$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/77de961e-a0fa-36d2-865f-5dffdfc4e152.roa File: 77de961e-a0fa-36d2-865f-5dffdfc4e152.roa (raw, json) Hash identifier: 3Tchh2TMkFGcvKLAHvCM/d0Gp4YsW/xkmuVwR3FPs+8= Subject key identifier: AE:F6:E0:D8:25:B6:74:21:7F:64:58:E7:E0:2B:E7:B4:D6:98:F8:77 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BE8A87DD45BF7C1753A40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/77de961e-a0fa-36d2-865f-5dffdfc4e152.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.235.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:e8:a8:7d:d4:5b:f7:c1:75:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=f8b98d48-8cc2-4150-a9c4-430f565f982c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:65:33:4f:1d:24:dc:73:ec:15:af:40:68:63: 49:44:78:01:74:b2:a0:cd:72:19:f8:85:16:8a:8c: 70:89:d2:72:ce:79:42:94:73:b7:e7:8b:7b:1b:21: f1:39:9f:9b:d6:33:28:a0:94:ee:03:6f:4a:96:5c: dd:74:ff:be:cb:8a:9a:82:97:80:b2:9a:3c:1d:de: dc:06:41:1b:75:51:0e:6b:cc:2f:1c:0c:74:16:dd: f4:8e:ad:2a:16:94:7a:65:71:e7:04:0b:45:1f:e3: b6:9b:20:9f:75:f7:e4:7b:24:76:01:52:74:1b:d1: 3e:bb:5e:cb:31:b2:54:82:e9:6d:8d:ac:64:2b:1c: 99:1f:96:82:db:93:7f:2c:d4:95:37:90:e6:73:4e: a7:50:d5:aa:d4:ce:ba:00:cf:da:60:d2:13:68:31: bc:35:ed:08:d4:81:b2:d8:53:d5:28:af:da:4f:b7: b6:a0:dc:07:03:c2:e4:a6:fe:89:9b:3c:ca:35:91: 3f:36:db:06:a4:c9:94:b0:11:b0:5e:ce:10:17:42: fd:03:6c:c7:82:86:8b:ab:84:da:9d:98:aa:ee:30: 13:e7:91:f1:00:36:a4:32:3b:ca:ed:d7:96:03:64: f8:86:43:16:6c:a6:48:8e:f7:ac:14:f4:fc:81:f6: 1b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F6:E0:D8:25:B6:74:21:7F:64:58:E7:E0:2B:E7:B4:D6:98:F8:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/77de961e-a0fa-36d2-865f-5dffdfc4e152.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.235.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:67:99:f4:07:8a:f5:4e:03:8b:3f:4f:9a:96:90:c7:fc:7c: 7c:e3:63:25:d0:b2:79:17:8f:51:39:37:ed:df:51:75:c9:0c: 42:d2:6b:83:a5:b3:a6:b3:05:b6:1c:4d:25:5f:b7:2f:fd:6a: a7:60:c6:cd:b4:c5:74:8e:c6:58:85:3b:c9:29:0d:58:2e:2b: 17:8a:27:74:d3:a6:62:3e:78:9f:a5:98:07:15:93:8b:6a:7e: 4d:4d:84:82:d2:1e:5c:97:9f:24:d0:08:3e:c2:1c:8d:69:60: dd:8f:9a:a8:38:fa:46:36:18:d0:e0:c0:34:01:09:2e:56:c7: 17:01:ee:a9:12:0a:49:29:fc:5f:1b:85:f2:9d:ce:db:e2:4f: f6:17:67:30:f5:55:56:93:c6:07:e3:d7:33:17:ab:29:20:cd: 52:03:cc:7e:ce:d4:e4:7c:5b:99:ed:60:ce:e6:2f:93:38:cb: 20:82:4b:07:eb:fa:30:70:f0:73:92:f5:15:72:e2:e5:79:b6: 90:59:96:e8:7b:e6:d0:13:d3:b7:44:d9:38:24:c9:f9:72:be: 9d:b1:5f:68:8e:85:0f:59:6f:cc:f9:ae:b2:14:c5:32:e9:a5: a1:d7:2b:d9:23:97:7b:8b:a9:04:18:24:ed:c6:94:12:72:d2: 9a:00:96:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+iofdRb98F1OkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZjhiOThkNDgtOGNjMi00MTUwLWE5YzQtNDMwZjU2NWY5ODJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGUzTx0k3HPsFa9AaGNJRHgBdLKgzXIZ+IUW ioxwidJyznlClHO354t7GyHxOZ+b1jMooJTuA29KllzddP++y4qagpeAspo8Hd7c BkEbdVEOa8wvHAx0Ft30jq0qFpR6ZXHnBAtFH+O2myCfdffkeyR2AVJ0G9E+u17L MbJUgultjaxkKxyZH5aC25N/LNSVN5Dmc06nUNWq1M66AM/aYNITaDG8Ne0I1IGy 2FPVKK/aT7e2oNwHA8Lkpv6JmzzKNZE/NtsGpMmUsBGwXs4QF0L9A2zHgoaLq4Ta nZiq7jAT55HxADakMjvK7deWA2T4hkMWbKZIjvesFPT8gfYbMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK724NgltnQhf2RY5+Ar57TWmPh3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNzdkZTk2MWUtYTBmYS0z NmQyLTg2NWYtNWRmZmRmYzRlMTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI+vIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtnmfQHivVOA4s/T5qWkMf8fHzjYyXQsnkXj1E5N+3fUXXJDELSa4Ol s6azBbYcTSVfty/9aqdgxs20xXSOxliFO8kpDVguKxeKJ3TTpmI+eJ+lmAcVk4tq fk1NhILSHlyXnyTQCD7CHI1pYN2Pmqg4+kY2GNDgwDQBCS5WxxcB7qkSCkkp/F8b hfKdztviT/YXZzD1VVaTxgfj1zMXqykgzVIDzH7O1OR8W5ntYM7mL5M4yyCCSwfr +jBw8HOS9RVy4uV5tpBZluh75tAT07dE2Tgkyflyvp2xX2iOhQ9Zb8z5rrIUxTLp paHXK9kjl3uLqQQYJO3GlBJy0poAlmA= -----END CERTIFICATE-----Generated at Fri Apr 4 21:40:37 2025 by rpki-client