$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/39e65d1b-3413-3b3c-a22a-e8d94982af2b.roa File: 39e65d1b-3413-3b3c-a22a-e8d94982af2b.roa (raw, json) Hash identifier: cLtfXijSz2/kis77rszrhDLbt104i3tD+qPhwmQgR7I= Subject key identifier: 80:52:DD:EE:BE:06:EA:CD:C6:7C:E4:39:D7:37:A1:A1:8C:F8:D7:A2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C1326D6EF5A2339E56AC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/39e65d1b-3413-3b3c-a22a-e8d94982af2b.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.223.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:13:26:d6:ef:5a:23:39:e5:6a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=eedc29a0-0351-4743-a19e-b7285fc396ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8c:43:6b:02:c1:ff:06:d6:d7:3c:89:52:50: 33:63:90:1f:05:7b:36:7a:e0:65:1c:c9:99:33:2c: d2:80:3b:6d:b2:1f:2b:5b:eb:77:be:67:9f:c4:bd: 49:fc:42:55:b2:6c:5a:f7:6e:ce:d0:b7:52:b4:3d: 11:86:7e:50:d5:a6:1d:01:31:5f:57:31:60:c1:db: c5:7c:99:7b:d0:bc:df:d1:83:ec:18:bd:6e:72:32: f7:50:75:86:a5:af:8c:11:3b:1e:5f:06:e2:cb:22: bd:2e:c5:e4:6c:5c:49:89:f7:68:de:4a:2c:fd:42: 26:ae:4b:aa:30:2d:a1:29:c1:7e:8a:40:51:ea:d6: 82:40:77:0b:ad:41:22:88:2a:4f:a8:e4:0b:8a:2b: 8e:8e:a7:51:3b:38:19:a3:43:ee:d8:cf:da:bd:6f: 80:e7:ef:55:35:24:1b:96:e2:44:3e:1e:94:12:fa: 03:84:47:73:ce:cc:b2:d3:3d:2c:d9:51:11:d9:de: 66:d1:fa:64:5a:27:1e:1d:02:eb:f4:7b:b8:99:df: 53:b7:1e:1d:14:eb:52:a8:aa:5b:b1:b3:a9:00:6e: e0:8e:e0:a0:b2:b1:ae:d3:ef:87:de:44:eb:16:7a: 1d:ea:89:cd:1c:d1:f7:cd:2a:bd:60:de:f0:9e:6b: 6e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:52:DD:EE:BE:06:EA:CD:C6:7C:E4:39:D7:37:A1:A1:8C:F8:D7:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/39e65d1b-3413-3b3c-a22a-e8d94982af2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.223.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:02:78:a5:f4:6b:4c:5e:3f:9b:7f:ff:43:d4:fd:58:8c:a5: fe:bc:1b:57:58:3e:71:7a:7f:55:ed:c0:83:b0:98:8d:e7:b9: 6a:03:f6:bd:99:0f:2e:7c:f3:57:f9:f3:24:48:5e:46:da:01: 3f:aa:08:23:60:17:47:91:a2:a0:33:b2:61:e0:43:01:1c:d4: 02:88:83:bb:4d:0a:14:32:ad:08:69:23:73:35:fa:7c:4c:88: ac:88:d2:df:38:c0:39:6f:3a:5b:28:ae:5d:81:40:ee:d4:7f: ea:da:a0:4f:9c:f6:08:74:72:ea:63:7d:8a:63:09:a4:96:74: b9:be:5a:af:6a:e4:9d:cb:f3:bb:5d:2b:08:6a:72:82:2a:3f: 11:a4:8c:f7:05:5d:8e:5e:9a:75:98:6c:fa:5f:f9:78:51:75: de:7c:f8:25:eb:97:3c:25:fa:dd:03:09:c6:44:0c:13:3c:3c: 17:96:39:56:ea:6b:80:e2:78:b9:f4:94:32:84:b8:0a:93:a5: e0:bf:d8:80:25:25:7b:17:29:08:8a:f4:8e:f1:34:2d:6b:9c: 81:1f:b3:93:f4:b5:a7:38:8a:1c:bb:2b:f9:08:7d:a1:68:00: 12:a5:e8:74:2d:53:ca:d9:5e:96:a1:4d:55:5e:a7:d0:a4:f8: 11:47:ae:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITBMm1u9aIznlasAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZWVkYzI5YTAtMDM1MS00NzQzLWExOWUtYjcyODVmYzM5NmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoxDawLB/wbW1zyJUlAzY5AfBXs2euBlHMmZ MyzSgDttsh8rW+t3vmefxL1J/EJVsmxa927O0LdStD0Rhn5Q1aYdATFfVzFgwdvF fJl70Lzf0YPsGL1ucjL3UHWGpa+METseXwbiyyK9LsXkbFxJifdo3kos/UImrkuq MC2hKcF+ikBR6taCQHcLrUEiiCpPqOQLiiuOjqdROzgZo0Pu2M/avW+A5+9VNSQb luJEPh6UEvoDhEdzzsyy0z0s2VER2d5m0fpkWiceHQLr9Hu4md9Ttx4dFOtSqKpb sbOpAG7gjuCgsrGu0++H3kTrFnod6onNHNH3zSq9YN7wnmtupQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBS3e6+BurNxnzkOdc3oaGM+NeiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzllNjVkMWItMzQxMy0z YjNjLWEyMmEtZThkOTQ5ODJhZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI99QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgCeKX0a0xeP5t//0PU/ViMpf68G1dYPnF6f1XtwIOwmI3nuWoD9r2Z Dy5881f58yRIXkbaAT+qCCNgF0eRoqAzsmHgQwEc1AKIg7tNChQyrQhpI3M1+nxM iKyI0t84wDlvOlsorl2BQO7Uf+raoE+c9gh0cupjfYpjCaSWdLm+Wq9q5J3L87td KwhqcoIqPxGkjPcFXY5emnWYbPpf+XhRdd58+CXrlzwl+t0DCcZEDBM8PBeWOVbq a4DieLn0lDKEuAqTpeC/2IAlJXsXKQiK9I7xNC1rnIEfs5P0tac4ihy7K/kIfaFo ABKl6HQtU8rZXpahTVVep9Ck+BFHrtU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:58 2025 by rpki-client