$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33a53a07-cfb6-3c18-b9ef-d26144b90532.roa File: 33a53a07-cfb6-3c18-b9ef-d26144b90532.roa (raw, json) Hash identifier: ewDP/AicifnNpgtlj613zy7ekq0P5QkHpyYU6alm+6I= Subject key identifier: 23:A3:80:58:D0:06:2B:AA:AA:2F:B5:97:D5:EE:A8:B2:08:0B:78:88 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BCFF57403BD429D752400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33a53a07-cfb6-3c18-b9ef-d26144b90532.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.201.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:cf:f5:74:03:bd:42:9d:75:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=7fc13fc4-17bb-490c-8976-836146a3733a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:43:c9:94:1a:16:fd:71:d1:c0:68:d9:2a:a1: c1:e1:6e:e8:e0:22:64:74:09:a9:d2:7c:02:93:00: a7:5a:9e:b1:79:eb:46:90:95:33:af:94:7f:c1:7a: d8:89:5f:e4:1a:60:5a:f0:75:5d:eb:d2:a9:62:30: 7d:93:ae:fa:db:91:7d:ea:ca:81:98:79:84:f2:02: b8:d9:df:44:67:01:02:9a:4a:7f:89:0a:d3:e2:2e: aa:73:a9:c9:e4:bc:d9:93:1b:53:c7:a0:33:9b:2e: b6:81:97:2e:b3:79:4e:83:78:25:d4:ff:f9:92:c6: 72:f6:5e:37:68:af:83:bb:dc:65:66:0c:89:57:d3: f1:47:27:75:df:db:b2:fd:30:d6:99:dd:a7:17:47: d1:90:62:df:55:72:56:ed:80:d2:42:91:a6:7c:1b: cf:2b:a1:25:a1:c8:fc:c3:cb:c4:97:c2:a1:33:ef: 64:76:d1:9d:f6:e0:b7:aa:ba:44:da:ba:bc:69:5b: b0:2a:13:77:7d:13:59:35:e7:a5:e6:20:66:1a:56: b8:86:92:da:44:79:87:17:9e:09:6f:48:71:90:7b: fe:5c:bc:11:3d:52:8c:b4:03:18:f5:57:48:c1:3d: 38:49:0c:57:a9:f0:16:b5:f6:a1:55:07:b4:04:28: c3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A3:80:58:D0:06:2B:AA:AA:2F:B5:97:D5:EE:A8:B2:08:0B:78:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/33a53a07-cfb6-3c18-b9ef-d26144b90532.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.201.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:0e:3f:c4:1d:a0:46:47:c4:a9:e7:4f:a1:55:d4:00:0e:11: d2:9d:f0:30:a0:28:5d:19:13:91:4f:c0:a8:1f:df:4f:94:1b: 3e:84:dd:76:85:0d:dd:3d:66:4d:34:cd:9a:23:eb:fd:5a:66: 90:52:3d:66:d6:77:fd:2c:89:11:71:30:5d:a9:c5:1d:55:c5: 97:37:b5:00:f1:71:90:6e:d9:c3:1b:26:81:c3:18:ec:76:a9: 78:d6:f2:3e:7a:76:fe:9a:7e:ea:b2:87:19:b4:b0:cb:9d:16: 96:88:7a:1f:58:cb:46:41:35:aa:2f:d5:e4:1f:9a:58:37:dd: a3:3a:39:11:af:c6:d4:78:87:ff:4a:3f:0b:6a:17:38:89:34: e0:b6:84:f1:3c:33:b1:64:49:aa:b4:07:49:d7:ae:bf:c4:1f: 56:37:d0:ea:e8:d4:06:5d:2b:db:fd:f9:0c:83:22:9a:43:6c: c2:6c:d2:74:8c:dc:9e:05:87:a7:c1:19:fd:9d:c6:ad:e5:30: 86:91:28:72:da:52:d2:06:33:c9:24:8c:34:7b:10:66:2e:bc: 96:2c:ed:a6:d6:61:9d:e2:5f:a8:51:66:c2:61:bc:c6:77:84: 48:88:05:aa:d7:65:56:d2:22:7c:60:42:7d:ca:7d:17:37:c2: 35:37:74:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8/1dAO9Qp11JAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk N2ZjMTNmYzQtMTdiYi00OTBjLTg5NzYtODM2MTQ2YTM3MzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kPJlBoW/XHRwGjZKqHB4W7o4CJkdAmp0nwC kwCnWp6xeetGkJUzr5R/wXrYiV/kGmBa8HVd69KpYjB9k67625F96sqBmHmE8gK4 2d9EZwECmkp/iQrT4i6qc6nJ5LzZkxtTx6Azmy62gZcus3lOg3gl1P/5ksZy9l43 aK+Du9xlZgyJV9PxRyd139uy/TDWmd2nF0fRkGLfVXJW7YDSQpGmfBvPK6Elocj8 w8vEl8KhM+9kdtGd9uC3qrpE2rq8aVuwKhN3fRNZNeel5iBmGla4hpLaRHmHF54J b0hxkHv+XLwRPVKMtAMY9VdIwT04SQxXqfAWtfahVQe0BCjDfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOjgFjQBiuqqi+1l9XuqLIIC3iIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzNhNTNhMDctY2ZiNi0z YzE4LWI5ZWYtZDI2MTQ0YjkwNTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8ngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgOP8QdoEZHxKnnT6FV1AAOEdKd8DCgKF0ZE5FPwKgf30+UGz6E3XaF Dd09Zk00zZoj6/1aZpBSPWbWd/0siRFxMF2pxR1VxZc3tQDxcZBu2cMbJoHDGOx2 qXjW8j56dv6afuqyhxm0sMudFpaIeh9Yy0ZBNaov1eQfmlg33aM6ORGvxtR4h/9K PwtqFziJNOC2hPE8M7FkSaq0B0nXrr/EH1Y30Oro1AZdK9v9+QyDIppDbMJs0nSM 3J4Fh6fBGf2dxq3lMIaRKHLaUtIGM8kkjDR7EGYuvJYs7abWYZ3iX6hRZsJhvMZ3 hEiIBarXZVbSInxgQn3KfRc3wjU3dAo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:04 2025 by rpki-client