$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/49f8cbcd-31ba-35f1-be9e-572aa2c7ad5e.roa File: 49f8cbcd-31ba-35f1-be9e-572aa2c7ad5e.roa (raw, json) Hash identifier: T9yVaLB2U7uhHKu4OZmecDsD5E16cXJ8vJr/czqcyuw= Subject key identifier: 93:26:9C:BB:EC:D5:67:4D:4F:E8:D3:74:C2:BD:A0:31:12:C7:FA:A5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BFC2944D79021D4625800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/49f8cbcd-31ba-35f1-be9e-572aa2c7ad5e.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.238.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:fc:29:44:d7:90:21:d4:62:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=f1af3c2a-0e53-4d9d-906c-c11b8b6a91bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3d:a0:7a:35:83:8f:63:04:da:6e:f3:6e:cc: 1c:5f:3b:fe:75:ab:59:12:80:9e:b9:d1:4c:bc:35: 88:45:42:18:91:fe:56:aa:4e:1b:83:1f:5f:71:78: 89:52:19:1c:da:4a:ab:fb:84:54:d5:cc:7a:a9:fb: 29:c3:e9:99:5d:2e:59:c8:7d:4a:3b:0b:1d:14:ec: 42:0f:8c:73:22:84:f3:54:b6:30:5f:f4:0e:25:2b: 1f:b0:92:22:fe:a0:99:75:c3:61:72:10:11:24:aa: 77:a2:eb:e8:fe:00:de:33:89:ee:4d:b9:f2:bb:5f: 7c:d6:af:31:65:e9:19:3b:2c:a0:a5:9a:ee:bb:a8: 2d:78:8e:0b:00:56:82:e1:c6:6c:3d:56:4c:1d:ed: 22:a0:72:4a:ea:03:54:e7:e0:34:e2:50:aa:e6:b7: 91:a6:55:92:d7:04:5c:92:57:61:cb:d2:40:7c:b8: 2e:3e:31:db:ab:d4:0d:36:6b:8a:38:71:71:36:df: 0c:37:43:53:12:4a:a2:ae:9b:f6:72:46:79:0b:a5: e9:22:9b:fc:e6:90:99:70:7f:45:e6:24:b8:93:f1: ca:df:33:96:bf:6d:04:b7:1f:de:00:cf:c9:2f:b2: 8b:20:9f:9e:f2:5f:7d:46:10:fc:b4:82:1b:33:2c: 99:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:26:9C:BB:EC:D5:67:4D:4F:E8:D3:74:C2:BD:A0:31:12:C7:FA:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/49f8cbcd-31ba-35f1-be9e-572aa2c7ad5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:20:e2:ef:89:fe:c4:2a:55:4a:e0:8a:64:b0:43:11:fd:5f: 6c:25:ca:eb:03:57:20:d3:db:42:31:21:d9:5d:d5:e2:3c:76: 7b:c9:82:fe:5e:de:3e:45:33:55:f5:c5:70:7b:c3:8e:d5:a5: 4f:89:fc:42:43:64:b8:da:4f:e5:f8:2f:76:03:65:e8:77:e7: 1f:66:e8:37:1e:6f:7b:2e:d9:59:ff:9e:00:46:c9:5b:a0:d9: 7c:9d:27:4d:7a:6f:b6:fa:e9:13:7d:b2:e2:1f:9c:63:47:58: a5:55:a8:18:f7:71:9e:b0:f5:fd:1f:75:48:11:ea:d8:ef:da: aa:43:e3:68:c7:68:ec:f1:77:83:a9:a4:30:12:f9:6b:21:80: fd:d8:52:9c:16:08:46:37:25:3a:38:96:91:91:ea:5e:57:e3: 6a:cd:0f:43:a6:64:ac:42:a6:df:86:fb:b0:6d:52:1d:c8:b5: 73:df:66:35:7f:1d:64:1d:a7:3c:9e:85:fb:b4:7e:23:c3:6d: 29:a9:87:1d:b4:04:8d:0c:f7:f8:2c:17:2d:e8:d1:e3:f7:07: 19:72:3b:a4:7f:78:c2:92:4c:60:1d:96:d7:92:00:55:fc:28: ea:b9:97:95:70:fc:5e:42:8e:08:02:63:14:cd:3a:32:ea:a5: ed:26:79:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS/wpRNeQIdRiWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZjFhZjNjMmEtMGU1My00ZDlkLTkwNmMtYzExYjhiNmE5MWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD2gejWDj2ME2m7zbswcXzv+datZEoCeudFM vDWIRUIYkf5Wqk4bgx9fcXiJUhkc2kqr+4RU1cx6qfspw+mZXS5ZyH1KOwsdFOxC D4xzIoTzVLYwX/QOJSsfsJIi/qCZdcNhchARJKp3ouvo/gDeM4nuTbnyu1981q8x ZekZOyygpZruu6gteI4LAFaC4cZsPVZMHe0ioHJK6gNU5+A04lCq5reRplWS1wRc kldhy9JAfLguPjHbq9QNNmuKOHFxNt8MN0NTEkqirpv2ckZ5C6XpIpv85pCZcH9F 5iS4k/HK3zOWv20Etx/eAM/JL7KLIJ+e8l99RhD8tIIbMyyZBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJMmnLvs1WdNT+jTdMK9oDESx/qlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDlmOGNiY2QtMzFiYS0z NWYxLWJlOWUtNTcyYWEyYzdhZDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYg4u+J/sQqVUrgimSwQxH9X2wlyusDVyDT20IxIdld1eI8dnvJgv5e 3j5FM1X1xXB7w47VpU+J/EJDZLjaT+X4L3YDZeh35x9m6Dceb3su2Vn/ngBGyVug 2XydJ016b7b66RN9suIfnGNHWKVVqBj3cZ6w9f0fdUgR6tjv2qpD42jHaOzxd4Op pDAS+WshgP3YUpwWCEY3JTo4lpGR6l5X42rND0OmZKxCpt+G+7BtUh3ItXPfZjV/ HWQdpzyehfu0fiPDbSmphx20BI0M9/gsFy3o0eP3BxlyO6R/eMKSTGAdlteSAFX8 KOq5l5Vw/F5CjggCYxTNOjLqpe0meRc= -----END CERTIFICATE-----Generated at Fri Mar 14 11:09:28 2025 by rpki-client