$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d99e677-3ef8-3316-bf46-496cdddd10aa.roa File: 2d99e677-3ef8-3316-bf46-496cdddd10aa.roa (raw, json) Hash identifier: ggEKRp062Z3qUsvRCg/pfUfZAXSKiBDbRl50U9SbW5s= Subject key identifier: 5C:E8:54:5D:31:09:46:A4:84:0F:5B:CE:42:82:EC:85:9D:76:E0:73 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BE0B573B44900EE5A5C00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d99e677-3ef8-3316-bf46-496cdddd10aa.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.243.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:e0:b5:73:b4:49:00:ee:5a:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=add188fc-9b6a-4849-bd82-917d337fbf4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:15:7b:ba:be:50:27:bc:dc:21:f4:57:31:1c: 5a:14:64:62:4e:57:53:d0:11:f1:6f:40:90:87:c0: c3:c2:68:63:5a:ca:69:d0:b2:d0:4a:47:ae:7a:42: 27:a8:0a:15:d3:88:b9:65:a1:78:ca:32:0d:72:c1: 03:9c:91:a6:00:e1:3e:cd:1a:09:e8:90:ed:a0:4d: 08:aa:ab:6e:06:23:38:72:a9:18:f6:35:c5:fe:32: b9:4d:1a:be:96:b2:06:7a:10:d7:03:7c:1b:f1:cf: 7d:ac:54:69:88:45:14:85:a7:b5:e9:ff:8b:26:ab: 95:0f:db:d9:a6:6d:f7:0a:39:d2:9b:3b:78:76:04: c8:b8:11:56:57:06:27:a0:50:19:27:52:24:e7:2d: de:77:8c:be:35:85:6c:d1:c4:4d:28:58:62:89:87: 10:ad:cb:8f:e7:db:6e:c6:d5:99:3f:4f:49:62:25: 2c:aa:f2:a3:b7:46:c7:8c:68:76:71:08:1b:f6:2f: a8:22:bf:00:77:c6:ae:97:35:a7:b0:f8:d7:b6:92: ba:64:f7:ce:e8:a6:77:cf:d2:4d:2c:25:46:61:8b: 0d:ea:8e:f8:a7:50:09:7d:3e:7d:28:aa:b0:a4:ee: e9:db:62:85:b8:0d:94:cd:6a:ef:33:cf:4d:e9:23: 2d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E8:54:5D:31:09:46:A4:84:0F:5B:CE:42:82:EC:85:9D:76:E0:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2d99e677-3ef8-3316-bf46-496cdddd10aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.243.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:c0:4b:d9:08:55:59:55:5a:ca:43:2b:13:f7:03:11:fd:da: a9:39:8a:22:f3:7d:d8:b8:24:1e:0a:5f:51:b6:96:49:18:f4: 2a:d5:a0:84:5c:93:6f:46:f2:9d:1b:79:1f:1a:24:89:c5:c6: 0f:f2:62:ad:9d:e6:f3:52:20:02:68:a3:17:83:e6:72:68:3c: 86:0d:aa:28:8f:1c:dd:2e:5f:23:cb:2d:e6:13:ec:50:c4:df: 6b:a8:47:d3:ba:88:8c:f4:f8:0e:ff:c7:22:71:4c:51:9f:77: d4:62:fa:e7:0b:47:f9:35:4e:39:23:48:7b:1d:90:a9:4e:72: 2a:95:4b:48:ca:25:99:7c:ae:1f:d8:09:25:f4:76:cd:03:cf: a6:24:ef:66:d9:a9:cb:81:68:3e:ce:45:d7:48:25:4d:72:7b: 1d:c8:c7:d5:7f:57:10:ac:8f:47:07:e4:2b:3e:e1:b7:cb:03: 38:d1:5e:96:85:27:be:3e:67:48:94:5c:65:6b:6f:0f:77:92: c6:4d:ce:1b:4c:52:ac:8f:1b:a4:3f:a9:ae:ce:aa:f6:83:d9: 55:89:27:2c:d7:fb:41:37:47:04:8a:04:dd:b7:2f:ff:39:92: 48:38:f0:c2:0d:c8:82:dd:14:9f:26:a4:54:0c:7a:73:df:38: ff:aa:69:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+C1c7RJAO5aXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YWRkMTg4ZmMtOWI2YS00ODQ5LWJkODItOTE3ZDMzN2ZiZjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhV7ur5QJ7zcIfRXMRxaFGRiTldT0BHxb0CQ h8DDwmhjWspp0LLQSkeuekInqAoV04i5ZaF4yjINcsEDnJGmAOE+zRoJ6JDtoE0I qqtuBiM4cqkY9jXF/jK5TRq+lrIGehDXA3wb8c99rFRpiEUUhae16f+LJquVD9vZ pm33CjnSmzt4dgTIuBFWVwYnoFAZJ1Ik5y3ed4y+NYVs0cRNKFhiiYcQrcuP59tu xtWZP09JYiUsqvKjt0bHjGh2cQgb9i+oIr8Ad8aulzWnsPjXtpK6ZPfO6KZ3z9JN LCVGYYsN6o74p1AJfT59KKqwpO7p22KFuA2UzWrvM89N6SMtJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzoVF0xCUakhA9bzkKC7IWdduBzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmQ5OWU2NzctM2VmOC0z MzE2LWJmNDYtNDk2Y2RkZGQxMGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/OQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXAS9kIVVlVWspDKxP3AxH92qk5iiLzfdi4JB4KX1G2lkkY9CrVoIRc k29G8p0beR8aJInFxg/yYq2d5vNSIAJooxeD5nJoPIYNqiiPHN0uXyPLLeYT7FDE 32uoR9O6iIz0+A7/xyJxTFGfd9Ri+ucLR/k1TjkjSHsdkKlOciqVS0jKJZl8rh/Y CSX0ds0Dz6Yk72bZqcuBaD7ORddIJU1yex3Ix9V/VxCsj0cH5Cs+4bfLAzjRXpaF J74+Z0iUXGVrbw93ksZNzhtMUqyPG6Q/qa7OqvaD2VWJJyzX+0E3RwSKBN23L/85 kkg48MINyILdFJ8mpFQMenPfOP+qadA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:09 2025 by rpki-client