$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86a4b374-0395-3152-b2fb-5d7b00ad2865.roa File: 86a4b374-0395-3152-b2fb-5d7b00ad2865.roa (raw, json) Hash identifier: +aUOFSAlCt+AbKWZi0ABbQUTmq1lVkWKBbzygsAZEjM= Subject key identifier: 92:F4:FE:D7:97:EF:CE:8C:40:45:6E:FF:69:7A:63:00:C5:0F:88:B5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C0A7244E0ED91878DA500 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86a4b374-0395-3152-b2fb-5d7b00ad2865.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.225.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:0a:72:44:e0:ed:91:87:8d:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=b78b7109-01ec-4ab4-a27a-dc621f9591c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:86:fd:e1:ae:83:8e:b3:55:fe:4d:b8:2f:d3: d7:7c:85:c6:47:f7:13:2c:2a:cb:1e:f0:08:46:fd: d7:38:87:2b:b7:f8:d8:10:cd:0d:6f:5a:fb:7d:26: ea:61:d9:88:6f:1e:32:4d:a4:ec:34:0b:89:fd:65: 32:11:fa:ea:f0:4a:85:3c:cf:f8:80:61:e7:74:12: 8a:a6:49:4e:5f:ec:32:a4:fb:26:06:84:92:16:8a: ce:b3:31:4e:3f:5a:9d:90:c2:d5:21:d2:3a:2d:94: 9f:ce:d5:11:0e:7f:17:e1:32:41:e9:bc:c0:71:5d: 96:a2:a4:7a:0f:c1:10:4f:fd:03:62:35:05:09:ba: 65:f2:1e:44:df:7f:b0:35:ac:a7:ee:2a:ff:c3:d7: 4d:f7:70:cd:60:7d:1e:52:2d:2f:02:22:8e:e6:05: 4f:70:6e:93:bd:70:9e:d5:ba:0e:4b:29:3f:e7:f2: 8d:f6:e8:96:bc:84:8e:91:ec:43:d6:87:f3:b0:28: 34:fe:c9:d9:ad:a2:6b:44:c0:50:b0:68:e1:33:f0: 91:6d:b0:a2:a8:fd:59:55:2c:e0:23:7d:a1:5f:55: a6:ef:4d:d0:6d:cc:95:86:b7:bf:77:7a:90:ab:9b: 4b:94:7a:ec:a3:1a:f0:6b:41:51:cc:56:f0:05:58: 6d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F4:FE:D7:97:EF:CE:8C:40:45:6E:FF:69:7A:63:00:C5:0F:88:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/86a4b374-0395-3152-b2fb-5d7b00ad2865.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.225.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:f9:6d:8f:44:3e:08:39:57:59:0a:dc:dd:25:68:e6:06:a5: fd:b8:49:c2:d0:a4:c0:ca:5b:56:e4:8b:28:8c:5f:0b:43:57: 83:77:44:67:d7:8b:68:d6:66:14:a6:38:2d:50:82:38:f9:04: 8d:00:df:aa:f5:5f:5c:ba:ec:ff:53:19:41:e4:a6:26:bf:2d: 98:b0:6d:7f:1c:3a:00:a2:32:0b:de:62:33:73:05:3b:40:5b: 27:30:ad:1d:cb:f0:2f:1f:48:12:9a:76:68:e0:f2:f4:2c:4b: 21:9c:9a:0f:06:cd:40:41:f8:a3:00:50:45:dc:40:2a:cc:7a: e6:31:e6:28:ea:88:62:f1:6d:f3:71:03:65:e7:a5:12:e0:59: b8:68:b6:0e:b1:90:b0:36:9c:95:0c:68:88:ff:19:f9:57:78: 65:bd:d0:67:0d:7a:d5:c2:af:15:df:45:12:f4:ff:b8:2c:cb: 93:d3:c2:75:2f:ce:7a:80:a7:c7:c4:6e:16:22:8a:8a:e6:a9: b8:ed:3e:22:c6:94:57:0b:9e:a2:ca:ab:31:9c:50:a5:d6:46: 3a:71:15:7f:78:2f:c6:83:61:a4:95:37:a1:a1:e7:ef:bf:67: b9:e8:df:2d:a8:d1:d9:54:16:64:c4:b4:e7:10:db:7b:2d:c5: 9b:ec:75:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITApyRODtkYeNpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk Yjc4YjcxMDktMDFlYy00YWI0LWEyN2EtZGM2MjFmOTU5MWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYb94a6DjrNV/k24L9PXfIXGR/cTLCrLHvAI Rv3XOIcrt/jYEM0Nb1r7fSbqYdmIbx4yTaTsNAuJ/WUyEfrq8EqFPM/4gGHndBKK pklOX+wypPsmBoSSForOszFOP1qdkMLVIdI6LZSfztURDn8X4TJB6bzAcV2WoqR6 D8EQT/0DYjUFCbpl8h5E33+wNayn7ir/w9dN93DNYH0eUi0vAiKO5gVPcG6TvXCe 1boOSyk/5/KN9uiWvISOkexD1ofzsCg0/snZraJrRMBQsGjhM/CRbbCiqP1ZVSzg I32hX1Wm703QbcyVhre/d3qQq5tLlHrsoxrwa0FRzFbwBVht1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJL0/teX786MQEVu/2l6YwDFD4i1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODZhNGIzNzQtMDM5NS0z MTUyLWIyZmItNWQ3YjAwYWQyODY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+EAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADz5bY9EPgg5V1kK3N0laOYGpf24ScLQpMDKW1bkiyiMXwtDV4N3RGfX i2jWZhSmOC1Qgjj5BI0A36r1X1y67P9TGUHkpia/LZiwbX8cOgCiMgveYjNzBTtA WycwrR3L8C8fSBKadmjg8vQsSyGcmg8GzUBB+KMAUEXcQCrMeuYx5ijqiGLxbfNx A2XnpRLgWbhotg6xkLA2nJUMaIj/GflXeGW90GcNetXCrxXfRRL0/7gsy5PTwnUv znqAp8fEbhYiiormqbjtPiLGlFcLnqLKqzGcUKXWRjpxFX94L8aDYaSVN6Gh5++/ Z7no3y2o0dlUFmTEtOcQ23stxZvsdRk= -----END CERTIFICATE-----Generated at Fri Mar 14 10:13:17 2025 by rpki-client