$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8595fa21-b13a-307a-bf75-b32e5f233baa.roa File: 8595fa21-b13a-307a-bf75-b32e5f233baa.roa (raw, json) Hash identifier: B2xo30PIytnW3PoHuBCnxe4rBqlXX76A+0TkeNQ/g1Q= Subject key identifier: 8D:4E:5B:45:F7:B0:9E:09:9B:57:6B:78:2D:FF:4A:F5:6B:FF:BD:F1 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BCFE6457FA8C1EFDA9780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8595fa21-b13a-307a-bf75-b32e5f233baa.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.196.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:cf:e6:45:7f:a8:c1:ef:da:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=a7b2b237-1d61-464e-9bba-70d7ce4f5236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:41:44:da:8b:ba:37:10:9b:ac:25:c2:cf:81: ce:b8:ee:5d:1b:72:0d:04:9b:d4:46:d6:61:59:75: 22:44:a2:24:dd:60:50:cd:11:67:62:e6:52:51:26: 49:95:29:75:a5:ea:b4:ba:d3:97:ee:e5:c7:64:c7: c0:27:ba:a7:4d:26:20:2c:49:da:6f:71:3d:a0:c1: 77:01:af:82:37:09:de:f7:fc:d8:ca:4f:dc:23:fe: 13:2f:d9:a0:53:e8:3a:dc:68:5c:39:6e:e1:d4:3f: ce:6b:02:03:54:4e:6a:a6:06:af:a1:a2:ab:e5:cf: 96:bc:1b:68:4b:e0:89:1a:77:d9:ac:53:ee:d7:4a: ac:74:12:4b:e9:01:9d:fa:95:a6:bb:90:1c:e1:c0: f3:a8:fe:ec:ee:65:fa:79:2b:37:cc:8b:7a:62:ee: 5f:55:f6:5d:32:85:88:2f:8b:b2:3a:e2:0d:1d:1f: ef:8c:a4:01:33:83:82:36:f2:ee:40:8b:cb:1b:31: 96:4c:88:2d:ba:a2:0b:e5:4b:c7:0a:53:df:24:97: d7:cd:05:85:32:65:f0:63:4e:28:e2:f6:33:b8:fc: 57:f7:84:14:9e:82:fb:43:35:8b:a5:dc:a6:40:91: 91:be:1a:b6:47:db:db:c7:32:9b:58:52:fd:72:cb: 53:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4E:5B:45:F7:B0:9E:09:9B:57:6B:78:2D:FF:4A:F5:6B:FF:BD:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8595fa21-b13a-307a-bf75-b32e5f233baa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.196.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:92:52:cc:48:05:b2:50:78:6c:00:f3:b9:34:7a:77:b4:3c: 0e:a1:8c:92:d6:b2:09:38:55:d7:59:c5:41:48:31:86:eb:5f: 72:d7:99:bb:15:e0:f4:5f:f9:18:9e:2d:b5:d3:51:46:0b:6b: 75:02:a1:f1:e4:f1:fa:91:ff:52:0e:63:71:44:38:e5:cc:19: de:5d:7a:36:a7:58:06:eb:e7:91:5d:e1:d5:0b:1a:61:3f:e9: 62:8e:a7:cd:8b:e9:4d:f8:a8:d2:b3:af:73:38:5b:4e:2c:50: 78:70:e8:19:cf:18:0e:49:eb:98:c4:fb:0c:c2:c4:19:7f:2f: 6a:c8:5e:9c:ad:33:99:b6:1b:a3:af:f5:2d:d7:2c:cd:b9:21: a8:48:ab:d8:e9:73:c3:05:09:fb:60:f6:de:01:01:12:01:66: 0f:9d:3d:03:55:fd:eb:0b:e8:90:d0:8a:12:3b:b9:bc:6d:09: d4:13:7a:fa:e9:27:a4:38:44:e3:9d:8e:b1:7a:4b:1a:e7:ba: cd:b0:a5:94:e6:59:91:e1:4a:6e:2a:9a:2b:fe:3b:d9:56:2e: 4d:b4:2d:3a:3d:5c:af:b8:7b:9d:4c:aa:af:29:8b:34:8f:da: 38:74:91:a7:f5:51:86:a1:ec:44:4d:80:ac:ae:41:33:c5:fc: 31:8e:ec:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8/mRX+owe/al4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YTdiMmIyMzctMWQ2MS00NjRlLTliYmEtNzBkN2NlNGY1MjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EFE2ou6NxCbrCXCz4HOuO5dG3INBJvURtZh WXUiRKIk3WBQzRFnYuZSUSZJlSl1peq0utOX7uXHZMfAJ7qnTSYgLEnab3E9oMF3 Aa+CNwne9/zYyk/cI/4TL9mgU+g63GhcOW7h1D/OawIDVE5qpgavoaKr5c+WvBto S+CJGnfZrFPu10qsdBJL6QGd+pWmu5Ac4cDzqP7s7mX6eSs3zIt6Yu5fVfZdMoWI L4uyOuINHR/vjKQBM4OCNvLuQIvLGzGWTIgtuqIL5UvHClPfJJfXzQWFMmXwY04o 4vYzuPxX94QUnoL7QzWLpdymQJGRvhq2R9vbxzKbWFL9cstT1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1OW0X3sJ4Jm1dreC3/SvVr/73xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODU5NWZhMjEtYjEzYS0z MDdhLWJmNzUtYjMyZTVmMjMzYmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8SQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOSUsxIBbJQeGwA87k0ene0PA6hjJLWsgk4VddZxUFIMYbrX3LXmbsV 4PRf+RieLbXTUUYLa3UCofHk8fqR/1IOY3FEOOXMGd5dejanWAbr55Fd4dULGmE/ 6WKOp82L6U34qNKzr3M4W04sUHhw6BnPGA5J65jE+wzCxBl/L2rIXpytM5m2G6Ov 9S3XLM25IahIq9jpc8MFCftg9t4BARIBZg+dPQNV/esL6JDQihI7ubxtCdQTevrp J6Q4ROOdjrF6Sxrnus2wpZTmWZHhSm4qmiv+O9lWLk20LTo9XK+4e51Mqq8pizSP 2jh0kaf1UYah7ERNgKyuQTPF/DGO7Ic= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:11 2025 by rpki-client