$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/29f25555-a4fa-3bb4-a8a3-1dd199cb30aa.roa File: 29f25555-a4fa-3bb4-a8a3-1dd199cb30aa.roa (raw, json) Hash identifier: Nv+0BSOYI77yP4orloFuEV7P71Gn/HakxJJLCVtx7Ic= Subject key identifier: 4F:4C:A2:64:E1:DC:47:D4:91:0D:35:4D:8A:BA:B6:F6:83:75:2D:62 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BC7A6C10DDDD63DF840E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/29f25555-a4fa-3bb4-a8a3-1dd199cb30aa.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.222.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:c7:a6:c1:0d:dd:d6:3d:f8:40:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=ab9831ee-2614-4bf3-90bd-a8f737470faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:06:22:6f:2b:ec:0c:aa:4f:2a:78:19:4a:3b: 22:ff:80:5b:3f:a7:8b:8e:9f:8a:60:78:a0:21:bd: f0:43:cc:bd:6e:2c:de:53:98:84:1c:66:a4:c6:39: 88:23:bc:d2:84:41:74:ba:e1:f3:f1:72:c3:c0:bd: 83:10:ef:99:19:00:72:de:03:92:a2:2c:88:eb:f1: 04:35:46:d4:ba:2b:1e:30:61:ce:bb:94:89:9e:0c: ff:76:76:36:79:a0:6b:f9:6f:35:02:de:91:bc:64: 67:02:bc:17:b8:f3:0e:58:19:6f:b5:d9:75:ab:fd: be:37:c6:f5:f1:c1:e5:6b:8e:11:00:57:3c:0a:64: c9:f9:09:ca:c9:36:ab:7c:32:b0:75:37:26:75:5d: 6c:4f:5f:a0:a5:cf:ba:8b:5d:d0:0a:45:10:ad:9c: 7e:bc:d7:d5:32:94:56:10:d5:c3:bf:cc:87:1b:07: d9:1e:6b:5e:00:66:15:2e:13:45:55:5a:5f:e7:86: 3a:79:4e:83:67:4b:32:ea:23:50:8a:c6:5f:6e:d2: 63:ea:d2:c6:1c:35:c6:8d:3a:b4:b8:ac:f3:0d:38: e6:c5:36:3c:e5:9c:5f:d7:e0:8d:be:03:da:78:4d: 67:1d:f8:a5:81:72:fa:23:8d:7f:d1:f3:02:60:34: 78:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:4C:A2:64:E1:DC:47:D4:91:0D:35:4D:8A:BA:B6:F6:83:75:2D:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/29f25555-a4fa-3bb4-a8a3-1dd199cb30aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.222.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:b0:f8:9c:f8:2f:1a:dd:a2:de:ba:57:15:d2:79:e0:9e:c1: 2b:f1:fa:80:41:c1:73:ae:cf:f2:77:1f:ef:d2:17:7d:82:af: 0c:26:d7:66:ca:49:bf:ae:79:1d:6c:be:ed:42:c5:70:18:36: 3e:d3:a1:17:02:7e:03:04:7f:cb:55:eb:47:08:b1:b9:21:08: 0f:ee:f1:b0:d3:82:c7:dc:25:fb:02:a8:3b:c8:dd:f1:c3:c4: a9:15:ed:55:46:c3:55:a6:5c:68:ef:10:2c:1e:6a:50:dc:ea: c7:2f:3c:82:5b:90:02:52:42:9f:bd:50:d7:37:5c:0c:46:0d: 1b:a7:f1:e1:72:ea:96:86:23:d0:bd:07:93:6d:73:11:08:4c: 02:dc:ff:99:a3:2f:3e:4c:f3:f7:10:ad:6c:c8:3e:76:19:e9: 80:04:b5:49:e3:42:a5:22:3e:22:18:3e:b7:df:90:15:d9:41: 41:2b:50:32:87:66:f3:5b:a5:db:0f:e1:bb:97:bd:e6:8c:9a: f8:55:bf:1a:cc:88:63:bb:93:5f:c5:91:44:60:89:e0:e9:04: 15:d4:d3:b2:c4:be:56:6f:e8:7b:70:81:ce:80:7b:11:f3:bf: b0:81:07:73:47:a6:be:75:8c:f5:17:59:94:9f:e8:78:2f:2a: b5:e5:ef:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8emwQ3d1j34QOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YWI5ODMxZWUtMjYxNC00YmYzLTkwYmQtYThmNzM3NDcwZmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AYibyvsDKpPKngZSjsi/4BbP6eLjp+KYHig Ib3wQ8y9bizeU5iEHGakxjmII7zShEF0uuHz8XLDwL2DEO+ZGQBy3gOSoiyI6/EE NUbUuiseMGHOu5SJngz/dnY2eaBr+W81At6RvGRnArwXuPMOWBlvtdl1q/2+N8b1 8cHla44RAFc8CmTJ+QnKyTarfDKwdTcmdV1sT1+gpc+6i13QCkUQrZx+vNfVMpRW ENXDv8yHGwfZHmteAGYVLhNFVVpf54Y6eU6DZ0sy6iNQisZfbtJj6tLGHDXGjTq0 uKzzDTjmxTY85Zxf1+CNvgPaeE1nHfilgXL6I41/0fMCYDR4OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9MomTh3EfUkQ01TYq6tvaDdS1iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjlmMjU1NTUtYTRmYS0z YmI0LWE4YTMtMWRkMTk5Y2IzMGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI96gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFew+Jz4Lxrdot66VxXSeeCewSvx+oBBwXOuz/J3H+/SF32Crwwm12bK Sb+ueR1svu1CxXAYNj7ToRcCfgMEf8tV60cIsbkhCA/u8bDTgsfcJfsCqDvI3fHD xKkV7VVGw1WmXGjvECwealDc6scvPIJbkAJSQp+9UNc3XAxGDRun8eFy6paGI9C9 B5NtcxEITALc/5mjLz5M8/cQrWzIPnYZ6YAEtUnjQqUiPiIYPrffkBXZQUErUDKH ZvNbpdsP4buXveaMmvhVvxrMiGO7k1/FkURgieDpBBXU07LEvlZv6Htwgc6AexHz v7CBB3NHpr51jPUXWZSf6HgvKrXl71A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:03:59 2025 by rpki-client