$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f014759-4396-34b0-8281-c94c834cab54.roa File: 3f014759-4396-34b0-8281-c94c834cab54.roa (raw, json) Hash identifier: D0xYbpAK2hGBC6Br60A5I0H7dsmioRIriN6fgB4hI6Y= Subject key identifier: 81:D8:0F:8B:85:80:84:88:3B:09:F8:67:53:DB:8E:DB:D0:3C:29:09 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BAFA3E620CB8AF9299800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f014759-4396-34b0-8281-c94c834cab54.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 19527 IP address blocks: 35.215.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:af:a3:e6:20:cb:8a:f9:29:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=de8d367a-6b03-4562-9bb8-ca0659b6b34a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b4:9e:32:16:7a:19:43:38:bd:08:01:4e:a8: 82:73:e1:c9:3b:9c:bb:5b:1d:1e:9a:1b:9c:16:97: d6:71:cb:5b:0c:e8:21:6b:c0:ea:bb:98:45:77:2f: 45:3b:fd:3f:85:9c:59:36:29:45:b1:d8:7e:65:1d: 25:a6:f4:84:10:d2:ec:48:5d:a9:a9:0f:07:31:7f: 31:4c:6d:6c:8e:25:6d:b5:99:6a:49:87:f3:35:db: 72:12:88:b9:9e:17:ed:21:5d:76:50:c1:d4:07:dc: d8:6f:30:dc:84:d4:9c:70:74:f1:4d:64:94:66:42: 21:2c:9f:d5:a2:d0:6e:12:39:d3:61:e9:03:ca:ec: 97:fe:ec:a1:26:45:cf:69:29:c6:85:09:9d:0f:db: dc:8e:3e:a8:1a:d9:c6:d9:00:7c:ab:b8:d3:6b:59: 3b:c6:77:18:fc:0f:31:89:00:30:3a:4d:de:3a:b3: 13:e6:3a:e2:5d:58:b7:84:05:bd:35:30:76:7b:2c: 14:ab:e1:3b:e5:dd:6b:db:7a:ab:22:49:4a:31:f9: 0d:c2:2c:c3:8e:1d:7b:1b:5c:f5:10:bb:8c:a1:0c: eb:f1:ba:ec:6f:95:2b:d4:ca:10:30:ca:8b:44:47: bc:fe:89:b5:f1:0b:29:88:5d:02:af:bb:64:2c:45: ac:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D8:0F:8B:85:80:84:88:3B:09:F8:67:53:DB:8E:DB:D0:3C:29:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f014759-4396-34b0-8281-c94c834cab54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.215.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:9b:5f:96:d8:61:62:33:a2:24:7b:31:2d:92:ed:8c:80:f8: 0b:d2:25:68:ec:28:b2:92:77:6d:3b:34:33:38:90:81:f0:f4: 89:87:34:4a:d1:de:47:1b:f1:9d:29:e4:54:5a:a4:87:24:43: a5:0e:71:0b:ce:c5:24:47:ab:23:df:d2:d7:47:de:69:8a:0a: f0:8a:a6:0d:45:19:c7:64:e4:00:47:20:79:26:bb:87:15:c3: 2e:27:94:5c:90:6c:69:aa:76:b6:fc:12:72:05:08:ef:6c:53: f0:f8:06:c9:ba:3f:f6:b3:0a:cf:f6:61:6f:f3:75:c2:80:ee: 3f:99:39:f3:67:32:f8:e0:53:be:f1:68:04:79:a6:23:99:18: 47:0d:d1:1d:8e:e2:82:47:94:39:d2:c8:10:c4:2e:3a:6d:ac: 73:3f:0b:1e:98:ca:4f:58:53:53:ab:56:79:bd:c3:5b:1a:27: 62:18:90:71:31:4e:93:0f:ed:e4:96:16:e4:64:93:63:f9:47: 60:82:26:b8:4c:89:da:fa:ff:0a:1e:7b:a5:de:8c:3a:f5:b8: fc:7d:30:44:ef:44:40:e7:b7:2c:15:3f:3b:54:5a:c7:b2:7c: fe:8d:92:05:04:2e:bd:fa:1d:b9:29:7f:86:a9:3c:dd:06:9a: 64:75:f8:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS6+j5iDLivkpmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZGU4ZDM2N2EtNmIwMy00NTYyLTliYjgtY2EwNjU5YjZiMzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbSeMhZ6GUM4vQgBTqiCc+HJO5y7Wx0emhuc FpfWcctbDOgha8Dqu5hFdy9FO/0/hZxZNilFsdh+ZR0lpvSEENLsSF2pqQ8HMX8x TG1sjiVttZlqSYfzNdtyEoi5nhftIV12UMHUB9zYbzDchNSccHTxTWSUZkIhLJ/V otBuEjnTYekDyuyX/uyhJkXPaSnGhQmdD9vcjj6oGtnG2QB8q7jTa1k7xncY/A8x iQAwOk3eOrMT5jriXVi3hAW9NTB2eywUq+E75d1r23qrIklKMfkNwizDjh17G1z1 ELuMoQzr8brsb5Ur1MoQMMqLREe8/om18QspiF0Cr7tkLEWsQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHYD4uFgISIOwn4Z1PbjtvQPCkJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2YwMTQ3NTktNDM5Ni0z NGIwLTgyODEtYzk0YzgzNGNhYjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGI9eAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSbX5bYYWIzoiR7MS2S7YyA+AvSJWjsKLKSd207NDM4kIHw9ImHNErR 3kcb8Z0p5FRapIckQ6UOcQvOxSRHqyPf0tdH3mmKCvCKpg1FGcdk5ABHIHkmu4cV wy4nlFyQbGmqdrb8EnIFCO9sU/D4Bsm6P/azCs/2YW/zdcKA7j+ZOfNnMvjgU77x aAR5piOZGEcN0R2O4oJHlDnSyBDELjptrHM/Cx6Yyk9YU1OrVnm9w1saJ2IYkHEx TpMP7eSWFuRkk2P5R2CCJrhMidr6/woee6XejDr1uPx9METvREDntywVPztUWsey fP6NkgUELr36Hbkpf4apPN0GmmR1+Js= -----END CERTIFICATE-----Generated at Fri Apr 4 09:01:50 2025 by rpki-client