$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6667aa6e-961d-36af-a0df-86e2a2162012.roa File: 6667aa6e-961d-36af-a0df-86e2a2162012.roa (raw, json) Hash identifier: 2pcYkuSPC0kXBk3BkH++wNCdTaZEYc0W0WvJc6RV6aA= Subject key identifier: BF:FD:67:67:AF:00:43:44:AD:B5:35:BA:E9:68:8C:3C:71:A3:AF:DB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BE4F45EECBA544DC0AFC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6667aa6e-961d-36af-a0df-86e2a2162012.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.200.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:e4:f4:5e:ec:ba:54:4d:c0:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=c8a1637e-1cf5-4aff-920b-f22d70515d8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:22:ae:de:c9:bf:d5:1c:66:f6:44:e3:2a:df: 1e:bc:9f:b8:ca:de:e3:55:50:db:20:31:ab:6c:8f: 3f:2f:b4:83:e7:46:83:72:66:ab:1f:dd:d0:5a:dd: ea:08:94:ba:f4:f3:71:65:50:1f:f0:2b:1b:48:63: fe:b2:71:b6:09:2b:e4:fc:5f:59:73:a8:e9:70:d4: f7:7f:5d:9a:b7:c2:a7:85:4d:4b:68:d6:ec:d8:2d: 7b:3a:f5:9a:a5:a9:7b:19:97:28:fb:97:96:bf:47: 86:c6:c4:a3:66:bb:44:d2:e1:0a:36:dc:65:5c:fc: fb:e4:88:33:87:8a:b3:9b:10:f3:69:90:0f:06:2e: 3b:05:94:fc:01:e8:ac:9a:87:45:82:06:f9:22:e3: 14:2a:13:34:91:ac:67:68:34:a6:62:de:32:14:0e: 01:84:94:76:68:0a:25:8d:95:57:9d:c8:d5:24:66: a3:31:4c:d5:a9:42:b7:32:7f:a7:31:96:f1:02:55: 20:37:78:e4:ca:18:8e:2e:ea:bd:ed:f3:fb:90:fb: c4:4d:26:ec:50:95:21:1d:d6:a6:0c:80:be:fa:2a: 8f:37:10:5f:0d:5c:34:e1:db:1d:c3:ff:9c:1d:18: de:48:db:50:ab:e6:22:ba:3b:f1:2a:25:5e:5c:6b: 78:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:FD:67:67:AF:00:43:44:AD:B5:35:BA:E9:68:8C:3C:71:A3:AF:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6667aa6e-961d-36af-a0df-86e2a2162012.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.200.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:83:f3:e6:f9:cb:9e:07:cf:cc:55:27:a4:a5:ed:41:83:18: 4b:d3:8d:84:93:62:e0:d0:f9:61:7b:4a:30:69:5b:b1:7d:71: cb:9c:25:7b:13:8c:ac:8f:e6:c5:3d:63:48:b7:8e:af:a6:b2: c0:04:e4:7a:4b:b7:17:fa:c0:5e:74:f3:4e:78:59:24:ed:92: e8:b3:76:c3:95:91:d7:1a:ef:28:03:22:b0:37:90:94:d1:40: 0b:cf:14:11:60:e9:1d:20:68:a9:b7:78:d5:99:41:35:90:87: b6:5b:cf:1e:01:ac:40:58:de:c9:a0:41:9c:10:9b:9b:e6:df: e3:06:da:2b:69:c7:8c:e6:f1:d1:0f:74:34:90:80:fb:c1:e4: 77:96:47:af:4f:a4:be:c7:01:aa:be:f6:74:2f:70:30:c9:96: 60:83:bb:f1:82:8d:bd:21:46:4c:95:98:16:3c:7c:15:be:4c: 7b:49:4e:89:6b:20:5a:cc:6e:f9:15:46:30:3b:c3:80:01:02: 95:56:5d:9f:54:a3:a5:e9:2b:91:d8:b0:96:7f:a2:fd:d3:b2: 43:f5:a5:0f:ae:12:64:ee:7c:aa:2b:27:56:24:58:26:a4:ee: 4c:4b:eb:93:f0:aa:8b:95:72:42:75:46:2d:90:e5:76:33:07: cb:fb:96:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+T0Xuy6VE3Ar8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YzhhMTYzN2UtMWNmNS00YWZmLTkyMGItZjIyZDcwNTE1ZDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSKu3sm/1Rxm9kTjKt8evJ+4yt7jVVDbIDGr bI8/L7SD50aDcmarH93QWt3qCJS69PNxZVAf8CsbSGP+snG2CSvk/F9Zc6jpcNT3 f12at8KnhU1LaNbs2C17OvWapal7GZco+5eWv0eGxsSjZrtE0uEKNtxlXPz75Igz h4qzmxDzaZAPBi47BZT8AeismodFggb5IuMUKhM0kaxnaDSmYt4yFA4BhJR2aAol jZVXncjVJGajMUzVqUK3Mn+nMZbxAlUgN3jkyhiOLuq97fP7kPvETSbsUJUhHdam DIC++iqPNxBfDVw04dsdw/+cHRjeSNtQq+YiujvxKiVeXGt48wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/9Z2evAENErbU1uulojDxxo6/bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjY2N2FhNmUtOTYxZC0z NmFmLWEwZGYtODZlMmEyMTYyMDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8hgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKD8+b5y54Hz8xVJ6Sl7UGDGEvTjYSTYuDQ+WF7SjBpW7F9ccucJXsT jKyP5sU9Y0i3jq+mssAE5HpLtxf6wF508054WSTtkuizdsOVkdca7ygDIrA3kJTR QAvPFBFg6R0gaKm3eNWZQTWQh7Zbzx4BrEBY3smgQZwQm5vm3+MG2itpx4zm8dEP dDSQgPvB5HeWR69PpL7HAaq+9nQvcDDJlmCDu/GCjb0hRkyVmBY8fBW+THtJTolr IFrMbvkVRjA7w4ABApVWXZ9Uo6XpK5HYsJZ/ov3TskP1pQ+uEmTufKorJ1YkWCak 7kxL65PwqouVckJ1Ri2Q5XYzB8v7lgI= -----END CERTIFICATE-----Generated at Fri Apr 4 21:47:55 2025 by rpki-client