$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d216f4c-1189-3cc4-a9be-5faa8a8c39a4.roa File: 8d216f4c-1189-3cc4-a9be-5faa8a8c39a4.roa (raw, json) Hash identifier: YrhEiaywVcG4mvgLngSEosKKXYutVR4R4EbjUJAhxa4= Subject key identifier: 2A:38:17:81:2D:84:9E:42:FD:CD:8D:C5:B1:E3:6E:FD:E9:67:79:CA Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BC9F51BA6C6FFA64CB360 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d216f4c-1189-3cc4-a9be-5faa8a8c39a4.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.202.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:c9:f5:1b:a6:c6:ff:a6:4c:b3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=a0dd9e2e-dd60-474b-9106-0a535b6338e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:49:a7:7a:09:c7:dc:5c:7d:7f:d6:fb:65:af: a9:d6:9c:2e:cf:66:c1:b3:7a:7b:c9:bb:a3:21:74: 02:a7:35:b5:5f:1e:f9:28:0f:fd:a8:5f:76:97:db: d4:27:bd:e2:0c:13:ef:78:fa:ae:73:bb:53:ab:3e: 82:2c:46:ae:6f:2c:0f:bf:49:a0:4d:4f:d9:47:6c: 9f:52:5b:0c:b6:ac:36:ce:71:99:71:4e:0f:5f:fa: c2:1a:c3:d2:db:58:8e:94:fc:af:61:1b:9c:02:cc: 2c:ba:cd:fd:cb:9a:c9:dc:10:d7:5d:f2:00:0d:95: 82:f9:ee:8a:b7:b7:6a:16:5b:5f:1d:41:2b:d0:e7: 07:ed:9a:bc:56:88:23:f1:23:1c:dc:98:6f:92:23: b3:2e:84:72:18:ca:d4:75:94:bf:91:c3:93:29:8a: d5:94:67:73:42:0b:54:79:c6:13:d1:db:1a:12:10: 96:21:82:9d:bb:9f:67:7c:d1:ec:b2:77:4b:0a:d4: 81:a9:5e:85:5f:c1:ff:6c:78:75:f8:51:b9:e9:2d: 89:e9:9b:1f:ed:31:ff:63:af:72:2a:60:8d:f1:8c: 0b:d0:fe:b0:79:bc:59:de:29:8e:3f:8c:54:df:db: 5a:06:2b:37:b5:99:c4:41:8f:ed:8a:1e:09:e5:00: bd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:38:17:81:2D:84:9E:42:FD:CD:8D:C5:B1:E3:6E:FD:E9:67:79:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d216f4c-1189-3cc4-a9be-5faa8a8c39a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.202.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:aa:a4:26:54:01:09:c5:13:0b:cd:2c:7d:48:11:f8:5d:1c: 78:b6:66:0d:bc:38:22:4d:ee:51:cb:71:13:8f:9c:30:2b:d3: 91:a0:a3:c0:ee:58:cf:1e:cb:03:04:c5:d5:e7:c3:e9:c9:57: f6:93:9c:c7:8f:08:60:52:d7:c1:d4:14:c7:86:84:a1:49:f6: 34:db:22:c9:f3:16:2d:93:dc:e0:f6:e8:f3:f2:b3:c9:eb:b1: 3a:0c:cc:9b:47:41:74:6b:77:ba:2a:33:d9:30:57:8a:07:98: cc:a9:e9:42:8b:66:5a:da:22:3a:83:46:3e:d3:0a:a3:ac:57: e1:33:01:fd:e0:a0:34:46:a7:52:b9:94:c6:f8:15:87:a4:01: 00:eb:9f:b7:fa:d6:4c:2d:c4:f9:53:c5:d3:23:76:9b:06:cd: db:ff:3a:9e:0d:bc:f4:d7:ef:de:43:b6:53:af:d0:5b:7a:81: 89:88:e7:c4:2b:2b:93:3e:7f:3e:54:06:23:0c:f3:e8:8d:17: 20:09:58:11:6a:74:22:7d:55:f4:93:65:2d:db:28:70:45:03: 4b:6f:a0:0e:7c:f2:c5:11:e3:23:b4:36:bd:99:b3:69:7d:d8: 9c:b9:1b:6c:eb:7d:c4:62:17:74:4c:2a:56:58:12:dd:f7:1a: a7:67:8b:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8n1G6bG/6ZMs2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YTBkZDllMmUtZGQ2MC00NzRiLTkxMDYtMGE1MzViNjMzOGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkmnegnH3Fx9f9b7Za+p1pwuz2bBs3p7ybuj IXQCpzW1Xx75KA/9qF92l9vUJ73iDBPvePquc7tTqz6CLEaubywPv0mgTU/ZR2yf UlsMtqw2znGZcU4PX/rCGsPS21iOlPyvYRucAswsus39y5rJ3BDXXfIADZWC+e6K t7dqFltfHUEr0OcH7Zq8Vogj8SMc3JhvkiOzLoRyGMrUdZS/kcOTKYrVlGdzQgtU ecYT0dsaEhCWIYKdu59nfNHssndLCtSBqV6FX8H/bHh1+FG56S2J6Zsf7TH/Y69y KmCN8YwL0P6webxZ3imOP4xU39taBis3tZnEQY/tih4J5QC9bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCo4F4EthJ5C/c2NxbHjbv3pZ3nKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGQyMTZmNGMtMTE4OS0z Y2M0LWE5YmUtNWZhYThhOGMzOWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8pwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyqpCZUAQnFEwvNLH1IEfhdHHi2Zg28OCJN7lHLcROPnDAr05Ggo8Du WM8eywMExdXnw+nJV/aTnMePCGBS18HUFMeGhKFJ9jTbIsnzFi2T3OD26PPys8nr sToMzJtHQXRrd7oqM9kwV4oHmMyp6UKLZlraIjqDRj7TCqOsV+EzAf3goDRGp1K5 lMb4FYekAQDrn7f61kwtxPlTxdMjdpsGzdv/Op4NvPTX795DtlOv0Ft6gYmI58Qr K5M+fz5UBiMM8+iNFyAJWBFqdCJ9VfSTZS3bKHBFA0tvoA588sUR4yO0Nr2Zs2l9 2Jy5G2zrfcRiF3RMKlZYEt33Gqdni0c= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:40 2025 by rpki-client