$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4dbc5fc0-c8b4-37ea-8019-163040ebe848.roa File: 4dbc5fc0-c8b4-37ea-8019-163040ebe848.roa (raw, json) Hash identifier: Em1LTny10iywixIgBoIUFs9HPs2IXE8U2q/rE4VARnM= Subject key identifier: B8:0E:CA:9F:DC:74:AA:1B:E4:F6:39:BA:D4:F8:4D:34:DE:0B:F0:4B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BE44430D38D5177CDAE80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4dbc5fc0-c8b4-37ea-8019-163040ebe848.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 35.219.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:e4:44:30:d3:8d:51:77:cd:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=2ace4194-383f-4e95-9744-4b10447b5f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d0:4e:39:62:f9:a0:34:53:89:dd:de:f7:07: 36:fb:25:bc:b0:da:fb:dc:01:a0:12:24:9c:36:0e: f7:c2:b0:fa:dd:be:a7:54:5c:ed:9b:06:5e:73:10: a7:3a:4e:76:5f:b6:2e:f3:1d:14:4b:4c:0d:ed:fd: 77:73:18:39:f9:07:1d:93:d0:e9:df:54:b1:bf:c3: ed:f5:7f:51:7a:80:d5:f6:f9:b7:36:15:51:9d:7b: 44:c6:b0:a9:04:ec:b0:01:ab:7b:75:36:3a:93:f9: 27:2c:cf:1f:61:92:fc:87:d4:45:e0:09:77:2a:9a: e1:dc:44:39:7f:5d:00:be:cc:65:74:26:65:94:e2: c5:94:35:56:83:51:1f:16:51:7c:4f:a8:fd:16:14: 9e:5e:3c:60:e2:a8:35:2a:e5:28:c9:87:6f:5a:b4: 6a:8c:6e:99:ca:96:73:cb:09:a1:7d:d1:5d:58:ec: 47:96:61:6e:97:40:99:0e:c9:ec:f9:f2:0c:5f:3e: 77:fa:2f:35:f0:cd:6c:ef:4a:f7:bb:3b:76:05:c8: 72:02:2e:7b:ef:df:ab:63:45:75:a0:0e:e0:e3:90: 9d:40:4b:27:c6:cc:c6:b0:8f:33:7f:ce:7a:dd:54: 91:88:7f:c6:a1:81:49:2a:0c:5b:cc:67:bc:32:5a: bf:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:0E:CA:9F:DC:74:AA:1B:E4:F6:39:BA:D4:F8:4D:34:DE:0B:F0:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4dbc5fc0-c8b4-37ea-8019-163040ebe848.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.219.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:96:91:a9:b3:07:ac:e4:88:1e:30:87:c0:71:6e:d1:8e:84: c1:a0:32:6b:d2:22:c5:82:18:6c:4e:29:d6:fe:d3:2b:13:e2: 30:4d:ff:8f:9c:b5:a2:0c:f1:73:9c:5a:60:81:2a:5e:b2:46: 67:26:0e:8f:2e:a5:e3:b4:cc:88:69:67:c6:b8:8a:a1:8e:81: d7:39:be:91:a8:7c:65:8f:28:2c:84:f9:5f:f9:f3:9d:31:d1: b7:5a:b2:b6:48:35:28:ab:11:09:d5:5c:8f:25:62:e2:8d:ea: 19:77:b5:8c:1b:07:aa:cc:06:53:f6:02:ac:c0:93:18:83:4e: 9b:79:6a:59:40:00:cd:49:08:8c:2d:5d:ce:8b:a1:16:50:28: 28:9d:22:2c:1d:25:a6:58:c1:3b:c0:7c:c1:7a:20:0a:8b:03: b7:33:57:5c:52:db:e9:fe:f1:6a:36:7a:11:0f:7c:0d:6b:eb: 72:de:f0:d3:8f:d0:9a:8b:d5:13:35:70:d4:d6:84:c9:c2:96: 1e:16:99:ed:0c:1c:e0:5a:45:d5:af:11:05:5a:0e:30:6b:56: 71:b9:28:a1:79:15:d5:71:c0:ea:f5:c4:e8:9e:63:fb:b3:19: 27:13:ed:c7:fb:58:eb:4d:b8:5f:a0:06:38:59:32:0b:83:aa: fb:4b:56:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+REMNONUXfNroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MmFjZTQxOTQtMzgzZi00ZTk1LTk3NDQtNGIxMDQ0N2I1ZjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtBOOWL5oDRTid3e9wc2+yW8sNr73AGgEiSc Ng73wrD63b6nVFztmwZecxCnOk52X7Yu8x0US0wN7f13cxg5+Qcdk9Dp31Sxv8Pt 9X9ReoDV9vm3NhVRnXtExrCpBOywAat7dTY6k/knLM8fYZL8h9RF4Al3Kprh3EQ5 f10AvsxldCZllOLFlDVWg1EfFlF8T6j9FhSeXjxg4qg1KuUoyYdvWrRqjG6ZypZz ywmhfdFdWOxHlmFul0CZDsns+fIMXz53+i818M1s70r3uzt2BchyAi5779+rY0V1 oA7g45CdQEsnxszGsI8zf8563VSRiH/GoYFJKgxbzGe8Mlq/BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgOyp/cdKob5PY5utT4TTTeC/BLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGRiYzVmYzAtYzhiNC0z N2VhLTgwMTktMTYzMDQwZWJlODQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI9sAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqWkamzB6zkiB4wh8BxbtGOhMGgMmvSIsWCGGxOKdb+0ysT4jBN/4+c taIM8XOcWmCBKl6yRmcmDo8upeO0zIhpZ8a4iqGOgdc5vpGofGWPKCyE+V/5850x 0bdasrZINSirEQnVXI8lYuKN6hl3tYwbB6rMBlP2AqzAkxiDTpt5allAAM1JCIwt Xc6LoRZQKCidIiwdJaZYwTvAfMF6IAqLA7czV1xS2+n+8Wo2ehEPfA1r63Le8NOP 0JqL1RM1cNTWhMnClh4Wme0MHOBaRdWvEQVaDjBrVnG5KKF5FdVxwOr1xOieY/uz GScT7cf7WOtNuF+gBjhZMguDqvtLVtM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:56 2025 by rpki-client