$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/63a799f7-620c-3e6d-a174-e979e3a9bd06.roa File: 63a799f7-620c-3e6d-a174-e979e3a9bd06.roa (raw, json) Hash identifier: jFaP+74rKhy8xJP0GkqQvf4QhtfW9BSfQvYORgyuEOo= Subject key identifier: B9:20:D6:49:0B:4A:46:AB:AA:D1:95:CD:9A:13:89:2A:21:57:1E:9E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BCC0EE67EA81047D72980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/63a799f7-620c-3e6d-a174-e979e3a9bd06.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.238.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:cc:0e:e6:7e:a8:10:47:d7:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=faf7e29e-0ddd-4ccd-9e51-b20841327dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a0:13:3d:48:58:a6:16:67:a9:4b:9f:91:98: 6a:13:1e:4a:09:9c:c5:27:d4:86:80:b5:7a:16:35: 2c:49:4d:a9:9c:f8:b4:55:8c:d1:6f:3f:04:64:4f: 34:d0:a2:ed:9c:a4:2a:d2:42:08:c6:58:87:70:20: 85:82:13:3b:4f:5c:50:fa:9a:58:7f:5f:3f:12:dd: bc:e2:fa:44:50:3e:f3:6f:11:c6:58:f9:5f:37:8a: ac:d2:0c:5b:2e:7b:50:ac:fd:72:6f:1b:29:97:22: 0f:d6:d6:73:45:09:b2:e7:8d:1a:88:05:65:38:ea: 53:6e:1f:f4:41:c2:5b:30:f1:8e:c6:ce:f2:89:78: 17:f3:87:32:72:c7:8c:ec:43:f1:07:dd:54:b5:8a: 15:5c:84:a6:2a:c8:47:b8:89:27:14:aa:31:79:f6: 4f:13:94:07:a4:42:c5:f3:94:7d:a4:98:4a:c6:e2: db:81:19:5c:f3:cc:a5:8f:c0:b1:a8:84:41:2b:8b: 65:76:af:0a:0c:89:44:1c:f7:ac:db:15:82:56:09: 2a:52:3e:b9:80:4b:ed:b1:36:9e:ef:9d:66:0d:c4: 0a:60:a4:63:31:1b:c6:79:21:f2:a9:0b:09:09:ce: 30:a5:d0:36:24:76:f8:dc:e6:92:c8:01:19:2e:17: 50:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:20:D6:49:0B:4A:46:AB:AA:D1:95:CD:9A:13:89:2A:21:57:1E:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/63a799f7-620c-3e6d-a174-e979e3a9bd06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:03:00:ba:10:7e:43:35:4e:54:80:85:fe:b2:0f:42:56:8f: 8e:13:7c:91:12:ca:97:14:55:e2:5e:ce:3a:39:d3:ba:32:15: f9:3c:14:86:b6:4c:48:02:9c:5d:8d:24:05:bc:57:19:b2:a7: b1:95:cf:b7:4f:62:44:26:05:ea:4f:11:c2:38:e0:57:66:bb: f7:d0:0c:98:d3:58:f8:a1:f1:7e:70:81:a4:3d:80:d2:df:fe: 59:7b:a0:ef:58:08:ba:ac:d1:35:e4:b2:e7:02:a5:3d:0d:39: 6f:76:0a:7b:32:da:aa:60:26:32:86:be:49:6e:9c:08:5a:38: 5f:3f:1b:f6:bb:ae:21:1a:23:f3:12:d4:3a:be:ec:55:13:a4: 25:e1:c4:f7:86:fe:5f:df:b0:ba:a2:c5:d7:e1:bd:a7:7b:6e: c3:fa:e6:96:17:d8:17:f1:1d:12:da:d8:38:90:89:12:3f:07: f3:65:0b:ed:20:50:4e:b6:0e:9b:1a:7a:b5:cc:ff:2f:45:79: d1:6e:14:b1:20:c4:bc:b4:01:06:2d:3c:0e:50:2f:82:05:9c: 51:2f:a4:dc:7b:f2:a2:5e:e2:73:75:02:1f:c3:69:dd:ad:90: b7:49:2a:85:16:1f:6e:9e:b8:3f:8e:7f:4c:a3:e4:ae:b4:a8: 11:97:80:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8wO5n6oEEfXKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZmFmN2UyOWUtMGRkZC00Y2NkLTllNTEtYjIwODQxMzI3ZGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaATPUhYphZnqUufkZhqEx5KCZzFJ9SGgLV6 FjUsSU2pnPi0VYzRbz8EZE800KLtnKQq0kIIxliHcCCFghM7T1xQ+ppYf18/Et28 4vpEUD7zbxHGWPlfN4qs0gxbLntQrP1ybxsplyIP1tZzRQmy540aiAVlOOpTbh/0 QcJbMPGOxs7yiXgX84cycseM7EPxB91UtYoVXISmKshHuIknFKoxefZPE5QHpELF 85R9pJhKxuLbgRlc88ylj8CxqIRBK4tldq8KDIlEHPes2xWCVgkqUj65gEvtsTae 751mDcQKYKRjMRvGeSHyqQsJCc4wpdA2JHb43OaSyAEZLhdQhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkg1kkLSkarqtGVzZoTiSohVx6eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjNhNzk5ZjctNjIwYy0z ZTZkLWExNzQtZTk3OWUzYTliZDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoDALoQfkM1TlSAhf6yD0JWj44TfJESypcUVeJezjo507oyFfk8FIa2 TEgCnF2NJAW8Vxmyp7GVz7dPYkQmBepPEcI44Fdmu/fQDJjTWPih8X5wgaQ9gNLf /ll7oO9YCLqs0TXksucCpT0NOW92Cnsy2qpgJjKGvklunAhaOF8/G/a7riEaI/MS 1Dq+7FUTpCXhxPeG/l/fsLqixdfhvad7bsP65pYX2BfxHRLa2DiQiRI/B/NlC+0g UE62DpsaerXM/y9FedFuFLEgxLy0AQYtPA5QL4IFnFEvpNx78qJe4nN1Ah/Dad2t kLdJKoUWH26euD+Of0yj5K60qBGXgKY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:50 2025 by rpki-client