$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fba3afa-94b4-32ab-a016-746169353e51.roa File: 3fba3afa-94b4-32ab-a016-746169353e51.roa (raw, json) Hash identifier: uiyVPmi/6ikCMB7IFYMcYSou1JK2Q412z/PZZf9ySTk= Subject key identifier: 52:9A:C3:BB:3B:3A:A4:EA:9F:CE:AE:A2:07:B7:01:4A:D8:BD:12:F0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BD0719716CDEE5BFACD00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fba3afa-94b4-32ab-a016-746169353e51.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.222.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:d0:71:97:16:cd:ee:5b:fa:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=72c97cf4-1bba-449b-9b52-4dd8554bad3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:61:d0:ed:38:19:c0:90:50:2e:c0:9e:2d:c2: f2:f5:00:0c:9c:e1:33:a8:d5:df:5d:4d:ca:40:ea: 0f:c4:ef:7a:1c:cb:67:0f:0d:cb:12:04:96:30:63: 62:35:8a:3c:f4:79:77:06:c2:42:6e:46:59:c6:03: 57:2a:11:30:8b:0b:89:cf:78:20:54:f5:c4:a7:d1: 15:2c:e7:ee:16:38:f4:a3:ef:be:8c:d9:f3:02:c3: 8f:d0:13:a0:23:f8:7b:10:fc:93:07:4b:11:39:0d: 7a:48:5b:b3:6a:8c:2e:34:cd:15:83:0c:63:00:81: 09:e6:1a:b2:03:aa:dc:cb:b6:e2:17:b3:d4:d5:99: 20:da:06:47:4f:a8:c9:bc:0e:35:95:8a:ef:ef:96: d2:88:5f:3c:99:44:80:68:0e:67:72:18:57:d9:46: 4f:c6:99:59:2c:02:34:88:b4:03:fb:2b:16:5d:e1: 5d:48:f0:6b:3e:58:ff:57:0b:51:2d:ed:7f:a0:c6: 2c:8a:70:2e:60:ed:26:31:12:64:03:c9:74:36:2c: 52:63:74:75:7c:f7:b3:5c:52:84:b8:d5:94:4a:73: 3a:ac:69:e2:dd:9d:54:be:77:18:8d:66:9e:0c:34: 31:28:ed:38:54:5b:8a:3c:b2:c8:04:82:05:0b:f6: d9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9A:C3:BB:3B:3A:A4:EA:9F:CE:AE:A2:07:B7:01:4A:D8:BD:12:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3fba3afa-94b4-32ab-a016-746169353e51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.222.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:60:df:e0:67:8f:c6:71:49:70:2e:e6:f7:3f:0b:7f:c1:0a: 7a:07:a9:7c:1d:bf:70:31:92:fc:2e:47:a4:6c:99:d1:d6:19: f7:72:74:18:71:66:01:e1:f7:a7:f7:c9:99:0b:bb:0f:ca:80: 5d:71:2a:a8:c9:84:94:7e:ab:5f:70:65:10:ed:34:26:95:29: 1d:a7:5f:48:ff:3b:6e:0a:44:fa:2d:87:95:0d:58:8c:97:58: 87:27:e3:30:1f:9a:31:23:d1:19:5e:3d:36:f9:d5:ae:92:20: 1b:24:41:7a:88:90:5b:a3:b2:5c:87:00:8b:f2:b7:6e:09:b4: 93:d9:d7:c2:47:29:a9:3b:75:36:7d:45:ee:a0:a1:79:45:7e: 8d:9b:d5:59:3c:c2:26:89:90:fb:47:53:84:ce:b3:4a:7f:7a: 99:83:20:86:51:b4:22:3c:1a:63:75:fc:94:b6:f2:7e:a2:5a: 5a:bd:82:70:50:80:a5:ec:ae:f9:d9:15:12:22:22:b6:de:f0: bb:c8:0c:ae:6d:af:66:fc:ea:40:13:cb:3a:b1:0e:8e:ca:a1: b6:4d:1f:14:cf:7c:ec:db:34:ed:72:5e:0f:4f:25:76:c9:f8: 6a:89:d9:16:d2:1a:7f:10:47:33:0d:f6:50:12:81:42:9e:73: ad:ff:7a:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS9BxlxbN7lv6zQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NzJjOTdjZjQtMWJiYS00NDliLTliNTItNGRkODU1NGJhZDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2HQ7TgZwJBQLsCeLcLy9QAMnOEzqNXfXU3K QOoPxO96HMtnDw3LEgSWMGNiNYo89Hl3BsJCbkZZxgNXKhEwiwuJz3ggVPXEp9EV LOfuFjj0o+++jNnzAsOP0BOgI/h7EPyTB0sROQ16SFuzaowuNM0VgwxjAIEJ5hqy A6rcy7biF7PU1Zkg2gZHT6jJvA41lYrv75bSiF88mUSAaA5nchhX2UZPxplZLAI0 iLQD+ysWXeFdSPBrPlj/VwtRLe1/oMYsinAuYO0mMRJkA8l0NixSY3R1fPezXFKE uNWUSnM6rGni3Z1UvncYjWaeDDQxKO04VFuKPLLIBIIFC/bZbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKaw7s7OqTqn86uoge3AUrYvRLwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2ZiYTNhZmEtOTRiNC0z MmFiLWEwMTYtNzQ2MTY5MzUzZTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI96AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElg3+Bnj8ZxSXAu5vc/C3/BCnoHqXwdv3AxkvwuR6RsmdHWGfdydBhx ZgHh96f3yZkLuw/KgF1xKqjJhJR+q19wZRDtNCaVKR2nX0j/O24KRPoth5UNWIyX WIcn4zAfmjEj0RlePTb51a6SIBskQXqIkFujslyHAIvyt24JtJPZ18JHKak7dTZ9 Re6goXlFfo2b1Vk8wiaJkPtHU4TOs0p/epmDIIZRtCI8GmN1/JS28n6iWlq9gnBQ gKXsrvnZFRIiIrbe8LvIDK5tr2b86kATyzqxDo7KobZNHxTPfOzbNO1yXg9PJXbJ +GqJ2RbSGn8QRzMN9lASgUKec63/ek8= -----END CERTIFICATE-----Generated at Fri Apr 4 18:09:49 2025 by rpki-client