$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5162ca5f-5bbe-39d0-b696-09a25646ba3b.roa File: 5162ca5f-5bbe-39d0-b696-09a25646ba3b.roa (raw, json) Hash identifier: vNeNZFC1PmGhjmYLY5EQLxxi8tgDRykjxkuk/f2NI3w= Subject key identifier: F7:B7:71:63:C7:80:8E:C5:3A:43:93:D6:B2:18:BD:E6:04:75:10:EA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BFC92F5A65360A4697640 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5162ca5f-5bbe-39d0-b696-09a25646ba3b.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.239.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:fc:92:f5:a6:53:60:a4:69:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=e50c5605-b2ce-4852-bb12-4a08d9c0ec5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:17:c0:f8:fd:cb:1f:28:e9:10:7d:ee:7c:a0: e7:65:b9:18:6c:95:6f:f3:cb:a8:08:b0:65:a1:f7: 1d:f1:41:10:2b:8a:ac:bf:ca:af:af:bd:da:f9:fb: 39:0d:f9:81:7e:b4:dd:2f:f7:7e:67:e0:f1:90:a7: 53:e0:42:f8:56:43:64:2f:ea:c9:69:93:4c:7a:f6: 01:d1:fb:1e:19:21:8a:f8:c6:c2:47:50:73:28:4a: 2d:b1:3e:57:15:d3:5b:da:12:c9:8e:93:fe:b2:d7: 93:d1:33:b1:44:53:d1:63:5b:f5:6e:ba:69:ca:c2: 23:67:dc:eb:d9:34:9e:f5:da:ef:40:6a:70:b2:85: 1a:37:2f:53:11:f3:56:02:99:eb:3f:d7:60:af:d6: 5f:fe:33:9f:76:45:d6:80:7e:ef:2b:60:35:a1:6a: 4b:e5:76:c1:21:3a:28:2b:c8:83:25:8c:08:84:49: c9:0d:47:f7:42:bf:4d:87:82:95:e1:68:5a:f8:f8: ee:59:6d:95:7c:8e:91:54:8c:e5:13:a8:c3:17:7b: f7:d0:6c:de:b0:21:c2:ec:3a:e6:8f:80:18:23:b4: 3e:20:dc:58:0d:b2:33:60:99:35:5e:e8:de:8f:22: 9a:c2:8b:7c:3f:9a:81:2d:e9:72:35:eb:29:eb:91: d6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B7:71:63:C7:80:8E:C5:3A:43:93:D6:B2:18:BD:E6:04:75:10:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5162ca5f-5bbe-39d0-b696-09a25646ba3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.239.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:b8:2b:43:f4:7a:b0:85:a7:df:52:d7:8d:24:38:54:80:5d: 0a:2a:24:2d:c2:d3:d6:b2:77:d4:68:07:6a:d9:7f:da:1f:56: c5:df:fc:1d:41:61:44:b4:8a:16:4e:11:e2:ea:9c:49:92:33: 73:f7:71:87:26:ac:6b:40:aa:52:33:75:34:db:24:ac:68:ed: 20:ea:6d:c8:f7:8f:18:c9:d9:a1:c4:97:ac:99:01:62:94:0d: c6:7b:e3:cc:16:be:fc:4b:fb:27:2d:fe:0d:75:8a:11:cb:57: ed:74:72:22:36:ce:06:cf:e1:d4:ed:46:97:2a:26:3b:7c:c6: 8f:35:52:fc:34:1d:de:bd:c6:ec:56:c1:6b:82:9b:48:25:4b: 24:2c:31:c7:9d:f7:a8:57:33:bf:14:5c:43:e6:a3:49:53:48: 98:32:c4:57:70:18:fa:f1:41:ef:37:04:b5:93:9a:ab:5a:b6: 3a:49:5d:ac:de:b5:c2:00:97:14:55:98:59:4c:aa:42:41:1b: c9:5f:f0:b9:6b:07:9d:b7:f1:df:cf:58:e8:53:89:d1:ca:47: 1d:6a:b3:17:dd:42:0f:4f:7a:48:f0:39:6f:cc:66:ea:96:03: 1a:20:cc:e3:e4:01:5b:3f:df:d7:ac:39:b2:81:7d:67:ab:af: d5:03:6f:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS/yS9aZTYKRpdkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZTUwYzU2MDUtYjJjZS00ODUyLWJiMTItNGEwOGQ5YzBlYzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBfA+P3LHyjpEH3ufKDnZbkYbJVv88uoCLBl ofcd8UEQK4qsv8qvr73a+fs5DfmBfrTdL/d+Z+DxkKdT4EL4VkNkL+rJaZNMevYB 0fseGSGK+MbCR1BzKEotsT5XFdNb2hLJjpP+steT0TOxRFPRY1v1brppysIjZ9zr 2TSe9drvQGpwsoUaNy9TEfNWApnrP9dgr9Zf/jOfdkXWgH7vK2A1oWpL5XbBIToo K8iDJYwIhEnJDUf3Qr9Nh4KV4Wha+PjuWW2VfI6RVIzlE6jDF3v30GzesCHC7Drm j4AYI7Q+INxYDbIzYJk1XujejyKawot8P5qBLelyNesp65HWkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPe3cWPHgI7FOkOT1rIYveYEdRDqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTE2MmNhNWYtNWJiZS0z OWQwLWI2OTYtMDlhMjU2NDZiYTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+4K0P0erCFp99S140kOFSAXQoqJC3C09ayd9RoB2rZf9ofVsXf/B1B YUS0ihZOEeLqnEmSM3P3cYcmrGtAqlIzdTTbJKxo7SDqbcj3jxjJ2aHEl6yZAWKU DcZ748wWvvxL+yct/g11ihHLV+10ciI2zgbP4dTtRpcqJjt8xo81Uvw0Hd69xuxW wWuCm0glSyQsMced96hXM78UXEPmo0lTSJgyxFdwGPrxQe83BLWTmqtatjpJXaze tcIAlxRVmFlMqkJBG8lf8LlrB5238d/PWOhTidHKRx1qsxfdQg9PekjwOW/MZuqW AxogzOPkAVs/39esObKBfWerr9UDb9M= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:10 2025 by rpki-client