$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f14280f-d7de-33f0-86d8-e46c8f1b23d6.roa File: 7f14280f-d7de-33f0-86d8-e46c8f1b23d6.roa (raw, json) Hash identifier: jsLDqIV0LPcXmldP+3ZIWK/pNomG0ro9GDrfungj1rU= Subject key identifier: 38:17:18:89:9E:D8:90:A1:4E:C8:5A:CF:1C:7D:69:5A:B8:D2:35:F1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C167B0A967B721E525D00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f14280f-d7de-33f0-86d8-e46c8f1b23d6.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.247.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:16:7b:0a:96:7b:72:1e:52:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=951b0ec5-60c1-43ac-80eb-707fcf0e814f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f8:05:e5:e6:96:fc:5f:16:91:1e:cf:d0:25: 56:3d:0e:e1:f0:33:6e:79:4e:e7:51:eb:2f:02:40: 56:96:7b:ed:1a:88:00:30:4c:9d:79:98:32:c5:0d: c9:cd:27:7e:1e:bc:5d:23:4a:00:6d:7c:ff:6b:b1: fd:0f:e4:ea:ef:46:93:9f:6c:5c:d7:0d:26:7b:7e: bf:f1:89:c6:0d:da:31:41:54:71:c4:d5:1f:02:8b: c7:34:2a:5d:b6:5b:b5:52:36:8b:70:5b:27:c7:5a: 9c:48:3e:2c:85:ec:4e:a6:2b:a2:ef:a3:cd:94:4a: 02:43:05:f4:52:7e:1b:bc:40:49:17:8c:29:d5:c5: 38:77:96:42:dc:56:a9:40:87:dd:8d:6f:d5:ce:bd: 88:41:2e:a3:24:b3:fd:6c:e0:3b:0c:75:0f:eb:22: ca:8b:33:22:68:8f:29:0a:c2:90:f7:41:de:8e:10: be:e0:1e:e3:01:6e:74:9c:fe:b5:f2:d4:61:45:89: 54:5c:1e:d7:77:a5:09:21:e7:1d:44:ea:02:23:a2: 9a:00:80:16:d7:98:fb:94:32:b4:61:e1:9d:ac:9c: 5d:3a:17:93:62:6b:5b:9e:d6:9e:08:51:fa:5a:38: 04:68:b4:37:60:4b:5e:3b:e4:8e:29:f6:4d:27:da: 92:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:17:18:89:9E:D8:90:A1:4E:C8:5A:CF:1C:7D:69:5A:B8:D2:35:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f14280f-d7de-33f0-86d8-e46c8f1b23d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.247.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:f0:ce:af:18:32:4c:60:7c:db:38:9d:2d:0a:7b:a5:8b:58: 1d:ee:4e:af:41:b6:d3:b9:9d:5f:71:6e:93:4d:6d:74:20:59: 6c:65:28:0e:84:d9:d2:1b:a4:f4:31:f1:6e:7f:73:a6:40:4d: 0a:d4:38:fa:6d:88:21:fa:cb:ea:bd:8c:8c:c6:8f:5e:a6:e7: a2:10:f3:7a:94:0f:1f:c5:6d:50:fc:ff:64:59:00:ae:b3:ad: f0:44:b1:5a:ca:0e:04:45:9c:25:82:1f:d0:0b:0d:aa:84:87: f5:df:37:45:64:09:74:e8:a1:75:8f:8d:0f:53:6f:77:61:0f: 18:89:c2:7c:c4:f5:c7:b6:8d:25:0c:8a:de:ca:19:40:52:49: c2:c6:06:d5:19:ad:9f:67:69:1e:d5:d2:5a:30:fd:1c:2c:58: 08:3a:d9:35:dd:b1:e3:ad:35:1b:dd:65:c2:a1:6b:95:57:70: 66:51:bc:e5:72:30:de:ab:65:31:23:6b:ca:20:e5:0f:25:46: 81:b9:29:69:6c:2c:0c:b2:ea:cf:f0:24:4a:61:d9:b3:93:9a: 07:8b:26:2e:76:49:d6:5b:c7:6a:bc:d0:59:dc:60:4c:ef:7c: 1d:47:19:04:32:30:f3:09:a6:30:3a:9b:8d:29:37:a7:2e:50: bf:4a:ed:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITBZ7CpZ7ch5SXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk OTUxYjBlYzUtNjBjMS00M2FjLTgwZWItNzA3ZmNmMGU4MTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPgF5eaW/F8WkR7P0CVWPQ7h8DNueU7nUesv AkBWlnvtGogAMEydeZgyxQ3JzSd+HrxdI0oAbXz/a7H9D+Tq70aTn2xc1w0me36/ 8YnGDdoxQVRxxNUfAovHNCpdtlu1UjaLcFsnx1qcSD4shexOpiui76PNlEoCQwX0 Un4bvEBJF4wp1cU4d5ZC3FapQIfdjW/Vzr2IQS6jJLP9bOA7DHUP6yLKizMiaI8p CsKQ90HejhC+4B7jAW50nP618tRhRYlUXB7Xd6UJIecdROoCI6KaAIAW15j7lDK0 YeGdrJxdOheTYmtbntaeCFH6WjgEaLQ3YEteO+SOKfZNJ9qSmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgXGIme2JChTshazxx9aVq40jXxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvN2YxNDI4MGYtZDdkZS0z M2YwLTg2ZDgtZTQ2YzhmMWIyM2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/cgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILwzq8YMkxgfNs4nS0Ke6WLWB3uTq9BttO5nV9xbpNNbXQgWWxlKA6E 2dIbpPQx8W5/c6ZATQrUOPptiCH6y+q9jIzGj16m56IQ83qUDx/FbVD8/2RZAK6z rfBEsVrKDgRFnCWCH9ALDaqEh/XfN0VkCXTooXWPjQ9Tb3dhDxiJwnzE9ce2jSUM it7KGUBSScLGBtUZrZ9naR7V0low/RwsWAg62TXdseOtNRvdZcKha5VXcGZRvOVy MN6rZTEja8og5Q8lRoG5KWlsLAyy6s/wJEph2bOTmgeLJi52SdZbx2q80FncYEzv fB1HGQQyMPMJpjA6m40pN6cuUL9K7cY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:07:52 2025 by rpki-client