziHqOTMNuZNs3DEJb6OZw5v4liHZD+0f6oP2AHMu9uIm5 ZdlW7bNC3j9sIwpfBGNNx426Mhudnrlw7N/+DdX52Q5GrhXF+WMEGfO/1/+Wlc6q NkJV+rb+6EIzFJ8p8SgH0zQ52yhT2d8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:26 2025 by rpki-client