$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/50ada591-fb68-3f8a-aa6b-88dc9c31477a.roa File: 50ada591-fb68-3f8a-aa6b-88dc9c31477a.roa (raw, json) Hash identifier: EifyQC035X9+vkcOFVaEDoi5mxicrb8+ffj3NZVusIw= Subject key identifier: AF:37:9B:BA:71:39:8D:BD:2A:35:42:84:0F:C5:83:26:33:33:35:45 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BB1336E3E8102EBA17780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/50ada591-fb68-3f8a-aa6b-88dc9c31477a.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 35.188.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:b1:33:6e:3e:81:02:eb:a1:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=9ca4ea0d-17c1-4b67-b006-0cc49d27672e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9d:62:38:53:7c:22:10:c1:62:52:63:88:5f: cf:b9:1d:2d:05:5b:7a:cd:86:3a:03:4e:d2:3f:39: c2:a4:bc:1b:45:fa:31:20:70:b6:d4:bd:65:e5:a7: dc:69:af:8f:65:13:69:a7:84:18:bd:31:3c:b7:28: 1c:a7:f3:4a:c1:03:75:c7:18:d6:1a:17:3d:b2:d1: 4c:ca:8a:d2:16:2f:31:c2:f9:2c:6d:64:1a:42:1d: d4:c6:df:2b:6b:db:77:ad:a8:e2:48:95:fb:15:ab: 97:7f:a1:4b:e7:cc:b5:80:df:02:e4:7c:05:df:c2: 33:70:b8:36:3a:8e:2c:64:2c:56:3e:bc:79:d7:9e: c3:52:c8:7c:76:ee:03:a8:ab:2c:98:2a:33:f4:a5: 5d:2c:34:21:5a:af:77:26:b5:24:1f:4c:1c:8f:a3: a2:45:5c:95:74:f4:90:8d:b4:00:db:51:79:c7:f4: c2:86:9c:27:1a:cc:75:f2:c6:4c:22:05:2d:3b:0b: 6f:4b:4b:cc:46:c7:e1:26:b0:ce:9e:6d:ea:4c:ce: bc:fe:2e:1b:58:f5:74:54:68:a6:10:8f:fb:e7:e6: 43:1a:bb:5b:1b:95:44:e0:52:00:17:20:b5:0f:d9: 1b:b7:a7:d9:09:54:64:e1:df:9f:e8:7b:32:65:37: 92:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:37:9B:BA:71:39:8D:BD:2A:35:42:84:0F:C5:83:26:33:33:35:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/50ada591-fb68-3f8a-aa6b-88dc9c31477a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.188.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:ea:f7:46:43:2a:9d:da:13:b5:2f:8d:0c:57:b3:2a:35:f3: d3:aa:8d:75:c4:7f:c7:86:d3:6d:0c:a4:34:c1:79:7e:77:0c: 37:9e:fc:64:0c:0b:07:e8:3f:8d:cd:c4:64:9c:4d:4d:3d:f2: a5:58:83:85:cd:f9:ca:b7:cf:97:b4:00:95:d6:54:7c:67:76: 2a:99:6a:6f:09:51:8e:c8:4d:c5:11:ad:35:ad:b7:89:34:8f: 25:e1:49:b5:c0:fe:b8:65:64:2f:77:61:3b:5a:24:bb:4c:d4: bb:0e:bb:a7:34:53:6e:b7:4b:f0:88:03:4e:75:71:e0:93:af: d2:eb:88:bd:d9:ae:b4:5c:88:c5:ed:f3:4d:04:96:8c:25:c5: dd:b9:87:ac:30:0a:83:ce:f2:31:70:f9:2f:ce:1e:7e:95:e3: e1:fb:84:1d:a0:af:fd:90:93:54:fc:52:9e:5b:09:df:66:9b: 3d:eb:e9:15:6a:27:07:05:4d:9f:bd:42:22:2e:2e:75:11:4c: 38:47:ce:f0:47:f7:8c:56:71:2c:fc:3d:73:57:db:29:80:a6: ea:98:5e:5e:4f:b5:93:8f:5b:50:f9:76:9d:40:a7:be:96:88: c7:2b:0b:36:74:6a:fb:2f:41:d5:39:5f:f8:1e:9c:08:61:d7: 00:f6:f9:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS7Ezbj6BAuuhd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk OWNhNGVhMGQtMTdjMS00YjY3LWIwMDYtMGNjNDlkMjc2NzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp1iOFN8IhDBYlJjiF/PuR0tBVt6zYY6A07S PznCpLwbRfoxIHC21L1l5afcaa+PZRNpp4QYvTE8tygcp/NKwQN1xxjWGhc9stFM yorSFi8xwvksbWQaQh3Uxt8ra9t3rajiSJX7FauXf6FL58y1gN8C5HwF38IzcLg2 Oo4sZCxWPrx5157DUsh8du4DqKssmCoz9KVdLDQhWq93JrUkH0wcj6OiRVyVdPSQ jbQA21F5x/TChpwnGsx18sZMIgUtOwtvS0vMRsfhJrDOnm3qTM68/i4bWPV0VGim EI/75+ZDGrtbG5VE4FIAFyC1D9kbt6fZCVRk4d+f6HsyZTeStQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK83m7pxOY29KjVChA/FgyYzMzVFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTBhZGE1OTEtZmI2OC0z ZjhhLWFhNmItODhkYzljMzE0NzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFI7zAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLq90ZDKp3aE7UvjQxXsyo189OqjXXEf8eG020MpDTBeX53DDee/GQM CwfoP43NxGScTU098qVYg4XN+cq3z5e0AJXWVHxndiqZam8JUY7ITcURrTWtt4k0 jyXhSbXA/rhlZC93YTtaJLtM1LsOu6c0U263S/CIA051ceCTr9LriL3ZrrRciMXt 800Elowlxd25h6wwCoPO8jFw+S/OHn6V4+H7hB2gr/2Qk1T8Up5bCd9mmz3r6RVq JwcFTZ+9QiIuLnURTDhHzvBH94xWcSz8PXNX2ymApuqYXl5PtZOPW1D5dp1Ap76W iMcrCzZ0avsvQdU5X/genAhh1wD2+Tw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:33 2025 by rpki-client