$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/43a49ee3-8aa4-33bc-8d52-d801e5f0a221.roa File: 43a49ee3-8aa4-33bc-8d52-d801e5f0a221.roa (raw, json) Hash identifier: n42dmI+faaagQ8kZBhr98URWHtlk7vHPZf1FvgPEJMg= Subject key identifier: C2:7A:DA:02:C5:D4:C1:23:01:F8:5A:19:A9:E9:E6:E3:BE:B9:B1:44 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BAA778707DE6475FD7AC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/43a49ee3-8aa4-33bc-8d52-d801e5f0a221.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.239.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:aa:77:87:07:de:64:75:fd:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=3090a544-4d3e-40d4-80c6-9c5c36245713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a5:27:61:55:cd:e6:e3:dd:5a:f2:7a:c8:84: 2a:6a:94:06:d1:67:f5:c7:c7:87:eb:3b:43:dc:97: a2:66:60:50:17:c7:18:ba:d6:e3:77:95:0e:06:51: 1f:3e:36:d2:3d:8a:b9:53:39:bd:bf:2b:b2:e6:20: b8:3d:98:fd:6c:dc:9f:a9:0c:e6:2b:07:a2:3f:07: 47:a2:d1:3e:09:72:8a:ac:4a:90:96:09:dc:12:a3: 06:0e:90:59:77:b8:09:e6:5b:f4:3b:cf:e2:6f:50: 38:24:96:a0:84:a6:40:30:0d:10:5a:51:f0:9b:43: 78:9a:cc:3c:13:75:be:0a:cc:7c:ea:c0:9e:70:4c: 75:b5:8b:7a:f9:07:ef:56:38:2b:2b:56:b2:35:c2: 9e:c1:a4:10:0e:d2:9f:e0:02:a0:74:2d:ed:8c:4b: 2c:73:4d:c2:b7:ef:d2:c1:99:d6:d1:b4:ad:41:9c: af:94:1d:02:6f:1d:55:3b:f0:64:d0:73:77:b8:fc: f9:5f:c4:28:2c:25:7c:31:f6:fa:0c:0b:72:dc:4c: bb:17:5d:17:4c:66:27:49:9c:0b:a6:2f:63:97:07: a6:94:62:75:0a:fe:5b:cb:7d:ae:0d:1f:6d:4b:64: 38:d3:9f:e0:08:ca:85:72:46:61:0a:4f:28:fc:b0: df:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:7A:DA:02:C5:D4:C1:23:01:F8:5A:19:A9:E9:E6:E3:BE:B9:B1:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/43a49ee3-8aa4-33bc-8d52-d801e5f0a221.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.239.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:b3:c8:70:7d:66:5c:34:14:ba:8c:db:5c:64:cf:b6:84:4a: c8:83:8d:42:9d:22:92:b9:a7:24:e9:c5:ac:a9:a8:5e:88:70: 23:1e:aa:90:bf:35:4f:12:af:f5:2e:3c:be:e1:ad:f9:8e:96: 64:50:20:af:25:45:c9:a6:e3:30:b6:c3:cf:35:e0:1b:bf:e6: f2:b6:59:9a:b5:f7:ec:7d:98:7b:b2:29:7c:27:ae:74:37:87: 9f:fb:ba:01:47:5d:52:0b:fc:10:9a:0a:f1:82:14:34:c3:39: 87:2b:c6:a3:a5:fe:5c:84:d1:27:bd:b8:36:c1:6a:35:40:4c: ae:c3:59:6b:7c:b5:c9:01:29:02:4a:39:3c:28:0c:fd:13:28: a2:d6:08:48:d1:fd:21:17:33:ad:39:f5:d9:6c:d4:0b:50:5e: 15:84:0d:39:49:44:46:96:39:83:13:bf:f1:95:71:38:0e:ed: 3e:a9:e4:30:3c:71:74:9b:bc:56:30:c8:c9:68:9e:56:8c:d2: b7:33:c6:2d:47:81:94:ad:f7:0b:3e:dc:9a:e1:03:80:df:59: 21:a8:54:35:f2:fa:73:c0:6a:76:23:bb:9d:4e:36:53:c5:b7: 7e:49:db:03:07:d5:4e:cb:9a:2b:fe:9e:e8:7d:5b:e9:f0:d6: d5:c9:c7:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS6p3hwfeZHX9esAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MzA5MGE1NDQtNGQzZS00MGQ0LTgwYzYtOWM1YzM2MjQ1NzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6UnYVXN5uPdWvJ6yIQqapQG0Wf1x8eH6ztD 3JeiZmBQF8cYutbjd5UOBlEfPjbSPYq5Uzm9vyuy5iC4PZj9bNyfqQzmKweiPwdH otE+CXKKrEqQlgncEqMGDpBZd7gJ5lv0O8/ib1A4JJaghKZAMA0QWlHwm0N4msw8 E3W+Csx86sCecEx1tYt6+QfvVjgrK1ayNcKewaQQDtKf4AKgdC3tjEssc03Ct+/S wZnW0bStQZyvlB0Cbx1VO/Bk0HN3uPz5X8QoLCV8Mfb6DAty3Ey7F10XTGYnSZwL pi9jlwemlGJ1Cv5by32uDR9tS2Q405/gCMqFckZhCk8o/LDfQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJ62gLF1MEjAfhaGanp5uO+ubFEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDNhNDllZTMtOGFhNC0z M2JjLThkNTItZDgwMWU1ZjBhMjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWzyHB9Zlw0FLqM21xkz7aESsiDjUKdIpK5pyTpxaypqF6IcCMeqpC/ NU8Sr/UuPL7hrfmOlmRQIK8lRcmm4zC2w8814Bu/5vK2WZq19+x9mHuyKXwnrnQ3 h5/7ugFHXVIL/BCaCvGCFDTDOYcrxqOl/lyE0Se9uDbBajVATK7DWWt8tckBKQJK OTwoDP0TKKLWCEjR/SEXM6059dls1AtQXhWEDTlJREaWOYMTv/GVcTgO7T6p5DA8 cXSbvFYwyMlonlaM0rczxi1HgZSt9ws+3JrhA4DfWSGoVDXy+nPAanYju51ONlPF t35J2wMH1U7Lmiv+nuh9W+nw1tXJx7g= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:50 2025 by rpki-client