$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b960135-6ec0-3bbd-839d-97cd00921b1e.roa File: 2b960135-6ec0-3bbd-839d-97cd00921b1e.roa (raw, json) Hash identifier: DTWcImKwihLwnK2boL9SuojW4onbKdln8HceabFg3TI= Subject key identifier: 8F:4D:2F:76:4F:76:00:70:E3:30:23:CE:61:C6:E8:D1:8F:65:14:1B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BC76E5DE09626B369FF7B Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b960135-6ec0-3bbd-839d-97cd00921b1e.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.246.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:c7:6e:5d:e0:96:26:b3:69:ff:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=28cffee3-7c12-4abf-9f2a-95e16612368f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:16:93:fe:e9:76:20:a6:89:d8:50:b3:93:a5: f5:9f:6d:fb:18:a3:24:65:ce:f5:5d:a6:6b:82:20: 7c:f5:52:95:e2:52:ad:f0:80:4a:5a:d8:45:8b:16: 0f:38:15:ce:16:f6:b7:35:e5:dc:ca:21:85:d7:a4: e0:04:2d:04:8a:d0:ad:b5:71:42:00:72:96:90:93: 4a:96:94:83:75:a4:37:98:1e:40:92:ea:5c:f8:d5: 37:f5:8b:c3:ef:0c:59:28:2c:57:af:85:1f:59:9f: 15:a5:7e:d5:94:7e:c7:85:b9:17:14:01:25:85:78: 6b:2e:cd:91:c9:fa:d4:e4:0c:3a:56:77:e8:ab:8b: 23:52:76:c5:e6:74:a8:9d:4e:1d:96:80:6a:bc:08: 43:6a:38:57:15:44:b3:73:a7:73:78:f4:25:94:39: 96:a5:6f:d0:52:7b:f7:90:46:83:44:65:c4:05:24: bd:52:dc:cf:2b:b3:7b:a6:d4:a5:18:d1:c8:cd:3e: de:16:b5:a4:4a:1a:2c:15:d7:b3:f5:56:70:75:61: 52:82:34:05:d0:d8:51:23:d7:8a:9c:72:61:93:03: 03:b4:2b:6f:8b:75:aa:be:4a:cd:30:f4:e9:92:fb: 01:38:87:98:3a:f7:24:f5:61:b3:93:76:40:c0:74: e1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4D:2F:76:4F:76:00:70:E3:30:23:CE:61:C6:E8:D1:8F:65:14:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2b960135-6ec0-3bbd-839d-97cd00921b1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.246.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:7d:8d:a6:dd:49:83:f4:4c:1d:04:2b:4e:0b:ff:88:4b:e9: 26:c7:02:da:a8:ee:d4:49:29:16:79:07:9e:87:be:35:27:f2: 10:72:5d:96:cd:5f:8e:cd:94:58:f4:23:0d:35:b8:90:31:5e: 36:1e:62:e7:ef:96:5f:bb:51:05:db:de:7c:da:05:0a:6b:ff: cb:04:df:6a:33:60:87:52:ad:46:50:75:56:e1:6d:ab:31:93: ad:6c:40:1b:eb:8f:22:6b:2d:16:cd:9f:14:82:75:e9:a5:79: 42:a2:6d:83:bf:db:02:a6:7b:7e:64:e9:0b:70:3d:52:eb:de: a4:52:e2:cc:1c:43:d0:e8:5c:82:03:43:57:ff:56:d6:11:64: a5:db:30:cd:db:80:4a:ce:22:0c:73:9f:08:7e:13:f8:46:0e: 21:39:4e:fa:48:11:be:04:89:96:db:db:7a:b6:9e:97:37:39: c1:cf:bd:65:5a:8c:8f:e4:05:cb:20:d0:8a:a1:27:29:04:a1: 54:b8:b7:0f:a1:fb:e4:2f:5b:64:aa:20:36:c8:25:7d:8c:da: 41:f3:83:ef:35:24:79:f2:b0:cd:8c:90:d7:9a:36:a3:1e:e2: a6:3f:1b:3c:ba:c7:fa:1b:21:33:8c:66:58:b5:27:ab:21:c5: 40:ab:3d:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8duXeCWJrNp/3swDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MjhjZmZlZTMtN2MxMi00YWJmLTlmMmEtOTVlMTY2MTIzNjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBaT/ul2IKaJ2FCzk6X1n237GKMkZc71XaZr giB89VKV4lKt8IBKWthFixYPOBXOFva3NeXcyiGF16TgBC0EitCttXFCAHKWkJNK lpSDdaQ3mB5Akupc+NU39YvD7wxZKCxXr4UfWZ8VpX7VlH7HhbkXFAElhXhrLs2R yfrU5Aw6Vnfoq4sjUnbF5nSonU4dloBqvAhDajhXFUSzc6dzePQllDmWpW/QUnv3 kEaDRGXEBSS9UtzPK7N7ptSlGNHIzT7eFrWkShosFdez9VZwdWFSgjQF0NhRI9eK nHJhkwMDtCtvi3WqvkrNMPTpkvsBOIeYOvck9WGzk3ZAwHThRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9NL3ZPdgBw4zAjzmHG6NGPZRQbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmI5NjAxMzUtNmVjMC0z YmJkLTgzOWQtOTdjZDAwOTIxYjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/awMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEF9jabdSYP0TB0EK04L/4hL6SbHAtqo7tRJKRZ5B56HvjUn8hByXZbN X47NlFj0Iw01uJAxXjYeYufvll+7UQXb3nzaBQpr/8sE32ozYIdSrUZQdVbhbasx k61sQBvrjyJrLRbNnxSCdemleUKibYO/2wKme35k6QtwPVLr3qRS4swcQ9DoXIID Q1f/VtYRZKXbMM3bgErOIgxznwh+E/hGDiE5TvpIEb4EiZbb23q2npc3OcHPvWVa jI/kBcsg0IqhJykEoVS4tw+h++QvW2SqIDbIJX2M2kHzg+81JHnysM2MkNeaNqMe 4qY/Gzy6x/obITOMZli1J6shxUCrPQc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:06 2025 by rpki-client