$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/757b5efa-ebc2-3c9c-88de-0ed23d9127db.roa File: 757b5efa-ebc2-3c9c-88de-0ed23d9127db.roa (raw, json) Hash identifier: UHqTOLXv7sRPNzl+zFs1av4ksBAycTEfTzJJS+hCMsI= Subject key identifier: C2:18:7E:B6:D0:C2:C9:F4:0E:4A:42:5B:82:5D:A1:D0:51:1A:CF:FE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BF4D7B9962ECE3261DE36 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/757b5efa-ebc2-3c9c-88de-0ed23d9127db.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.236.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:f4:d7:b9:96:2e:ce:32:61:de:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=1214a87d-2fb3-4119-bb9b-1497c28acaa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:52:ae:6f:7c:64:c9:92:df:51:ee:38:62:eb: 40:26:3d:80:74:02:d3:33:d7:60:2d:4d:34:c6:6c: 1f:c2:61:e7:d7:cb:9a:a6:46:f4:15:2e:51:c4:de: 1d:36:ae:03:87:41:27:fe:ef:ed:8e:16:0c:c2:91: 74:69:d9:cf:4a:99:b4:10:d9:6f:2f:e6:3e:a1:92: 20:8d:29:ca:fd:08:ee:b2:be:b6:b1:8f:a8:39:61: 94:dc:40:83:c3:27:3c:c7:ab:66:b7:23:c2:d3:a4: 73:26:99:48:d0:58:c6:a5:72:07:e8:1f:50:4a:21: 2b:09:fd:76:67:ab:96:bf:18:ea:27:49:a4:01:87: 9f:86:e1:d4:e5:00:98:26:74:90:31:41:5d:66:c3: 51:20:56:09:98:79:a4:ae:c9:d0:4d:ec:74:8c:fc: 33:c6:b4:47:d4:d5:b8:c5:73:8a:ae:04:7e:83:8e: a6:68:21:b9:c2:9b:4a:78:fe:d0:50:14:eb:7c:db: 64:76:0b:0c:57:2b:cd:1a:c9:c9:1d:7e:15:f9:c5: 0e:61:17:f9:da:fd:2b:02:dd:70:e3:f8:17:7c:22: cf:97:61:04:2d:7e:51:60:8f:10:8e:09:86:55:43: 6b:49:57:ac:56:33:38:80:11:a5:ed:ca:1e:11:79: ba:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:18:7E:B6:D0:C2:C9:F4:0E:4A:42:5B:82:5D:A1:D0:51:1A:CF:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/757b5efa-ebc2-3c9c-88de-0ed23d9127db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.236.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:ca:29:da:cb:b7:02:f3:d2:61:aa:89:22:6d:d6:60:f7:c2: d7:fd:87:ad:d2:a0:28:ae:b7:85:7a:46:db:e4:91:2c:c6:f4: 92:c5:40:8a:fc:7c:fa:09:ca:30:63:e4:4c:6c:3a:3f:8c:c8: 4e:de:f1:21:55:30:f2:7b:f4:df:51:40:75:f6:1d:e1:66:d1: 31:fb:50:30:98:92:af:3b:33:8d:ae:38:2b:db:61:75:41:07: 7c:02:bd:08:9a:8f:0a:0b:18:43:37:f5:8b:a1:01:18:a6:cd: d7:d6:25:2d:0a:a9:17:1b:18:75:04:d5:a3:ef:85:e0:c4:fd: 88:1d:5e:0e:74:5e:2a:9e:be:6e:00:a4:32:2e:26:aa:08:a5: 3b:59:d4:39:3a:4a:48:37:66:4d:97:36:18:ac:79:ae:3d:89: 9d:ad:78:40:c9:6d:09:96:78:df:90:b3:1a:d0:38:55:ce:34: 4a:fd:a3:7d:cf:b2:3c:a0:af:05:36:02:03:55:52:d6:19:b9: 27:e8:2b:89:7a:35:fa:80:fb:d6:b6:c4:b4:d8:7d:2f:76:57: 77:fd:a9:86:24:d5:13:24:53:65:40:ab:c6:1e:d6:f2:a7:f8: 0e:6f:6d:79:f1:66:f5:e1:fd:ad:e3:a8:b4:1e:58:8b:f4:6f: 81:6b:aa:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS/TXuZYuzjJh3jYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MTIxNGE4N2QtMmZiMy00MTE5LWJiOWItMTQ5N2MyOGFjYWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFKub3xkyZLfUe44YutAJj2AdALTM9dgLU00 xmwfwmHn18uapkb0FS5RxN4dNq4Dh0En/u/tjhYMwpF0adnPSpm0ENlvL+Y+oZIg jSnK/Qjusr62sY+oOWGU3ECDwyc8x6tmtyPC06RzJplI0FjGpXIH6B9QSiErCf12 Z6uWvxjqJ0mkAYefhuHU5QCYJnSQMUFdZsNRIFYJmHmkrsnQTex0jPwzxrRH1NW4 xXOKrgR+g46maCG5wptKeP7QUBTrfNtkdgsMVyvNGsnJHX4V+cUOYRf52v0rAt1w 4/gXfCLPl2EELX5RYI8QjgmGVUNrSVesVjM4gBGl7coeEXm60QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIYfrbQwsn0DkpCW4JdodBRGs/+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzU3YjVlZmEtZWJjMi0z YzljLTg4ZGUtMGVkMjNkOTEyN2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+ygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/KKdrLtwLz0mGqiSJt1mD3wtf9h63SoCiut4V6RtvkkSzG9JLFQIr8 fPoJyjBj5ExsOj+MyE7e8SFVMPJ79N9RQHX2HeFm0TH7UDCYkq87M42uOCvbYXVB B3wCvQiajwoLGEM39YuhARimzdfWJS0KqRcbGHUE1aPvheDE/YgdXg50Xiqevm4A pDIuJqoIpTtZ1Dk6Skg3Zk2XNhisea49iZ2teEDJbQmWeN+QsxrQOFXONEr9o33P sjygrwU2AgNVUtYZuSfoK4l6NfqA+9a2xLTYfS92V3f9qYYk1RMkU2VAq8Ye1vKn +A5vbXnxZvXh/a3jqLQeWIv0b4Frqlk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:49 2025 by rpki-client