$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/41a40669-90e0-3f53-8ff1-d8aba92118e4.roa File: 41a40669-90e0-3f53-8ff1-d8aba92118e4.roa (raw, json) Hash identifier: 2i8jvmdn39P08oAWOo1Lan+1NZV9DohKJdUfT1pXNdg= Subject key identifier: BD:26:FD:D9:C5:51:26:A9:57:EA:5B:A8:9F:F8:D7:EA:05:07:0A:0D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C1D81BAF57D28DAB7F200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/41a40669-90e0-3f53-8ff1-d8aba92118e4.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 35.217.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:1d:81:ba:f5:7d:28:da:b7:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=06cd6162-c864-42d8-bbb6-b029d72656d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:75:a0:2f:09:45:5c:af:f5:6e:46:ec:8a:43: 8e:35:06:e5:d5:d9:1d:63:70:10:4d:8b:52:3a:ec: 36:e3:8b:7c:fa:29:1f:6d:4f:b3:3b:1f:12:8e:6f: c6:2b:82:85:1d:cd:a4:87:39:c0:03:3b:a6:74:ca: ac:e2:91:a9:e8:65:de:9f:74:d2:2d:e6:d4:60:3b: 29:a8:09:f7:28:55:d8:b1:7b:17:79:3a:b7:44:db: 51:72:35:d0:ff:38:9c:27:9a:01:ca:91:d6:47:8e: ac:25:eb:75:a2:57:3e:99:f5:a7:28:80:9e:ac:5b: ba:4e:ad:9b:66:32:92:c9:98:83:02:3e:19:2a:97: 58:e7:98:0a:bb:5e:11:b2:1b:93:d3:31:99:fa:8f: 18:e0:79:8a:73:89:74:5f:db:61:3e:17:e5:0c:31: 3f:e8:cc:d3:a6:18:34:00:fe:ca:76:20:dd:05:f0: b0:56:7f:4d:30:a6:b6:21:51:9d:5c:a5:84:4f:28: 25:23:9c:d5:15:49:f4:6a:38:f8:5a:d6:18:31:bc: 38:52:5d:08:f2:45:e1:72:b7:b3:11:a4:f1:55:4b: bc:ee:93:dd:16:cc:7e:44:de:cd:ca:ee:3a:fc:f0: 76:33:d7:66:82:d9:35:0c:78:28:6c:18:d4:62:78: 84:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:26:FD:D9:C5:51:26:A9:57:EA:5B:A8:9F:F8:D7:EA:05:07:0A:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/41a40669-90e0-3f53-8ff1-d8aba92118e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.217.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:bd:6e:fe:b7:5b:d8:fc:8a:28:f5:41:07:db:e6:a5:6a:c5: b1:aa:a3:2e:b2:fa:49:31:07:bb:1a:a5:4f:64:b0:67:96:78: ca:d1:9c:47:0c:9c:62:5c:22:59:44:9f:fa:d2:b0:2f:dc:df: 58:1c:42:26:b2:90:7c:0a:35:bb:94:45:fc:a3:e5:46:9f:fd: 71:4c:ce:e7:89:e5:a2:2c:58:aa:8a:89:7b:d9:df:1c:8f:e7: 38:d7:2e:64:20:c3:c2:90:d5:a8:da:e8:6e:1d:6f:90:e8:52: 8f:77:ae:be:b5:7e:a4:31:df:33:a7:8b:c7:97:dd:f9:53:ee: d3:7b:d3:c3:bf:86:f6:25:7a:ec:a9:ad:10:61:58:bd:a2:1d: e3:f1:81:a3:cc:10:c1:96:8a:c5:5c:a4:ea:c1:57:90:1e:f3: 1b:d3:8f:0f:d3:19:2f:4a:e8:77:91:ee:5f:24:fa:2d:65:84: 64:0b:1f:c5:89:a0:c0:af:06:1a:46:e9:70:b5:5a:61:d3:7b: d4:83:f8:ce:fa:71:22:e2:33:c7:0f:a9:ef:b8:6e:ac:02:c3: 2d:6f:2e:70:5f:02:1d:b6:e7:00:63:aa:b9:15:2c:78:90:4e: 71:1a:5e:56:e7:9d:51:c1:6a:88:b9:1b:c2:d1:94:e6:72:56: 3d:d5:05:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITB2BuvV9KNq38gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MDZjZDYxNjItYzg2NC00MmQ4LWJiYjYtYjAyOWQ3MjY1NmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnWgLwlFXK/1bkbsikOONQbl1dkdY3AQTYtS Ouw244t8+ikfbU+zOx8Sjm/GK4KFHc2khznAAzumdMqs4pGp6GXen3TSLebUYDsp qAn3KFXYsXsXeTq3RNtRcjXQ/zicJ5oBypHWR46sJet1olc+mfWnKICerFu6Tq2b ZjKSyZiDAj4ZKpdY55gKu14RshuT0zGZ+o8Y4HmKc4l0X9thPhflDDE/6MzTphg0 AP7KdiDdBfCwVn9NMKa2IVGdXKWETyglI5zVFUn0ajj4WtYYMbw4Ul0I8kXhcrez EaTxVUu87pPdFsx+RN7Nyu46/PB2M9dmgtk1DHgobBjUYniEFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0m/dnFUSapV+pbqJ/41+oFBwoNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDFhNDA2NjktOTBlMC0z ZjUzLThmZjEtZDhhYmE5MjExOGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGI9kAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFS9bv63W9j8iij1QQfb5qVqxbGqoy6y+kkxB7sapU9ksGeWeMrRnEcM nGJcIllEn/rSsC/c31gcQiaykHwKNbuURfyj5Uaf/XFMzueJ5aIsWKqKiXvZ3xyP 5zjXLmQgw8KQ1aja6G4db5DoUo93rr61fqQx3zOni8eX3flT7tN708O/hvYleuyp rRBhWL2iHePxgaPMEMGWisVcpOrBV5Ae8xvTjw/TGS9K6HeR7l8k+i1lhGQLH8WJ oMCvBhpG6XC1WmHTe9SD+M76cSLiM8cPqe+4bqwCwy1vLnBfAh225wBjqrkVLHiQ TnEaXlbnnVHBaoi5G8LRlOZyVj3VBRw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:06 2025 by rpki-client