$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/32878c9e-2fb3-3e42-95a5-bb2750b80936.roa File: 32878c9e-2fb3-3e42-95a5-bb2750b80936.roa (raw, json) Hash identifier: HLq2hSRfEkFeK3TcJlo2245/VQse1FtO5K7mTEyAOP8= Subject key identifier: BE:B4:CD:5A:3D:B1:8B:17:44:48:F5:14:E1:A8:D9:47:7C:0D:A1:D6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BF2E3F01C98DC4A6CFE80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/32878c9e-2fb3-3e42-95a5-bb2750b80936.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.225.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:f2:e3:f0:1c:98:dc:4a:6c:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=0545318d-37dd-496d-bfd8-c32bbf7fa883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c4:24:24:0b:f9:fb:7b:a6:1f:37:b4:a1:1b: b8:af:84:65:1c:c5:5e:77:da:6d:63:55:98:ad:24: 60:ac:63:77:3c:16:4d:7b:0e:7f:4b:ca:e2:74:9a: 3b:17:e6:a2:9c:94:1f:49:f9:64:dd:05:19:38:64: 04:a2:8c:9c:9b:bc:34:1d:27:9a:6f:94:1a:e0:3c: f6:98:d3:6d:bd:43:0f:3a:c4:c3:f7:60:a2:ad:f7: f1:ba:e8:2a:d6:2f:09:8b:ce:aa:28:1d:90:c4:21: 60:45:fc:b9:9f:43:74:a6:9d:73:af:1f:f5:8e:15: 1b:f7:34:9d:e9:0b:18:5e:54:0b:55:78:11:88:7f: f1:61:62:e6:47:87:66:bb:2c:2a:6e:a8:fd:3e:1c: 5b:3e:c1:1b:66:11:b3:b7:79:12:af:7e:6c:9e:bb: 3f:ad:f7:26:e9:a9:10:0a:a9:51:88:a4:3f:20:0a: 87:17:0d:d1:c4:40:b2:4a:c7:a1:2a:30:1f:3b:5b: 33:d9:f9:06:f8:ee:4e:ac:f8:10:24:18:5a:e9:b4: 5c:e7:ba:da:70:ef:b2:af:64:fb:d2:aa:b7:8c:94: e6:88:ef:d8:c9:d2:45:ac:19:8e:5d:10:62:2e:2f: 5b:d2:12:31:b6:cd:f3:c7:a5:15:96:a2:7c:91:6d: 27:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B4:CD:5A:3D:B1:8B:17:44:48:F5:14:E1:A8:D9:47:7C:0D:A1:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/32878c9e-2fb3-3e42-95a5-bb2750b80936.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.225.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:11:7a:57:18:12:1a:9e:c9:2c:46:9b:3a:57:87:76:5c:c3: e3:4c:31:c9:79:f7:f5:9a:0d:b9:45:82:0f:b2:b0:66:5a:b6: f8:3d:be:44:4a:4f:21:a2:d1:9e:9a:5b:22:80:c2:1e:71:c3: 91:4a:14:57:74:b1:16:8f:fb:ea:4d:e8:27:cc:d9:fd:02:29: 88:f9:e8:21:65:71:a4:f3:6f:82:82:62:3d:24:bf:58:95:b9: 59:67:19:5c:9b:69:7e:f0:94:90:5d:9b:17:ad:8e:48:7c:ae: 15:72:de:23:8e:70:2a:1f:70:49:ce:95:bd:8f:6a:d3:d7:79: 13:eb:d6:93:a7:95:e3:cc:25:5c:53:2e:cc:c6:a1:7d:81:5c: 8a:84:e0:d7:d0:f4:af:d0:29:48:d0:c5:a6:25:71:82:6e:fd: eb:e5:2e:78:25:b5:fa:c2:69:ae:10:34:47:89:9c:fd:6c:56: e5:88:cd:65:01:3c:1d:4e:64:01:77:ac:40:5c:c8:98:b6:be: b6:4d:b5:33:36:29:28:1c:a0:99:7e:37:26:32:c3:16:27:41: 02:c5:31:2d:61:8d:cf:d9:41:69:4c:cc:11:e9:8d:1d:4a:6e: 1d:0a:40:54:f7:95:bc:52:c4:e1:96:0d:6e:95:39:aa:98:2f: 5a:d5:6f:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS/Lj8ByY3Eps/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MDU0NTMxOGQtMzdkZC00OTZkLWJmZDgtYzMyYmJmN2ZhODgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8QkJAv5+3umHze0oRu4r4RlHMVed9ptY1WY rSRgrGN3PBZNew5/S8ridJo7F+ainJQfSflk3QUZOGQEooycm7w0HSeab5Qa4Dz2 mNNtvUMPOsTD92Cirffxuugq1i8Ji86qKB2QxCFgRfy5n0N0pp1zrx/1jhUb9zSd 6QsYXlQLVXgRiH/xYWLmR4dmuywqbqj9PhxbPsEbZhGzt3kSr35snrs/rfcm6akQ CqlRiKQ/IAqHFw3RxECySsehKjAfO1sz2fkG+O5OrPgQJBha6bRc57racO+yr2T7 0qq3jJTmiO/YydJFrBmOXRBiLi9b0hIxts3zx6UVlqJ8kW0n6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL60zVo9sYsXREj1FOGo2Ud8DaHWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzI4NzhjOWUtMmZiMy0z ZTQyLTk1YTUtYmIyNzUwYjgwOTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+HwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8RelcYEhqeySxGmzpXh3Zcw+NMMcl59/WaDblFgg+ysGZatvg9vkRK TyGi0Z6aWyKAwh5xw5FKFFd0sRaP++pN6CfM2f0CKYj56CFlcaTzb4KCYj0kv1iV uVlnGVybaX7wlJBdmxetjkh8rhVy3iOOcCofcEnOlb2PatPXeRPr1pOnlePMJVxT LszGoX2BXIqE4NfQ9K/QKUjQxaYlcYJu/evlLngltfrCaa4QNEeJnP1sVuWIzWUB PB1OZAF3rEBcyJi2vrZNtTM2KSgcoJl+NyYywxYnQQLFMS1hjc/ZQWlMzBHpjR1K bh0KQFT3lbxSxOGWDW6VOaqYL1rVb1s= -----END CERTIFICATE-----Generated at Sun Feb 16 15:10:07 2025 by rpki-client