$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/64843a99-637f-3b90-b32c-77f6cdcea810.roa File: 64843a99-637f-3b90-b32c-77f6cdcea810.roa (raw, json) Hash identifier: hHTeQQMG8s/6gaMHZRnCkc2HgSLEiZTIJLNCbO4GRmI= Subject key identifier: A9:1F:FD:CF:A2:67:63:C4:52:5D:E4:2D:6E:7C:94:47:2B:30:12:53 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C1427D0640362A17EBB80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/64843a99-637f-3b90-b32c-77f6cdcea810.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.238.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:14:27:d0:64:03:62:a1:7e:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=db8f1a23-5587-41e2-89c0-9b5fb452049f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dd:49:d5:10:a3:33:03:ca:d8:e9:b7:fd:aa: 3d:dc:bf:a5:fa:2e:bb:39:6e:a6:42:11:d0:62:a4: fd:93:15:c3:18:b9:ba:7d:0b:4b:d4:6d:4f:3f:a1: 1e:87:c3:39:d1:71:ea:8f:d3:70:68:7d:9f:91:b7: c0:d7:9f:d6:cf:e8:be:e5:e6:c5:d1:5b:4d:2d:7e: 5b:d1:fb:c4:90:04:a8:63:1b:92:ae:11:80:81:5a: c9:59:d7:8e:44:66:f7:7c:75:1c:b6:4d:e8:ef:e6: 7b:e5:77:3b:68:2b:7d:53:a0:e8:6d:9d:c4:91:f5: 32:f7:a8:05:d1:2e:e9:f0:56:1d:41:3a:fd:d5:0d: f7:17:35:53:44:14:19:75:f5:b1:8a:34:12:fd:dd: 39:72:c2:9f:fa:de:23:01:27:87:28:97:60:80:8e: 14:ff:8d:0b:8e:ef:74:4b:00:40:96:27:26:cd:a3: ed:2f:11:cb:ca:f7:d6:0e:e7:67:60:62:65:54:0f: f4:c4:14:7f:11:06:e7:6e:b1:e4:8d:b7:34:8c:ca: c5:e1:d3:1f:7b:2f:c4:39:ae:d6:38:a2:71:6a:c3: 4e:20:fd:01:37:31:c1:01:72:a4:9b:7f:38:ae:07: c9:c2:0a:d9:a3:c0:61:23:2c:c9:0f:cb:eb:3c:d9: c6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1F:FD:CF:A2:67:63:C4:52:5D:E4:2D:6E:7C:94:47:2B:30:12:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/64843a99-637f-3b90-b32c-77f6cdcea810.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:dd:a6:09:ea:f5:aa:37:56:5e:8a:0e:01:4d:46:27:b5:b1: c2:aa:6a:eb:43:fe:8e:4f:18:af:40:33:ba:44:e8:95:06:35: a4:3d:d5:f4:94:89:fb:e0:e7:05:d5:d1:20:7c:24:27:bd:ca: 62:41:fd:c7:1e:f7:87:b2:37:e1:9e:a4:d6:26:d9:63:08:22: 70:97:76:f9:08:e4:cf:64:da:00:e8:f5:9a:06:f9:61:92:27: 46:3c:99:9d:33:3a:eb:48:f7:21:3f:03:92:58:6e:04:8d:b3: a6:13:a9:38:c5:9f:b8:63:59:f3:5b:6f:ce:3b:e6:26:73:29: 5d:ea:00:c4:ff:b1:0a:81:65:62:36:23:da:ef:76:25:f3:58: 2d:a5:0a:75:02:e6:8c:e7:d5:e4:9f:c4:b4:85:b3:18:68:9a: 11:e9:8e:e9:3d:ab:2c:3f:ef:7d:56:af:3d:a6:60:7a:5a:d6: db:d6:58:cc:ad:dd:eb:8b:3c:82:68:c8:02:c8:f1:7d:8e:43: e5:3c:89:6e:58:df:b3:b8:a9:34:33:2b:60:42:53:3e:7f:92: 62:dd:16:15:60:6e:ff:67:a8:58:27:50:2e:74:98:7a:df:28: e7:db:1e:7a:c4:a3:8e:bd:77:62:5e:37:98:d5:d8:59:b7:5c: de:b7:3c:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITBQn0GQDYqF+u4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZGI4ZjFhMjMtNTU4Ny00MWUyLTg5YzAtOWI1ZmI0NTIwNDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN1J1RCjMwPK2Om3/ao93L+l+i67OW6mQhHQ YqT9kxXDGLm6fQtL1G1PP6Eeh8M50XHqj9NwaH2fkbfA15/Wz+i+5ebF0VtNLX5b 0fvEkASoYxuSrhGAgVrJWdeORGb3fHUctk3o7+Z75Xc7aCt9U6DobZ3EkfUy96gF 0S7p8FYdQTr91Q33FzVTRBQZdfWxijQS/d05csKf+t4jASeHKJdggI4U/40Lju90 SwBAlicmzaPtLxHLyvfWDudnYGJlVA/0xBR/EQbnbrHkjbc0jMrF4dMfey/EOa7W OKJxasNOIP0BNzHBAXKkm384rgfJwgrZo8BhIyzJD8vrPNnGKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkf/c+iZ2PEUl3kLW58lEcrMBJTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjQ4NDNhOTktNjM3Zi0z YjkwLWIzMmMtNzdmNmNkY2VhODEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHndpgnq9ao3Vl6KDgFNRie1scKqautD/o5PGK9AM7pE6JUGNaQ91fSU ifvg5wXV0SB8JCe9ymJB/cce94eyN+GepNYm2WMIInCXdvkI5M9k2gDo9ZoG+WGS J0Y8mZ0zOutI9yE/A5JYbgSNs6YTqTjFn7hjWfNbb8475iZzKV3qAMT/sQqBZWI2 I9rvdiXzWC2lCnUC5ozn1eSfxLSFsxhomhHpjuk9qyw/731Wrz2mYHpa1tvWWMyt 3euLPIJoyALI8X2OQ+U8iW5Y37O4qTQzK2BCUz5/kmLdFhVgbv9nqFgnUC50mHrf KOfbHnrEo469d2JeN5jV2Fm3XN63PLo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:12:18 2025 by rpki-client