$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f4bde86-aa8b-379d-b5ca-4eda1f3ea28e.roa File: 3f4bde86-aa8b-379d-b5ca-4eda1f3ea28e.roa (raw, json) Hash identifier: aARmTNdAzzRmJTFlog7UlxUnJ6Z+klyBMplUN3o+4U8= Subject key identifier: 92:26:73:04:B8:4B:6A:5E:51:34:8E:6D:8D:5B:F4:F5:18:56:61:E2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BA3A826AC5ACA011FBA80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f4bde86-aa8b-379d-b5ca-4eda1f3ea28e.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.241.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:a3:a8:26:ac:5a:ca:01:1f:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=42ecd501-70a2-45e4-8e94-37d2f7d17abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:81:5b:9c:d9:08:0c:c1:a2:80:aa:c5:9d:75: 2c:86:bc:e5:c5:26:ab:08:5b:33:30:55:fb:7d:7f: 88:a4:d7:72:53:2a:b2:4b:18:60:e9:d3:19:91:c1: a3:5d:74:46:ce:41:9b:56:7c:0c:13:42:23:f5:ec: 78:05:2f:dd:26:ab:fc:d9:79:8c:b0:de:af:d9:60: ce:c7:ac:9d:15:6a:c4:98:b9:d2:1b:64:fc:71:09: 4a:c4:a1:8d:fe:3d:20:c3:2e:22:90:18:3f:f7:b4: 88:10:96:15:a5:79:ca:4f:43:cb:77:5e:a9:9f:12: 95:1c:c8:ab:bd:8b:77:81:46:7c:af:ba:3d:36:81: d2:84:21:6d:77:ed:6d:ff:ec:a1:03:93:97:7a:44: 34:8b:23:f2:84:fb:ef:7a:2d:49:50:e2:3e:68:7e: b0:2f:ab:a3:e7:62:2e:98:17:c6:fd:ab:48:48:61: 1a:61:f2:90:ba:70:37:af:a8:53:a6:55:b4:28:aa: 18:48:8d:d3:de:e3:f7:b9:53:04:e9:79:52:06:a0: 0f:0e:b3:8d:af:75:7d:23:1d:c6:15:9c:f3:49:cf: e6:06:8e:62:2c:e6:14:7e:eb:07:63:60:26:c6:cd: ae:8f:49:fd:e8:50:37:05:0b:a2:4b:24:11:cc:3c: af:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:26:73:04:B8:4B:6A:5E:51:34:8E:6D:8D:5B:F4:F5:18:56:61:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3f4bde86-aa8b-379d-b5ca-4eda1f3ea28e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.241.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:ee:78:5e:8c:65:46:81:30:82:d6:b6:f9:5f:c6:38:b8:c0: 19:27:ca:29:48:3c:9c:67:a6:f0:bd:1b:21:bc:a4:89:4d:c3: b1:cb:21:54:b0:49:78:e5:9e:76:b4:82:66:1c:8d:cc:5a:94: aa:82:20:68:c1:38:92:dc:3a:52:29:22:12:9b:45:e3:af:16: 04:bb:aa:52:5b:e9:87:ed:4c:b5:ec:cd:21:e3:f4:47:10:f9: 1e:25:63:bc:dd:9f:66:0b:8b:ca:ad:ca:1f:bf:66:ee:97:22: bf:ba:d2:23:2d:b4:a4:e8:d6:9e:fd:62:7d:13:9a:b6:28:4a: 74:37:be:c0:03:fd:1f:ba:47:48:81:2f:2a:a5:68:09:38:0b: 31:13:64:6e:24:bc:29:d6:20:f1:fa:5f:bb:82:94:52:e2:2e: cd:d9:8d:66:1b:de:0b:c2:a5:bd:da:61:c1:6d:61:eb:91:5a: 52:7f:e1:15:ad:94:28:c0:dd:ca:a7:1c:19:53:9a:e0:a6:de: 4f:97:6f:79:90:03:31:43:a8:49:0c:f1:d0:8a:4f:38:7f:d0: 5c:83:eb:1e:ec:18:3b:37:1b:38:25:bf:49:fc:5d:bf:86:b2: 0f:ee:c0:35:8b:91:96:05:ad:68:43:6a:13:5a:9e:dd:5a:65: d7:f8:1c:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS6OoJqxaygEfuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NDJlY2Q1MDEtNzBhMi00NWU0LThlOTQtMzdkMmY3ZDE3YWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYFbnNkIDMGigKrFnXUshrzlxSarCFszMFX7 fX+IpNdyUyqySxhg6dMZkcGjXXRGzkGbVnwME0Ij9ex4BS/dJqv82XmMsN6v2WDO x6ydFWrEmLnSG2T8cQlKxKGN/j0gwy4ikBg/97SIEJYVpXnKT0PLd16pnxKVHMir vYt3gUZ8r7o9NoHShCFtd+1t/+yhA5OXekQ0iyPyhPvvei1JUOI+aH6wL6uj52Iu mBfG/atISGEaYfKQunA3r6hTplW0KKoYSI3T3uP3uVME6XlSBqAPDrONr3V9Ix3G FZzzSc/mBo5iLOYUfusHY2Amxs2uj0n96FA3BQuiSyQRzDyvwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJImcwS4S2peUTSObY1b9PUYVmHiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2Y0YmRlODYtYWE4Yi0z NzlkLWI1Y2EtNGVkYTFmM2VhMjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/HwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXueF6MZUaBMILWtvlfxji4wBknyilIPJxnpvC9GyG8pIlNw7HLIVSw SXjlnna0gmYcjcxalKqCIGjBOJLcOlIpIhKbReOvFgS7qlJb6YftTLXszSHj9EcQ +R4lY7zdn2YLi8qtyh+/Zu6XIr+60iMttKTo1p79Yn0TmrYoSnQ3vsAD/R+6R0iB LyqlaAk4CzETZG4kvCnWIPH6X7uClFLiLs3ZjWYb3gvCpb3aYcFtYeuRWlJ/4RWt lCjA3cqnHBlTmuCm3k+Xb3mQAzFDqEkM8dCKTzh/0FyD6x7sGDs3Gzglv0n8Xb+G sg/uwDWLkZYFrWhDahNant1aZdf4HNc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:25 2025 by rpki-client