$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5899eaf1-4aac-378e-b6cc-b484a2849734.roa File: 5899eaf1-4aac-378e-b6cc-b484a2849734.roa (raw, json) Hash identifier: ImpEr/s3/IhEQf982w5HReZuHzDK4m/2Q3N1uNtSG+g= Subject key identifier: CB:98:F0:6E:FE:31:B6:05:9E:AB:80:0E:46:25:B0:80:39:06:35:29 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C0F79C5AB3DCE06D07000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5899eaf1-4aac-378e-b6cc-b484a2849734.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.243.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:0f:79:c5:ab:3d:ce:06:d0:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=df51b1d0-e785-4449-92ec-b60a0d6257ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7c:24:61:e3:96:37:b9:84:00:06:28:ae:2f: 06:bc:29:4d:6b:64:d2:33:31:c8:92:f9:7f:c3:c0: 7a:48:87:9b:a2:12:8e:0f:8c:6f:0d:59:d7:b4:ba: 20:df:4d:ef:dc:36:e5:bb:8a:19:63:d4:94:08:a4: f2:ee:4d:b1:99:cf:15:4a:14:bc:58:bb:09:6d:fb: 14:e5:28:f6:49:83:f6:78:28:06:c6:82:9d:b0:3b: 43:fa:3f:98:49:ca:2d:cb:7a:a8:68:07:ac:4f:5d: d7:2f:b4:f7:bb:5a:55:fc:db:22:52:43:50:c2:b0: 35:52:bc:11:b6:33:0c:5c:38:7b:70:0b:0d:c7:09: f2:5e:9f:fa:ce:9a:e8:cf:9c:2d:cb:3a:8b:0e:65: 4a:18:e2:68:fd:43:4b:64:10:a7:c3:ee:d4:3e:4e: 22:32:5a:aa:4c:80:cc:6d:10:3c:25:66:d6:c8:b1: c1:25:ec:f5:ca:32:d0:7e:3d:67:a3:40:7a:d9:b9: 02:5d:10:48:80:e6:52:46:90:b6:ff:46:d1:04:52: e2:77:27:7e:bf:31:5e:da:18:e5:fa:63:6a:3a:0d: 8b:a7:14:5a:45:f1:e3:a8:c0:02:92:f2:d9:0c:a0: 4c:dc:83:d6:65:2a:87:d3:6b:7f:52:1e:6f:5c:28: ec:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:98:F0:6E:FE:31:B6:05:9E:AB:80:0E:46:25:B0:80:39:06:35:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5899eaf1-4aac-378e-b6cc-b484a2849734.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.243.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:35:2c:95:a1:9b:34:a4:d5:fd:dd:2a:40:e4:47:2e:17:0a: 40:0c:3e:35:c1:d1:33:ad:08:f3:82:aa:8f:87:fb:d1:35:ec: 78:f4:2f:23:a0:b0:c1:c4:94:33:65:10:95:7e:e1:d4:8a:91: da:b1:56:ff:83:f6:1c:a1:99:50:65:87:72:cd:26:06:41:25: a6:12:54:85:65:7d:da:f0:ff:d2:7c:f1:85:40:65:72:eb:8c: c0:99:15:46:0d:c1:0f:74:6e:75:bb:5a:86:aa:83:87:0f:d4: 7a:1d:3b:a5:2d:ba:86:3d:d5:38:33:57:31:53:84:66:dd:81: f0:32:e6:cc:4d:33:56:4e:25:0c:b9:01:e4:6c:d1:35:e8:49: e8:d6:b7:32:15:bb:23:ab:27:a2:ba:f0:95:95:9f:4f:ab:0b: 4d:cc:c5:8e:86:0d:81:1c:18:e0:55:3a:fb:45:6c:e3:2d:62: 32:61:79:c6:7d:8e:c2:bd:1f:0f:78:5a:07:3c:8d:7a:d1:21: 29:7b:55:f9:75:18:db:3f:9e:71:92:60:30:47:10:d0:64:78: cf:71:2a:b1:66:5f:fe:f0:52:e5:f3:1d:81:f8:b2:4e:db:f9: 12:e1:ff:e9:be:80:d5:2a:a8:96:f3:53:d0:d8:22:99:85:8e: 8b:e3:ed:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITA95xas9zgbQcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZGY1MWIxZDAtZTc4NS00NDQ5LTkyZWMtYjYwYTBkNjI1N2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknwkYeOWN7mEAAYori8GvClNa2TSMzHIkvl/ w8B6SIebohKOD4xvDVnXtLog303v3Dblu4oZY9SUCKTy7k2xmc8VShS8WLsJbfsU 5Sj2SYP2eCgGxoKdsDtD+j+YScoty3qoaAesT13XL7T3u1pV/NsiUkNQwrA1UrwR tjMMXDh7cAsNxwnyXp/6zproz5wtyzqLDmVKGOJo/UNLZBCnw+7UPk4iMlqqTIDM bRA8JWbWyLHBJez1yjLQfj1no0B62bkCXRBIgOZSRpC2/0bRBFLidyd+vzFe2hjl +mNqOg2LpxRaRfHjqMACkvLZDKBM3IPWZSqH02t/Uh5vXCjsAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMuY8G7+MbYFnquADkYlsIA5BjUpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTg5OWVhZjEtNGFhYy0z NzhlLWI2Y2MtYjQ4NGEyODQ5NzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/PgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHY1LJWhmzSk1f3dKkDkRy4XCkAMPjXB0TOtCPOCqo+H+9E17Hj0LyOg sMHElDNlEJV+4dSKkdqxVv+D9hyhmVBlh3LNJgZBJaYSVIVlfdrw/9J88YVAZXLr jMCZFUYNwQ90bnW7Woaqg4cP1HodO6UtuoY91TgzVzFThGbdgfAy5sxNM1ZOJQy5 AeRs0TXoSejWtzIVuyOrJ6K68JWVn0+rC03MxY6GDYEcGOBVOvtFbOMtYjJhecZ9 jsK9Hw94Wgc8jXrRISl7Vfl1GNs/nnGSYDBHENBkeM9xKrFmX/7wUuXzHYH4sk7b +RLh/+m+gNUqqJbzU9DYIpmFjovj7Zk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:50 2025 by rpki-client