$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8dbdf946-971e-3770-901b-b9c1ec23e042.roa File: 8dbdf946-971e-3770-901b-b9c1ec23e042.roa (raw, json) Hash identifier: 7VuOfFrNGByROqMiyXmyqcY4sQzbDCmiHuCzY0uBP3Q= Subject key identifier: 7C:A9:99:F4:9F:12:C8:E5:57:AF:7E:2E:8A:4E:CE:21:9C:EC:20:59 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C0C765F22D572CA5A5E80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8dbdf946-971e-3770-901b-b9c1ec23e042.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.200.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:0c:76:5f:22:d5:72:ca:5a:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=1a799184-0da6-4471-b61a-126d2f059b28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5a:37:96:e8:b3:ac:13:94:71:8c:9b:bf:9a: b7:a6:1e:24:8a:ea:72:d1:cf:49:6e:d3:c5:21:78: a7:f6:da:c0:12:3c:3a:34:e3:8f:c0:84:7f:85:98: a2:ae:c7:ee:51:ab:23:38:e8:52:64:e9:8c:36:f4: 21:a2:86:31:54:bb:63:b5:46:b3:d4:ad:5a:1b:49: f0:29:33:02:7b:15:a1:c8:8c:55:f0:4c:6a:70:e2: 07:93:6a:65:94:f5:9c:10:b6:97:62:bd:26:6c:9f: 97:2a:f4:4c:7c:3c:ec:bd:77:26:d2:91:e5:8e:ad: 28:67:16:1a:ae:9b:12:91:1d:5a:c5:09:d5:79:aa: a8:62:d8:09:d7:70:49:d6:fd:6a:d0:d2:22:16:a9: 48:7b:27:fe:b8:b4:6a:17:e7:0e:dc:83:2c:a2:13: 53:58:9e:1d:dc:21:1e:76:51:a3:79:82:c3:56:0b: 0d:61:b3:ac:b3:a9:fd:7d:42:3a:e9:59:51:3b:a3: c9:0e:47:fe:0c:bf:94:71:5c:9c:65:df:db:f4:e8: 46:f3:bf:0c:c8:83:27:16:16:ee:d0:34:8f:66:a9: 27:85:ee:b2:85:ce:19:7d:30:fc:b3:3f:6f:21:a7: 8e:14:f0:97:c6:47:1b:4f:8d:cd:5c:9f:17:83:57: ac:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A9:99:F4:9F:12:C8:E5:57:AF:7E:2E:8A:4E:CE:21:9C:EC:20:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8dbdf946-971e-3770-901b-b9c1ec23e042.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.200.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:d3:a0:5f:e8:95:1d:8b:c6:ad:9e:3c:d9:1d:17:b2:66:1f: 47:69:98:18:94:1b:ed:cf:d1:3c:30:07:e9:27:e3:1c:af:75: 76:a3:31:ff:6c:df:af:a2:30:1a:11:ea:14:2a:b3:ac:b0:eb: 5d:e2:3c:65:b2:8e:51:1b:89:c4:36:5b:bb:ad:91:6e:cb:19: bb:4d:23:a0:fc:03:ea:b8:42:1e:57:3b:0e:96:35:ab:87:52: 56:49:37:b4:b4:41:bb:7d:3f:9b:0f:6c:d4:99:24:56:9c:46: a2:12:18:a1:e5:52:e3:e7:cc:1d:cc:18:3a:59:03:9b:0b:c9: 31:87:de:c5:78:c7:ae:76:08:7a:2d:6d:d4:14:0a:56:ff:c3: 6a:97:85:cd:53:2e:52:7d:dd:23:e3:55:14:f4:d0:2e:e2:d8: ca:08:36:5c:1e:cf:fe:95:34:8b:4e:6f:4b:94:33:26:f9:f0: 42:d7:f6:e5:2e:f3:10:be:23:a3:af:3f:8d:8e:6c:6c:9c:0a: 50:99:78:0b:a0:e2:9e:b2:b7:b8:d1:e7:62:71:fc:1d:80:a5: c4:cd:88:3c:2c:40:45:83:00:45:49:5d:cb:1d:42:1f:0d:2e: 5b:2f:ce:62:a2:ee:7c:73:b3:7b:44:55:2c:22:8a:f9:46:32: 3e:9e:1c:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITAx2XyLVcspaXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MWE3OTkxODQtMGRhNi00NDcxLWI2MWEtMTI2ZDJmMDU5YjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1o3luizrBOUcYybv5q3ph4kiupy0c9JbtPF IXin9trAEjw6NOOPwIR/hZiirsfuUasjOOhSZOmMNvQhooYxVLtjtUaz1K1aG0nw KTMCexWhyIxV8ExqcOIHk2pllPWcELaXYr0mbJ+XKvRMfDzsvXcm0pHljq0oZxYa rpsSkR1axQnVeaqoYtgJ13BJ1v1q0NIiFqlIeyf+uLRqF+cO3IMsohNTWJ4d3CEe dlGjeYLDVgsNYbOss6n9fUI66VlRO6PJDkf+DL+UcVycZd/b9OhG878MyIMnFhbu 0DSPZqknhe6yhc4ZfTD8sz9vIaeOFPCXxkcbT43NXJ8Xg1esQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHypmfSfEsjlV69+LopOziGc7CBZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGRiZGY5NDYtOTcxZS0z NzcwLTkwMWItYjljMWVjMjNlMDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8jQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLToF/olR2Lxq2ePNkdF7JmH0dpmBiUG+3P0TwwB+kn4xyvdXajMf9s 36+iMBoR6hQqs6yw613iPGWyjlEbicQ2W7utkW7LGbtNI6D8A+q4Qh5XOw6WNauH UlZJN7S0Qbt9P5sPbNSZJFacRqISGKHlUuPnzB3MGDpZA5sLyTGH3sV4x652CHot bdQUClb/w2qXhc1TLlJ93SPjVRT00C7i2MoINlwez/6VNItOb0uUMyb58ELX9uUu 8xC+I6OvP42ObGycClCZeAug4p6yt7jR52Jx/B2ApcTNiDwsQEWDAEVJXcsdQh8N LlsvzmKi7nxzs3tEVSwiivlGMj6eHOA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:57 2025 by rpki-client