$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e02c303-d208-3777-8c4c-84f62a47af56.roa File: 8e02c303-d208-3777-8c4c-84f62a47af56.roa (raw, json) Hash identifier: LjSf3imD6/WN1EBC+MbxHKW5zyrGlC7R3b2rpozjqOY= Subject key identifier: 67:25:B1:97:84:70:81:03:9C:5C:7D:2A:2A:3B:1F:EB:C8:5A:C8:1F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BDB41038FA3847657B280 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e02c303-d208-3777-8c4c-84f62a47af56.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.200.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:db:41:03:8f:a3:84:76:57:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=00478da4-5f6b-4cc1-8066-5871b051455e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:34:26:8e:e7:03:73:bf:31:9b:4c:60:15:a0: f9:d6:ea:1e:51:6d:ef:e0:8b:f5:a2:0b:61:67:41: 37:c5:bd:2e:34:84:8e:e7:04:91:64:ab:84:02:83: b4:27:bf:d7:8c:90:9e:75:d2:4e:1d:77:e1:ee:c4: d9:2f:b1:b9:14:e6:52:0e:fa:ba:af:b7:f1:9a:e3: c8:41:0d:3c:b6:1a:01:9a:5d:2a:03:1c:dd:39:84: 81:e3:3b:b2:64:90:4f:05:10:20:aa:85:6f:b8:ce: 05:6b:c7:64:32:1c:0a:ed:2d:7f:04:3b:09:02:ce: 29:3c:fb:35:96:22:67:08:38:18:dd:d9:96:37:8a: 3c:05:f7:ad:6b:fe:3c:be:3a:2c:89:50:3b:a4:d9: 10:b9:bd:15:38:ba:58:94:13:7f:22:8d:a7:99:51: b7:47:ae:83:28:4c:dd:13:86:91:8d:67:12:a7:6d: bc:bb:81:e3:aa:d5:f9:08:95:22:d6:8d:10:b6:23: 8f:c4:8e:fe:8c:8a:12:9f:79:16:d5:3c:48:18:93: 39:a7:34:e7:81:1a:ae:86:03:0b:99:d8:1b:c4:3e: f2:70:b8:c0:b6:0a:b4:ee:92:87:ce:9e:9f:e2:bc: 60:c5:7f:34:3e:40:91:07:17:c8:fe:71:b2:af:38: 59:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:25:B1:97:84:70:81:03:9C:5C:7D:2A:2A:3B:1F:EB:C8:5A:C8:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8e02c303-d208-3777-8c4c-84f62a47af56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.200.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:86:85:e8:25:a4:bc:e8:d5:4a:b8:01:54:60:4b:07:9e:af: c3:c4:f4:0d:cb:56:8f:4d:03:22:9b:62:c9:cd:fe:f8:7d:4f: c4:cf:af:46:91:bf:f6:4f:43:5a:5e:7a:97:ec:09:67:f0:8d: 28:db:86:99:57:bb:0f:b3:32:23:0f:07:df:f9:b2:fe:f2:59: 98:4f:09:98:86:e8:22:bb:b8:0c:b8:61:bc:aa:f1:6a:e5:69: a3:eb:7f:5f:83:68:82:5c:8b:89:5e:68:7c:00:c2:15:26:8b: 34:1a:35:2f:a9:2a:48:1b:57:da:3d:89:b0:3a:d0:64:a8:f6: d5:5b:e8:e8:34:3c:82:5d:4e:71:19:cf:5e:78:31:3e:a0:bf: 72:1c:b4:97:ec:b8:9e:47:62:20:f3:0d:bc:e4:0e:f1:7f:37: 48:dd:18:53:d8:41:bf:80:57:f0:14:7c:39:3d:88:f1:57:c4: 18:c3:b9:42:1c:2d:3d:ce:78:e1:d7:8c:bb:85:ed:96:e0:e4: 74:e5:12:33:ba:a1:cc:4a:b2:81:c8:37:9e:4c:99:f6:dc:fd: 7b:f8:b2:74:b7:4d:41:41:89:d1:15:ac:9b:1a:dc:53:1e:7d: e7:25:b0:03:ef:27:b4:1e:2b:57:85:c6:26:95:78:2b:03:57: e4:83:a6:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS9tBA4+jhHZXsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MDA0NzhkYTQtNWY2Yi00Y2MxLTgwNjYtNTg3MWIwNTE0NTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijQmjucDc78xm0xgFaD51uoeUW3v4Iv1ogth Z0E3xb0uNISO5wSRZKuEAoO0J7/XjJCeddJOHXfh7sTZL7G5FOZSDvq6r7fxmuPI QQ08thoBml0qAxzdOYSB4zuyZJBPBRAgqoVvuM4Fa8dkMhwK7S1/BDsJAs4pPPs1 liJnCDgY3dmWN4o8Bfeta/48vjosiVA7pNkQub0VOLpYlBN/Io2nmVG3R66DKEzd E4aRjWcSp228u4HjqtX5CJUi1o0QtiOPxI7+jIoSn3kW1TxIGJM5pzTngRquhgML mdgbxD7ycLjAtgq07pKHzp6f4rxgxX80PkCRBxfI/nGyrzhZAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGclsZeEcIEDnFx9Kio7H+vIWsgfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGUwMmMzMDMtZDIwOC0z Nzc3LThjNGMtODRmNjJhNDdhZjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8iwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+GheglpLzo1Uq4AVRgSweer8PE9A3LVo9NAyKbYsnN/vh9T8TPr0aR v/ZPQ1peepfsCWfwjSjbhplXuw+zMiMPB9/5sv7yWZhPCZiG6CK7uAy4Ybyq8Wrl aaPrf1+DaIJci4leaHwAwhUmizQaNS+pKkgbV9o9ibA60GSo9tVb6Og0PIJdTnEZ z154MT6gv3IctJfsuJ5HYiDzDbzkDvF/N0jdGFPYQb+AV/AUfDk9iPFXxBjDuUIc LT3OeOHXjLuF7Zbg5HTlEjO6ocxKsoHIN55Mmfbc/Xv4snS3TUFBidEVrJsa3FMe feclsAPvJ7QeK1eFxiaVeCsDV+SDpjQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:26 2025 by rpki-client