$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/760ff3ef-a746-30d3-88c7-63b812d7fd3e.roa File: 760ff3ef-a746-30d3-88c7-63b812d7fd3e.roa (raw, json) Hash identifier: nTGYLcHxHNm+HnDWZ2TFUAqF+Q887O34ehdYHeKNZfM= Subject key identifier: 53:E2:B4:39:F0:BC:B2:16:5A:52:7A:0F:F5:E9:F1:BE:BE:87:27:FE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BAFFCD179F74638E5F280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/760ff3ef-a746-30d3-88c7-63b812d7fd3e.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.205.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:af:fc:d1:79:f7:46:38:e5:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=ab9f4ca5-c712-4468-a3d7-d33ab675c646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:dc:43:5a:a7:ee:f4:f9:4c:5e:7b:ce:f6:a7: cb:1c:66:ed:9e:2d:e8:16:69:65:79:0d:0c:6c:bf: b4:d4:18:02:27:22:0e:b7:d5:9b:6b:e1:3c:d9:76: 5a:cf:75:a5:57:2c:ea:1b:1d:87:eb:47:74:d6:1d: bb:98:ef:6b:58:98:e8:00:03:f5:4a:48:ee:4c:33: bb:33:d7:bf:5f:46:1d:15:7a:ef:18:1c:b3:1d:b3: 37:fd:31:ca:e0:ff:9e:66:20:fc:ee:07:65:6b:46: 28:1b:3f:63:61:74:5f:18:9b:a4:8c:7a:e5:0c:45: 19:80:34:a5:5b:fb:9e:91:67:9b:02:b0:a1:60:c0: 91:43:67:a7:ef:ff:39:0f:0e:16:07:62:27:16:59: 23:66:6f:4a:15:c0:4c:12:28:1f:84:9e:dd:d9:49: 7c:8c:a9:ad:bc:2d:16:a8:41:ea:50:18:77:25:4a: 39:02:44:18:cd:e9:87:e6:a6:6b:15:a2:b0:27:20: 14:78:6d:5e:4c:31:ce:32:fd:d6:9b:70:84:3d:fe: ec:83:e0:18:f3:f0:87:9a:8a:78:59:01:51:5f:4f: 70:a7:c3:31:b7:13:2d:11:b5:4f:47:af:d2:0c:50: 23:7c:f6:57:f7:cb:b7:7c:24:36:62:5d:20:77:f6: 18:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E2:B4:39:F0:BC:B2:16:5A:52:7A:0F:F5:E9:F1:BE:BE:87:27:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/760ff3ef-a746-30d3-88c7-63b812d7fd3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.205.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:bc:3c:35:3a:db:3c:c8:da:38:b0:b3:a2:4f:8b:e6:79:40: 5e:63:4d:97:76:92:2c:fe:f7:46:10:af:ed:3b:e3:ba:1e:9f: 27:8f:35:1f:3e:5e:f8:c5:7a:c6:1a:bc:43:14:04:fd:0a:98: 4a:21:1b:51:16:b7:6a:cc:fe:6e:77:ee:e4:1d:ea:2d:8d:b4: c2:5e:ab:0d:92:1f:c2:bb:42:97:8c:68:15:48:7b:b1:38:b3: 87:f9:75:84:79:64:86:a8:33:4d:6b:8d:cc:ca:2c:61:ac:f4: 69:aa:c1:7f:b6:76:b2:ea:d5:65:ff:c1:7b:1f:03:1e:1e:fa: b3:33:5b:32:0f:86:c4:80:00:8a:88:3c:e0:81:80:cc:c7:c4: b8:db:67:8c:d7:19:da:c5:ca:b0:e3:59:74:c4:15:c1:98:be: 3a:33:73:ca:30:bd:bf:fb:ec:76:53:b1:16:b8:f4:63:94:5c: 42:07:09:1a:8f:1e:bf:60:e2:42:6f:b9:1e:a3:50:48:2e:d3: e7:d9:da:3c:77:66:e4:80:dd:cd:39:c0:06:4e:64:7d:fc:87: 1b:a4:b4:f2:1e:b5:07:11:22:04:d9:1f:ec:b0:0a:fa:f3:93: 54:2a:cb:8b:e7:c9:a5:87:6a:37:aa:14:49:b0:76:d8:a6:89: 20:d7:60:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS6/80Xn3Rjjl8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YWI5ZjRjYTUtYzcxMi00NDY4LWEzZDctZDMzYWI2NzVjNjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldxDWqfu9PlMXnvO9qfLHGbtni3oFmlleQ0M bL+01BgCJyIOt9Wba+E82XZaz3WlVyzqGx2H60d01h27mO9rWJjoAAP1SkjuTDO7 M9e/X0YdFXrvGByzHbM3/THK4P+eZiD87gdla0YoGz9jYXRfGJukjHrlDEUZgDSl W/uekWebArChYMCRQ2en7/85Dw4WB2InFlkjZm9KFcBMEigfhJ7d2Ul8jKmtvC0W qEHqUBh3JUo5AkQYzemH5qZrFaKwJyAUeG1eTDHOMv3Wm3CEPf7sg+AY8/CHmop4 WQFRX09wp8MxtxMtEbVPR6/SDFAjfPZX98u3fCQ2Yl0gd/YYCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPitDnwvLIWWlJ6D/Xp8b6+hyf+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzYwZmYzZWYtYTc0Ni0z MGQzLTg4YzctNjNiODEyZDdmZDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI83wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+8PDU62zzI2jiws6JPi+Z5QF5jTZd2kiz+90YQr+0747oenyePNR8+ XvjFesYavEMUBP0KmEohG1EWt2rM/m537uQd6i2NtMJeqw2SH8K7QpeMaBVIe7E4 s4f5dYR5ZIaoM01rjczKLGGs9GmqwX+2drLq1WX/wXsfAx4e+rMzWzIPhsSAAIqI POCBgMzHxLjbZ4zXGdrFyrDjWXTEFcGYvjozc8owvb/77HZTsRa49GOUXEIHCRqP Hr9g4kJvuR6jUEgu0+fZ2jx3ZuSA3c05wAZOZH38hxuktPIetQcRIgTZH+ywCvrz k1Qqy4vnyaWHajeqFEmwdtimiSDXYKE= -----END CERTIFICATE-----Generated at Fri Apr 4 21:43:08 2025 by rpki-client