$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/46f8d0c5-dfee-3231-8140-0ac0c06b5a58.roa File: 46f8d0c5-dfee-3231-8140-0ac0c06b5a58.roa (raw, json) Hash identifier: bdztBJxhOR0tYo0cAjbjlCO7xZ8xaI7xtL65cmhZK7M= Subject key identifier: 8C:8E:FC:DE:47:C1:36:A5:B8:46:DC:E1:50:99:7D:47:0A:0C:C0:36 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BDA3CCE679A3E18D84F00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/46f8d0c5-dfee-3231-8140-0ac0c06b5a58.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.220.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:da:3c:ce:67:9a:3e:18:d8:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=c944fb13-f06e-46a9-ad77-aca942c01dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:02:c4:7e:de:ca:cf:f6:a0:88:4f:2e:26:1d: 85:d8:1a:ed:b6:13:88:0e:ed:01:8c:b5:f0:21:f7: 24:97:17:ad:93:6c:fa:f1:1e:55:85:ac:ed:59:23: e2:28:54:e7:44:67:fc:e1:82:99:bd:eb:0c:b4:19: 3d:6c:1b:86:da:83:5b:a1:3a:7a:11:06:aa:d3:c0: 56:42:03:9c:4a:a5:03:53:6c:e2:ca:7e:7d:1f:ab: d1:18:2b:41:1f:dc:0b:bb:bc:27:0f:b9:f2:1b:b3: eb:08:02:d8:c6:a0:99:0b:2a:02:76:e8:14:6d:1f: db:94:f6:e5:84:1a:1e:78:95:66:7e:d3:0c:58:3f: d5:7e:6f:15:63:20:17:cd:54:52:ee:01:92:e3:1b: 45:7c:0f:8e:11:2b:71:6a:8b:e9:71:f6:16:b7:35: 2b:bd:34:81:0f:3e:15:46:a5:4f:dd:30:8f:d0:32: 91:0c:9f:b8:4a:ba:a9:aa:fc:18:ad:ec:c1:24:c1: 44:60:c7:47:a4:90:92:9b:49:94:f2:8d:9c:78:2c: 44:d2:ba:c8:6e:dc:9e:df:d7:6c:4e:e1:1c:d7:3d: 6e:05:6d:f0:ba:b2:8d:8c:b4:cd:ab:e3:56:fd:e6: e2:47:22:f3:54:f9:df:50:54:c1:4a:0b:b1:a5:84: 06:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8E:FC:DE:47:C1:36:A5:B8:46:DC:E1:50:99:7D:47:0A:0C:C0:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/46f8d0c5-dfee-3231-8140-0ac0c06b5a58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.220.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:4b:95:f9:38:ad:03:3e:45:7d:5d:33:ec:a2:2d:6f:da:84: 79:96:7d:e0:8a:96:4e:9d:03:48:e1:18:c2:1b:67:c9:d6:ae: 33:f6:68:25:94:7a:bd:1a:07:5d:47:39:2c:bc:2c:d0:73:35: cd:46:88:c7:91:ed:a7:e2:ae:98:e8:f2:01:73:db:7a:5b:84: 5a:f3:4e:0e:50:b1:87:65:f1:90:1d:ea:15:96:97:1a:b2:b2: 6a:45:6f:10:19:5b:16:d3:49:30:d4:bc:4d:7b:39:36:32:9b: c4:60:29:4c:58:ac:f5:35:6f:75:ff:b4:cf:72:d9:72:ca:e1: 3d:07:09:5e:64:da:d7:66:a8:3e:25:0e:d1:3b:e4:bc:7f:db: c0:1f:e7:e9:91:6a:61:80:a3:b0:08:2b:42:ed:7a:96:81:35: 4a:00:98:8b:e1:2d:a6:e2:4a:3f:b6:ba:64:e7:2f:42:78:b1: 57:27:d0:11:38:f8:33:e6:ac:21:5c:bd:18:7a:8c:e2:df:b6: 5d:9a:1c:bb:ce:57:aa:d0:b4:aa:39:2c:21:53:01:32:65:34: c3:e3:11:b7:b9:9c:a5:3a:23:51:ba:6d:50:c4:86:2b:2d:07: 0b:ca:2b:63:b3:d9:1f:01:eb:28:9b:42:fc:33:11:79:26:dc: 45:31:8d:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS9o8zmeaPhjYTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk Yzk0NGZiMTMtZjA2ZS00NmE5LWFkNzctYWNhOTQyYzAxZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlALEft7Kz/agiE8uJh2F2BrtthOIDu0BjLXw Ifcklxetk2z68R5VhaztWSPiKFTnRGf84YKZvesMtBk9bBuG2oNboTp6EQaq08BW QgOcSqUDU2ziyn59H6vRGCtBH9wLu7wnD7nyG7PrCALYxqCZCyoCdugUbR/blPbl hBoeeJVmftMMWD/Vfm8VYyAXzVRS7gGS4xtFfA+OEStxaovpcfYWtzUrvTSBDz4V RqVP3TCP0DKRDJ+4SrqpqvwYrezBJMFEYMdHpJCSm0mU8o2ceCxE0rrIbtye39ds TuEc1z1uBW3wurKNjLTNq+NW/ebiRyLzVPnfUFTBSguxpYQGUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyO/N5HwTaluEbc4VCZfUcKDMA2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDZmOGQwYzUtZGZlZS0z MjMxLTgxNDAtMGFjMGMwNmI1YTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI9ygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtLlfk4rQM+RX1dM+yiLW/ahHmWfeCKlk6dA0jhGMIbZ8nWrjP2aCWU er0aB11HOSy8LNBzNc1GiMeR7afirpjo8gFz23pbhFrzTg5QsYdl8ZAd6hWWlxqy smpFbxAZWxbTSTDUvE17OTYym8RgKUxYrPU1b3X/tM9y2XLK4T0HCV5k2tdmqD4l DtE75Lx/28Af5+mRamGAo7AIK0LtepaBNUoAmIvhLabiSj+2umTnL0J4sVcn0BE4 +DPmrCFcvRh6jOLftl2aHLvOV6rQtKo5LCFTATJlNMPjEbe5nKU6I1G6bVDEhist BwvKK2Oz2R8B6yibQvwzEXkm3EUxjew= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:58 2025 by rpki-client