$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9009a810-4bf9-3478-b619-a3def6d495e3.roa File: 9009a810-4bf9-3478-b619-a3def6d495e3.roa (raw, json) Hash identifier: FpwA59MMCxHQidvnBxaFKX9ZKUtgteG4mGa9TgyxSVk= Subject key identifier: B0:C5:CB:E8:E6:76:BD:E0:94:2D:18:19:DE:91:49:F8:17:A7:04:6C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BBDF02CB4A81DD90DD000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9009a810-4bf9-3478-b619-a3def6d495e3.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.189.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:bd:f0:2c:b4:a8:1d:d9:0d:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=fb68bdb8-d316-4c18-a14b-d3575ab2386c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:86:60:bd:c7:fd:5c:20:d4:12:02:c5:5d:21: 6e:64:17:d9:b7:75:fe:61:25:2f:a6:65:d7:70:de: b8:9a:b2:99:04:af:e3:ff:4e:1e:00:8c:d0:04:3a: c8:06:c5:07:5f:29:5e:24:20:a1:3c:d3:45:e6:f0: 21:05:d0:d7:5e:d3:d8:6c:d0:49:df:4a:15:9d:da: 08:90:84:57:fe:b1:d4:9f:5c:83:6f:a8:79:68:34: 69:ce:2f:2c:95:0f:c6:fa:81:ee:61:93:01:4a:7f: f9:db:6e:5a:b2:91:1d:20:59:19:50:fc:d9:da:e2: 2e:11:9b:ca:64:ba:19:96:e5:f7:cd:1f:96:2d:48: e7:8e:b8:87:7b:9e:bb:35:62:d0:f2:3d:5b:0b:ba: 80:68:57:b8:34:bb:0a:aa:4c:fe:88:43:e1:1d:4b: 4c:c7:ca:3f:81:d7:38:7e:ca:31:f1:35:e6:d6:60: 28:c9:48:0c:ca:5e:d8:d0:87:99:3e:50:cb:f7:02: 31:96:86:06:2f:74:27:a2:60:51:40:0c:b9:79:cc: 80:7c:fc:ab:df:6f:b6:2b:fb:92:72:27:fb:87:e0: ea:84:18:a6:4c:7c:d7:10:29:f0:1d:8f:c3:57:57: 70:68:77:cb:24:ab:c0:40:fa:ea:18:fb:f8:7f:18: 5b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C5:CB:E8:E6:76:BD:E0:94:2D:18:19:DE:91:49:F8:17:A7:04:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9009a810-4bf9-3478-b619-a3def6d495e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.189.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:0f:a0:57:87:f8:70:13:1b:21:c4:ba:28:a7:dc:ee:52:51: 7d:65:d1:fd:43:21:dd:6f:38:91:ba:1a:af:aa:42:02:bc:50: 3c:d7:8a:eb:fb:a3:ac:02:84:05:85:16:d6:b2:1d:ea:3f:d3: c4:83:0e:61:02:90:1e:9d:11:78:ba:9b:bb:1e:e0:39:de:67: 90:9c:23:07:66:e7:86:2a:e0:7c:7c:30:8f:6d:c3:14:e5:df: 9b:de:80:77:a1:82:70:fe:ea:31:86:5b:02:fc:92:fc:ca:60: 93:6e:57:f2:80:05:f3:92:30:78:58:42:23:d6:b6:7f:52:3b: 0c:c5:c7:d6:41:5a:ee:0c:0b:c3:4d:3c:c5:2f:08:4b:28:ab: b2:f6:21:5b:e0:f5:15:08:9a:14:01:66:28:be:35:54:63:bb: 95:50:9a:d8:a5:0d:b1:72:65:84:ad:ea:90:5c:95:2b:2c:0d: c7:f7:b1:3d:f7:72:28:a5:49:8b:8d:f4:62:21:fc:cf:e5:9b: 4a:bd:46:5d:ca:e4:30:dd:f6:15:ff:ca:26:96:20:f5:2b:9c: 70:3e:4b:0f:b9:f9:6c:e5:28:d0:b8:38:ec:87:d5:f6:10:a2: 60:85:c4:bb:bd:6f:f6:74:ff:93:90:ae:14:77:91:b0:ea:c9: 78:17:0e:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS73wLLSoHdkN0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZmI2OGJkYjgtZDMxNi00YzE4LWExNGItZDM1NzVhYjIzODZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoZgvcf9XCDUEgLFXSFuZBfZt3X+YSUvpmXX cN64mrKZBK/j/04eAIzQBDrIBsUHXyleJCChPNNF5vAhBdDXXtPYbNBJ30oVndoI kIRX/rHUn1yDb6h5aDRpzi8slQ/G+oHuYZMBSn/5225aspEdIFkZUPzZ2uIuEZvK ZLoZluX3zR+WLUjnjriHe567NWLQ8j1bC7qAaFe4NLsKqkz+iEPhHUtMx8o/gdc4 fsox8TXm1mAoyUgMyl7Y0IeZPlDL9wIxloYGL3QnomBRQAy5ecyAfPyr32+2K/uS cif7h+DqhBimTHzXECnwHY/DV1dwaHfLJKvAQPrqGPv4fxhbHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDFy+jmdr3glC0YGd6RSfgXpwRsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTAwOWE4MTAtNGJmOS0z NDc4LWI2MTktYTNkZWY2ZDQ5NWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI71wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkPoFeH+HATGyHEuiin3O5SUX1l0f1DId1vOJG6Gq+qQgK8UDzXiuv7 o6wChAWFFtayHeo/08SDDmECkB6dEXi6m7se4DneZ5CcIwdm54Yq4Hx8MI9twxTl 35vegHehgnD+6jGGWwL8kvzKYJNuV/KABfOSMHhYQiPWtn9SOwzFx9ZBWu4MC8NN PMUvCEsoq7L2IVvg9RUImhQBZii+NVRju5VQmtilDbFyZYSt6pBclSssDcf3sT33 ciilSYuN9GIh/M/lm0q9Rl3K5DDd9hX/yiaWIPUrnHA+Sw+5+WzlKNC4OOyH1fYQ omCFxLu9b/Z0/5OQrhR3kbDqyXgXDkg= -----END CERTIFICATE-----Generated at Fri Apr 4 21:45:42 2025 by rpki-client