$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7ab63a59-d45b-3996-8291-053a848cd8e7.roa File: 7ab63a59-d45b-3996-8291-053a848cd8e7.roa (raw, json) Hash identifier: S2xTPWUgjuThbWs2iq9b52qAHCMMLgw8dYc0OsvplQY= Subject key identifier: ED:B0:B2:34:89:EC:39:F4:1D:D7:9D:96:72:26:E7:A4:ED:F4:15:EA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C1DD0D78A65D47BD85DB0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7ab63a59-d45b-3996-8291-053a848cd8e7.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.228.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:1d:d0:d7:8a:65:d4:7b:d8:5d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=54734fd8-b69a-41b7-8cd0-7a5b99c632ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:36:3e:1f:7a:3f:77:80:6e:1a:5d:bf:2b:a8: 01:96:cd:fb:6f:d0:91:53:61:c1:9c:75:63:ec:1f: 3a:22:c1:3b:f3:09:32:e0:0f:ba:fa:f3:0c:dd:f0: 8d:7e:54:cc:5e:9c:fa:f1:e8:c1:00:8a:a4:1d:0a: b6:76:1f:53:6c:3e:cb:e5:8b:c7:13:72:e1:b5:42: 89:66:d2:cd:ff:1f:47:66:2c:4f:95:53:4a:c9:4a: a0:20:f9:4c:8f:45:b6:ff:a4:76:66:80:a2:f7:ad: 79:36:32:6a:63:dc:be:96:ab:37:1b:7e:9a:77:e3: a2:e6:58:b6:da:e0:11:0e:4a:4f:e5:86:e8:62:f8: 27:f8:b8:ca:39:91:b5:b1:ae:4e:1a:b3:00:ba:19: 53:e2:ae:63:dd:d1:ff:f1:27:04:5b:52:2c:7f:f9: 8b:e8:4e:1a:03:83:f4:7f:bc:a9:b2:6d:7c:d7:79: a4:09:0f:09:76:90:0b:58:63:0e:38:5b:19:25:e5: c9:fa:a1:31:6e:4b:02:aa:da:fb:04:b3:d5:87:15: f5:c0:52:36:a5:13:de:55:cb:38:2a:b0:24:5c:93: 94:be:aa:7b:dc:2e:20:05:8e:ca:52:39:b0:f2:5f: 39:77:98:b0:3d:fc:3e:0b:33:ad:4a:35:cd:3b:52: 2c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B0:B2:34:89:EC:39:F4:1D:D7:9D:96:72:26:E7:A4:ED:F4:15:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7ab63a59-d45b-3996-8291-053a848cd8e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.228.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:07:0b:72:45:41:32:0a:6c:d1:47:63:b7:32:09:60:71:2c: 8c:92:ae:35:60:4f:0a:0c:8f:bf:74:1d:66:0c:1a:aa:1a:6a: 6f:db:b1:3f:93:4f:ec:9f:f5:50:1d:51:5b:b7:12:73:8a:37: 21:ac:45:59:0f:c9:c4:f3:df:c0:6b:72:bf:81:62:a4:6a:c5: 7b:44:3f:0c:5a:39:f5:d3:5c:64:b6:36:22:ab:43:31:fd:06: 6d:0d:07:8e:38:ae:9c:22:74:1d:d1:6a:de:1f:38:bb:8a:ac: 3a:77:d3:7a:6e:68:56:eb:d1:84:d9:fa:71:ac:4d:d0:08:ff: 3a:f5:3e:78:61:c6:d9:7b:48:3c:e7:30:fa:3b:90:bc:42:af: 4d:78:8d:dc:34:ab:8a:16:a2:e8:2a:49:4a:83:c5:23:6e:d0: 89:15:2b:fd:2f:08:08:50:6f:ed:bc:2b:d7:36:1a:82:95:97: 1f:a2:46:41:a3:c3:0f:b4:01:59:29:c8:70:2e:0e:90:7c:90: 6e:73:4f:a6:0c:5c:75:43:48:0a:a9:48:74:50:00:0c:da:3f: a2:d0:65:a5:d6:23:a1:66:15:74:b1:ae:f5:56:52:e1:ed:ae: 78:5f:c4:07:85:3e:34:6a:fb:60:17:e6:48:d5:8d:bc:e5:df: 0d:69:f4:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITB3Q14pl1HvYXbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NTQ3MzRmZDgtYjY5YS00MWI3LThjZDAtN2E1Yjk5YzYzMmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjY+H3o/d4BuGl2/K6gBls37b9CRU2HBnHVj 7B86IsE78wky4A+6+vMM3fCNflTMXpz68ejBAIqkHQq2dh9TbD7L5YvHE3LhtUKJ ZtLN/x9HZixPlVNKyUqgIPlMj0W2/6R2ZoCi9615NjJqY9y+lqs3G36ad+Oi5li2 2uARDkpP5YboYvgn+LjKOZG1sa5OGrMAuhlT4q5j3dH/8ScEW1Isf/mL6E4aA4P0 f7ypsm1813mkCQ8JdpALWGMOOFsZJeXJ+qExbksCqtr7BLPVhxX1wFI2pRPeVcs4 KrAkXJOUvqp73C4gBY7KUjmw8l85d5iwPfw+CzOtSjXNO1Is0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2wsjSJ7Dn0HdedlnIm56Tt9BXqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2FiNjNhNTktZDQ1Yi0z OTk2LTgyOTEtMDUzYTg0OGNkOGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+SQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkHC3JFQTIKbNFHY7cyCWBxLIySrjVgTwoMj790HWYMGqoaam/bsT+T T+yf9VAdUVu3EnOKNyGsRVkPycTz38Brcr+BYqRqxXtEPwxaOfXTXGS2NiKrQzH9 Bm0NB444rpwidB3Rat4fOLuKrDp303puaFbr0YTZ+nGsTdAI/zr1Pnhhxtl7SDzn MPo7kLxCr014jdw0q4oWougqSUqDxSNu0IkVK/0vCAhQb+28K9c2GoKVlx+iRkGj ww+0AVkpyHAuDpB8kG5zT6YMXHVDSAqpSHRQAAzaP6LQZaXWI6FmFXSxrvVWUuHt rnhfxAeFPjRq+2AX5kjVjbzl3w1p9Gc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:09 2025 by rpki-client