$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a859e1d-29ec-3edd-b158-d4178e261108.roa File: 2a859e1d-29ec-3edd-b158-d4178e261108.roa (raw, json) Hash identifier: BpEMZZi+OKbiX37J68a5LVI7WTUYhnIFF68o6zC7R3g= Subject key identifier: B8:61:82:83:52:8B:84:90:1E:5D:76:1B:C2:6F:CD:F0:7B:7D:56:1D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C0D7F71B9A85E6FA21700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a859e1d-29ec-3edd-b158-d4178e261108.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.222.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:0d:7f:71:b9:a8:5e:6f:a2:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=9e563c67-11e2-48a9-9dde-bcb550c8ee64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:99:02:c1:14:b3:9e:ce:b0:dc:bb:66:fb:51: fa:ed:ac:6d:00:35:f3:7a:d9:7a:12:2d:03:3f:7b: 04:35:93:12:a7:87:53:99:8e:6e:81:00:31:29:fa: 36:59:4c:a2:7d:2b:8a:aa:be:d1:43:dd:0a:15:76: 47:f4:f4:42:df:8b:53:7e:fd:cc:ab:a7:ee:c2:dd: cf:5e:a1:72:24:53:0b:4d:3a:23:24:34:8a:30:79: 01:b7:b4:3e:9d:d0:9d:39:b7:38:48:9f:0b:5d:fb: 47:99:e4:7b:13:87:5f:82:14:84:a1:a6:fd:d7:b3: 0a:0b:d9:a8:8c:85:8e:32:7d:7a:bc:0c:e5:62:cb: dc:2e:31:38:a8:4a:b4:89:f3:bc:4b:d1:a1:c7:76: 82:6e:7f:0a:c4:bd:e9:ad:3e:d3:f2:e6:bf:c1:a9: 9a:59:e9:b3:41:9c:13:34:29:63:64:e1:a4:c8:07: 2c:c3:16:5f:9f:82:02:f9:fe:8d:14:98:65:ac:a1: 01:9c:27:72:69:f4:e4:3d:b5:83:13:74:19:0a:c8: a2:54:f1:36:05:05:4a:01:e1:67:35:31:21:4b:8f: 84:83:f5:9a:51:02:a2:46:25:bf:94:f9:b6:bc:97: 42:66:db:d6:6a:7e:ce:f1:c4:33:3e:aa:2d:ad:76: 66:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:61:82:83:52:8B:84:90:1E:5D:76:1B:C2:6F:CD:F0:7B:7D:56:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a859e1d-29ec-3edd-b158-d4178e261108.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.222.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:3a:f6:02:ec:04:9e:d1:4c:aa:5d:83:f4:95:34:d5:5d:96: 43:da:32:0d:be:ea:90:21:3b:ae:25:1f:87:f4:41:22:60:3a: 02:5e:76:0b:01:24:18:ec:30:7a:ac:d4:cb:ae:76:70:77:c8: 98:37:10:67:17:9f:29:73:2a:0b:f2:ca:3e:c4:eb:6a:95:55: bf:b5:11:63:be:a0:3d:db:65:94:e3:93:f9:6c:05:28:e0:1d: ae:2b:d0:a6:db:db:85:01:44:f4:ea:a0:45:b1:9d:85:1d:f4: 47:5b:76:28:25:8a:41:46:d0:fb:54:7a:d7:8a:51:5b:29:a6: 72:c1:02:c2:7e:79:18:2f:c9:2e:f4:0b:fc:54:25:bf:dc:07: b6:e4:cd:e4:46:08:37:24:a3:c9:18:38:2a:64:10:6d:e9:2b: 57:6a:10:db:35:61:2f:59:59:09:19:bc:b5:59:45:ac:74:ec: 06:65:68:2e:2f:22:bf:65:4c:99:aa:d9:24:e4:b7:f1:30:f4: 0f:7f:9f:2e:1c:33:8f:cb:b7:10:c6:3d:e3:87:79:25:16:b8: e4:a6:d8:89:26:a0:1d:4e:f6:11:72:d5:68:65:da:29:8a:50: 85:fb:8d:57:f5:8c:8a:2d:35:c9:13:ed:e9:c4:98:f9:1d:f6: 40:84:70:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITA1/cbmoXm+iFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk OWU1NjNjNjctMTFlMi00OGE5LTlkZGUtYmNiNTUwYzhlZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZkCwRSzns6w3Ltm+1H67axtADXzetl6Ei0D P3sENZMSp4dTmY5ugQAxKfo2WUyifSuKqr7RQ90KFXZH9PRC34tTfv3Mq6fuwt3P XqFyJFMLTTojJDSKMHkBt7Q+ndCdObc4SJ8LXftHmeR7E4dfghSEoab917MKC9mo jIWOMn16vAzlYsvcLjE4qEq0ifO8S9Ghx3aCbn8KxL3prT7T8ua/wamaWemzQZwT NCljZOGkyAcswxZfn4IC+f6NFJhlrKEBnCdyafTkPbWDE3QZCsiiVPE2BQVKAeFn NTEhS4+Eg/WaUQKiRiW/lPm2vJdCZtvWan7O8cQzPqotrXZm+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhhgoNSi4SQHl12G8JvzfB7fVYdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmE4NTllMWQtMjllYy0z ZWRkLWIxNTgtZDQxNzhlMjYxMTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI96IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEc69gLsBJ7RTKpdg/SVNNVdlkPaMg2+6pAhO64lH4f0QSJgOgJedgsB JBjsMHqs1MuudnB3yJg3EGcXnylzKgvyyj7E62qVVb+1EWO+oD3bZZTjk/lsBSjg Ha4r0Kbb24UBRPTqoEWxnYUd9EdbdiglikFG0PtUeteKUVsppnLBAsJ+eRgvyS70 C/xUJb/cB7bkzeRGCDcko8kYOCpkEG3pK1dqENs1YS9ZWQkZvLVZRax07AZlaC4v Ir9lTJmq2STkt/Ew9A9/ny4cM4/LtxDGPeOHeSUWuOSm2IkmoB1O9hFy1Whl2imK UIX7jVf1jIotNckT7enEmPkd9kCEcB8= -----END CERTIFICATE-----Generated at Fri Apr 4 21:12:32 2025 by rpki-client