$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/36dd2b4e-35c7-3ee4-8c7b-e8eccd305ca2.roa File: 36dd2b4e-35c7-3ee4-8c7b-e8eccd305ca2.roa (raw, json) Hash identifier: o8zt8BFZ3IBcIaCMhEkzJ0AMbspq+HNmEF+gf2DPMZg= Subject key identifier: 4A:75:8B:59:F6:D2:AB:72:F1:1A:E9:6B:2A:54:4F:FB:DC:5A:DC:41 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BB0E66FE25D7B469127C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/36dd2b4e-35c7-3ee4-8c7b-e8eccd305ca2.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.228.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:b0:e6:6f:e2:5d:7b:46:91:27:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=a9ee4774-f0c0-49f6-99fb-05e89477b6e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d2:da:2f:47:d6:e8:cf:9a:3b:8a:82:ec:88: 9d:5a:ab:c8:18:cc:96:04:4c:34:34:b4:d1:60:c2: 96:9e:73:7c:fe:88:b7:07:7e:72:e3:8a:48:b5:76: 04:91:30:61:4d:f6:d8:ce:ab:a0:13:ef:b0:4a:bd: 97:58:50:2c:42:b7:7c:d0:f1:38:29:a4:b1:91:29: 8a:72:12:16:20:c8:e0:44:52:7e:8e:7a:24:40:38: ce:98:6e:66:53:3c:55:8e:52:58:a9:be:b1:3e:02: aa:e7:73:6d:c3:ec:29:56:13:1f:5e:11:83:ad:47: 84:c2:e4:df:03:de:0f:c6:02:ff:f5:8d:34:ba:e5: a2:9e:3d:df:74:3c:b6:c9:81:d8:e0:f2:f3:58:5a: 2b:93:5f:d4:63:c1:5d:b4:c2:4f:ec:f1:74:fb:42: 9f:2f:57:d3:49:65:7a:ec:fc:f6:f2:6a:66:29:83: 9e:b9:6d:b4:fe:fb:b0:87:03:8f:45:8e:f8:2c:f0: 54:d1:be:4d:d2:23:ae:e5:15:ce:22:4c:ac:81:a1: 5a:b5:ad:f5:2f:de:e7:46:94:1f:cc:7b:d5:93:90: b5:04:43:29:33:3a:b6:0d:18:8e:0f:de:34:d2:25: 2b:a1:57:52:ef:a6:84:ea:32:3d:2c:56:51:56:97: fe:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:75:8B:59:F6:D2:AB:72:F1:1A:E9:6B:2A:54:4F:FB:DC:5A:DC:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/36dd2b4e-35c7-3ee4-8c7b-e8eccd305ca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.228.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:62:36:33:05:99:d6:06:3c:e0:d3:aa:40:f2:4f:af:1a:6e: fc:30:05:86:ec:29:32:57:77:93:db:ff:90:73:a0:f0:f3:c3: 47:7b:2d:95:54:54:99:36:17:1b:ec:fa:21:df:f1:24:14:2d: c1:58:9c:cb:bf:ff:e8:fc:d0:f6:61:26:37:5f:60:9e:09:0e: ae:6c:0a:4f:b1:ee:d9:3e:ec:c2:c6:b0:10:0b:8c:58:ae:fd: a3:6b:4a:83:bf:92:67:c8:4d:69:e0:60:87:69:c6:a5:46:4c: 1b:54:e5:3e:a0:ac:24:1a:cc:fa:a8:f6:35:37:dc:08:35:a0: 97:d5:63:5c:1b:39:46:b3:0a:3f:61:2e:2c:46:43:78:f6:43: 7b:ff:a0:cb:fc:18:84:cf:47:66:83:20:63:99:fc:3f:0d:9a: 26:b6:4f:88:8f:9e:9d:3f:4a:84:76:2e:3a:47:97:0a:1d:c4: 7c:f8:58:3b:ca:44:75:d7:b9:bb:67:91:d6:eb:9b:35:ea:30: 49:89:16:fb:ca:69:92:81:db:68:44:f2:5d:17:3c:71:e0:1e: 29:0b:86:b3:ba:7d:7f:8a:f3:5b:27:3a:3b:38:2b:1e:b0:c8: 29:08:61:fb:50:e4:b3:00:5d:25:d4:dc:3b:1d:41:f2:c9:ad: 2d:38:91:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS7Dmb+Jde0aRJ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YTllZTQ3NzQtZjBjMC00OWY2LTk5ZmItMDVlODk0NzdiNmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtLaL0fW6M+aO4qC7IidWqvIGMyWBEw0NLTR YMKWnnN8/oi3B35y44pItXYEkTBhTfbYzqugE++wSr2XWFAsQrd80PE4KaSxkSmK chIWIMjgRFJ+jnokQDjOmG5mUzxVjlJYqb6xPgKq53Ntw+wpVhMfXhGDrUeEwuTf A94PxgL/9Y00uuWinj3fdDy2yYHY4PLzWFork1/UY8FdtMJP7PF0+0KfL1fTSWV6 7Pz28mpmKYOeuW20/vuwhwOPRY74LPBU0b5N0iOu5RXOIkysgaFata31L97nRpQf zHvVk5C1BEMpMzq2DRiOD9400iUroVdS76aE6jI9LFZRVpf+lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEp1i1n20qty8RrpaypUT/vcWtxBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzZkZDJiNGUtMzVjNy0z ZWU0LThjN2ItZThlY2NkMzA1Y2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+QgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJiNjMFmdYGPODTqkDyT68abvwwBYbsKTJXd5Pb/5BzoPDzw0d7LZVU VJk2Fxvs+iHf8SQULcFYnMu//+j80PZhJjdfYJ4JDq5sCk+x7tk+7MLGsBALjFiu /aNrSoO/kmfITWngYIdpxqVGTBtU5T6grCQazPqo9jU33Ag1oJfVY1wbOUazCj9h LixGQ3j2Q3v/oMv8GITPR2aDIGOZ/D8Nmia2T4iPnp0/SoR2LjpHlwodxHz4WDvK RHXXubtnkdbrmzXqMEmJFvvKaZKB22hE8l0XPHHgHikLhrO6fX+K81snOjs4Kx6w yCkIYftQ5LMAXSXU3DsdQfLJrS04kWE= -----END CERTIFICATE-----Generated at Fri Apr 4 21:03:53 2025 by rpki-client