$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9990b039-2437-3800-aa8d-3f9667410b0e.roa File: 9990b039-2437-3800-aa8d-3f9667410b0e.roa (raw, json) Hash identifier: 8FrJOHbL2Cv1YojLc8GjXJQewUn+1KjrN5E8D91EzvI= Subject key identifier: 7E:E3:0D:E7:E1:8E:53:8F:B8:AC:78:7F:7D:55:BD:C5:9C:96:A5:10 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C12EB30CDC33D7B3E15E0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9990b039-2437-3800-aa8d-3f9667410b0e.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.223.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:12:eb:30:cd:c3:3d:7b:3e:15:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=22e4dd9f-0ddc-4b34-aa44-336c94849b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c9:db:3a:5a:5e:73:2b:ca:91:c3:28:93:35: e8:49:66:6e:6c:17:33:f3:38:38:7e:bb:4a:55:8c: f5:3a:63:c2:8b:89:ef:f6:3b:fc:15:29:d0:33:af: f1:11:37:dd:c8:41:e3:d4:b4:d8:81:4c:05:f4:b7: dd:74:44:fd:c0:29:b8:aa:5a:35:fa:e5:fb:60:ca: 68:2b:90:61:a2:60:07:78:12:96:61:77:bb:7a:5f: b3:ed:fb:6d:6a:0a:d9:44:e9:ce:e4:4c:ae:c4:3c: 6b:a3:38:f2:e0:ac:4a:f8:1d:6c:5d:29:75:2e:fe: 7e:ae:56:c1:8f:4d:34:53:ef:3f:bf:9b:6f:35:27: 3d:17:7c:5d:13:f0:4e:3e:52:fe:0f:5e:b7:9f:94: af:04:91:c8:a9:f6:0c:e8:f2:3a:0c:3a:02:df:55: ff:4f:3e:f7:c9:59:c4:5a:fb:70:66:9a:ad:85:f1: 28:96:f3:ee:2a:ff:6f:b8:f3:84:5a:e8:5a:ae:cd: bf:b4:5d:8d:72:bc:b8:ec:6b:ec:52:35:13:d7:1e: 7c:da:e4:6b:5e:4a:44:dd:a4:2f:39:87:51:cb:12: cf:bb:b7:c1:48:56:35:7e:b2:26:ef:e9:20:3b:99: 62:98:3d:e8:3f:f9:01:06:aa:a0:72:c7:84:81:37: 31:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E3:0D:E7:E1:8E:53:8F:B8:AC:78:7F:7D:55:BD:C5:9C:96:A5:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9990b039-2437-3800-aa8d-3f9667410b0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.223.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:04:87:e1:2e:ea:ff:e6:04:a5:32:d3:ce:b3:bb:c0:b9:a6: 57:8d:4e:98:d7:2c:21:91:91:31:47:bd:ff:8a:c5:64:8e:12: 64:51:76:43:6d:4a:61:5f:0d:0e:ed:7f:b8:22:01:10:dc:5a: f4:b7:2a:d3:ca:9d:38:c0:12:57:4c:c0:34:64:72:8a:e6:0c: 5a:d5:7a:8b:97:8c:f9:fb:25:03:7e:0b:77:72:be:37:b5:87: aa:0f:a3:7f:ae:43:6e:09:d7:63:00:79:66:7f:b6:c0:3e:c9: 8b:81:62:22:5f:4e:3e:51:c0:fc:31:88:65:fc:92:08:f1:d1: c7:44:bb:9d:ae:a3:e8:63:8f:3c:88:a0:51:14:4a:7f:35:c1: a8:c1:92:80:79:b6:87:33:0e:d3:20:ed:e9:b8:2b:55:e6:f0: f9:f4:ff:4f:0f:6a:38:04:23:8a:18:dc:d6:bf:62:30:6b:6f: d1:31:d9:73:22:b5:34:3e:00:46:77:9f:e7:46:7e:a0:65:50: a4:32:75:a6:c0:0d:cb:ee:9a:52:a5:c4:77:fe:0f:e6:a3:5a: f9:c6:3a:6d:0a:1c:21:91:c5:13:c9:56:dd:cb:ca:c0:d8:da: 21:b4:c3:24:4f:ac:dd:e3:df:b1:34:08:82:a0:90:b7:1f:57: 51:f7:a2:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITBLrMM3DPXs+FeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MjJlNGRkOWYtMGRkYy00YjM0LWFhNDQtMzM2Yzk0ODQ5YjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncnbOlpecyvKkcMokzXoSWZubBcz8zg4frtK VYz1OmPCi4nv9jv8FSnQM6/xETfdyEHj1LTYgUwF9LfddET9wCm4qlo1+uX7YMpo K5BhomAHeBKWYXe7el+z7fttagrZROnO5EyuxDxrozjy4KxK+B1sXSl1Lv5+rlbB j000U+8/v5tvNSc9F3xdE/BOPlL+D163n5SvBJHIqfYM6PI6DDoC31X/Tz73yVnE WvtwZpqthfEolvPuKv9vuPOEWuhars2/tF2Ncry47GvsUjUT1x582uRrXkpE3aQv OYdRyxLPu7fBSFY1frIm7+kgO5limD3oP/kBBqqgcseEgTcxvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7jDefhjlOPuKx4f31VvcWclqUQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOTk5MGIwMzktMjQzNy0z ODAwLWFhOGQtM2Y5NjY3NDEwYjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI9+wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcEh+Eu6v/mBKUy086zu8C5pleNTpjXLCGRkTFHvf+KxWSOEmRRdkNt SmFfDQ7tf7giARDcWvS3KtPKnTjAEldMwDRkcormDFrVeouXjPn7JQN+C3dyvje1 h6oPo3+uQ24J12MAeWZ/tsA+yYuBYiJfTj5RwPwxiGX8kgjx0cdEu52uo+hjjzyI oFEUSn81wajBkoB5toczDtMg7em4K1Xm8Pn0/08PajgEI4oY3Na/YjBrb9Ex2XMi tTQ+AEZ3n+dGfqBlUKQydabADcvumlKlxHf+D+ajWvnGOm0KHCGRxRPJVt3LysDY 2iG0wyRPrN3j37E0CIKgkLcfV1H3ooo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:13 2025 by rpki-client