$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7c0bd5b0-df61-3fa4-a4c8-e8520ccc2196.roa File: 7c0bd5b0-df61-3fa4-a4c8-e8520ccc2196.roa (raw, json) Hash identifier: jdk3dFJHKIEnEA6E0WBBgS6WvZOGhRPf3BclrmG2zS8= Subject key identifier: 94:15:DD:3E:4B:BA:CA:10:84:57:E0:53:10:43:B9:A5:E9:F4:94:D2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BA8A20D0A25C858B41F68 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7c0bd5b0-df61-3fa4-a4c8-e8520ccc2196.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.222.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:a8:a2:0d:0a:25:c8:58:b4:1f:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=7a47d21f-de07-49e9-861a-873dc110509d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fb:28:b2:89:3e:07:ec:2f:ae:a4:5b:15:5d: 3b:62:0e:99:c0:c8:72:3c:a3:a2:e6:14:ba:dd:af: 79:71:e4:b3:cb:a7:9a:f5:21:ef:af:91:84:e6:3c: 89:58:2c:dd:62:01:6d:bc:76:d9:97:88:5b:e0:50: 59:84:66:97:46:3c:4b:0d:62:f3:86:a2:12:d1:68: d0:d8:29:8c:af:9d:4b:ed:9e:f1:2d:ca:e2:b0:3b: c8:61:90:77:68:04:87:79:fc:cb:54:85:b5:22:8f: 4b:11:ee:7a:ad:5c:07:5a:1a:a8:ad:1c:29:6a:11: bc:67:b8:16:64:30:a6:e6:c0:b7:3c:c3:72:3d:65: 15:1c:e3:c5:e5:72:ea:77:ab:65:20:62:8e:5a:61: c8:4c:14:29:85:32:b9:8d:51:07:f4:d5:dc:fe:fd: a8:86:04:39:8f:40:7d:67:c3:b5:d4:3b:8b:18:1d: 22:ae:48:47:fc:b3:05:ad:0a:7f:03:9d:52:28:0d: 9c:b9:9a:62:bd:76:e3:e0:a3:97:0b:83:78:a0:77: 86:2c:21:20:58:f3:9f:19:44:30:f7:fd:b3:91:da: ba:2f:25:a3:9e:e9:20:d3:bf:ab:b6:78:99:ef:7a: 6f:f8:db:87:59:87:94:be:f8:99:ba:f2:01:c4:58: 97:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:15:DD:3E:4B:BA:CA:10:84:57:E0:53:10:43:B9:A5:E9:F4:94:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7c0bd5b0-df61-3fa4-a4c8-e8520ccc2196.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.222.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:90:5e:70:82:bf:5f:9f:85:fa:12:e8:cf:67:9a:ef:37:f8: 2a:f9:06:08:8e:34:d5:aa:52:4e:a8:b2:44:5c:5d:5e:7f:76: fc:cd:a1:ae:74:e8:90:72:3b:eb:82:48:aa:79:72:52:76:d4: 19:0b:2b:4d:d0:1d:b9:d6:2a:5d:49:28:93:e8:28:79:68:a6: 5a:9d:5e:20:78:7d:b2:1c:a9:a4:b1:33:92:e4:b6:d7:8a:83: 16:5d:04:d7:fd:40:62:b5:aa:9a:95:23:9c:49:99:3c:19:79: 0d:cc:ca:ea:06:64:bc:f4:dc:28:db:15:5b:ae:9a:13:28:fe: 59:b4:a6:6c:48:9a:51:07:e6:ff:d2:99:25:9d:4a:de:4a:fe: 15:82:21:06:34:08:b1:08:b2:19:ed:8c:27:7d:2d:bd:92:cd: 89:db:98:87:3d:41:ff:90:fb:0b:c6:0a:6d:64:5f:dd:a5:f5: ba:a0:24:6f:7b:41:71:81:60:ca:2f:86:d1:48:66:1f:d7:3d: 2c:de:d2:85:73:c8:19:a5:e7:1a:67:65:5b:9c:45:c1:4f:9c: 10:a4:09:38:60:9d:ff:8f:5c:b3:c7:39:dd:4d:fa:ba:27:58: a5:2c:15:5e:10:60:a9:4d:3f:89:ea:b6:5f:8e:2f:48:14:81: 02:c5:e0:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS6iiDQolyFi0H2gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk N2E0N2QyMWYtZGUwNy00OWU5LTg2MWEtODczZGMxMTA1MDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/sosok+B+wvrqRbFV07Yg6ZwMhyPKOi5hS6 3a95ceSzy6ea9SHvr5GE5jyJWCzdYgFtvHbZl4hb4FBZhGaXRjxLDWLzhqIS0WjQ 2CmMr51L7Z7xLcrisDvIYZB3aASHefzLVIW1Io9LEe56rVwHWhqorRwpahG8Z7gW ZDCm5sC3PMNyPWUVHOPF5XLqd6tlIGKOWmHITBQphTK5jVEH9NXc/v2ohgQ5j0B9 Z8O11DuLGB0irkhH/LMFrQp/A51SKA2cuZpivXbj4KOXC4N4oHeGLCEgWPOfGUQw 9/2zkdq6LyWjnukg07+rtniZ73pv+NuHWYeUvviZuvIBxFiXHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQV3T5LusoQhFfgUxBDuaXp9JTSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2MwYmQ1YjAtZGY2MS0z ZmE0LWE0YzgtZTg1MjBjY2MyMTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI96QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSQXnCCv1+fhfoS6M9nmu83+Cr5BgiONNWqUk6oskRcXV5/dvzNoa50 6JByO+uCSKp5clJ21BkLK03QHbnWKl1JKJPoKHloplqdXiB4fbIcqaSxM5LktteK gxZdBNf9QGK1qpqVI5xJmTwZeQ3MyuoGZLz03CjbFVuumhMo/lm0pmxImlEH5v/S mSWdSt5K/hWCIQY0CLEIshntjCd9Lb2SzYnbmIc9Qf+Q+wvGCm1kX92l9bqgJG97 QXGBYMovhtFIZh/XPSze0oVzyBml5xpnZVucRcFPnBCkCThgnf+PXLPHOd1N+ron WKUsFV4QYKlNP4nqtl+OL0gUgQLF4Kw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:59 2025 by rpki-client