$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9daf19ac-e586-3e2b-8d66-fd5f01de874d.roa File: 9daf19ac-e586-3e2b-8d66-fd5f01de874d.roa (raw, json) Hash identifier: NEEl9QSNA4o9bgLAkxNnwA71C5+8b2fzSE9sg7uigmc= Subject key identifier: D9:0C:47:83:3C:A5:C7:67:E2:23:24:4D:13:B0:5D:12:3A:34:3B:C3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C051B1A2F6E1B9CE75980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9daf19ac-e586-3e2b-8d66-fd5f01de874d.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.222.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:05:1b:1a:2f:6e:1b:9c:e7:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=e21eceec-50c6-4b4d-8fb0-a80ca33a1403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:df:25:06:aa:81:83:53:4a:2b:e1:b0:63:ff: f7:20:3e:35:94:37:65:13:70:02:40:03:61:58:5f: 54:f4:97:55:da:72:e3:4e:34:d3:6b:b5:fd:db:15: 85:97:f2:8c:d8:e2:d3:6b:07:84:b4:58:70:f1:7c: f7:99:6c:d1:a3:85:27:c9:9d:0f:02:8b:af:88:52: cb:10:39:a4:01:c1:d9:98:0b:c5:a9:f7:8e:4c:99: f4:94:a2:0b:32:17:d1:93:45:2d:e0:9a:e3:8c:69: 99:33:06:a8:80:89:1a:ae:1e:ce:be:f2:62:7e:f9: 3c:22:2f:f8:1d:97:4f:8b:5a:1d:0e:24:a4:37:69: 77:5f:62:51:02:41:a3:de:73:4f:be:07:b0:d1:40: 23:7d:f4:56:47:83:98:2c:4d:8f:ba:3a:39:31:71: ef:a9:2e:0d:11:da:ff:27:8d:18:18:7d:7b:37:b8: fd:85:bf:e1:f6:2f:29:27:2a:13:90:0c:4c:3a:3b: c0:a8:f8:2a:07:78:cb:19:8f:67:62:b5:51:6d:c1: 22:65:80:4c:95:2d:ce:04:ce:54:b7:f8:98:9f:ad: 8f:35:ae:73:a0:a1:80:11:83:bb:48:9b:7b:09:c1: ec:e8:3c:ea:24:84:c9:7c:45:02:ed:30:5b:f0:7e: e0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:0C:47:83:3C:A5:C7:67:E2:23:24:4D:13:B0:5D:12:3A:34:3B:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9daf19ac-e586-3e2b-8d66-fd5f01de874d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.222.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:52:62:d0:0c:74:a6:a4:5f:43:a1:a7:24:a5:8b:98:e0:30: 7d:50:dd:90:38:3c:aa:7c:d1:dd:5e:84:09:e7:47:7f:3e:0a: 53:f6:83:fa:a0:7c:3f:03:dc:39:2d:14:c0:c6:85:1f:d4:c7: 5b:1e:9e:bf:67:13:b1:fb:fb:b6:c7:5a:db:bc:0b:db:08:5a: 9e:0e:0e:99:f5:d5:50:e1:a6:da:68:32:df:b4:9b:d2:f4:c1: f7:42:8a:38:a0:1d:6b:e5:27:7a:e1:70:ac:5d:80:ec:46:d5: 8b:4d:b8:d8:a6:27:0e:aa:5b:a6:e6:b4:40:29:44:f3:db:ba: 57:ff:a5:5e:d4:7e:b9:6f:fa:65:cc:c1:2f:ec:7e:f8:e0:dc: 6f:e6:b9:16:a6:5c:cf:72:80:71:73:60:2a:e2:75:76:ee:ef: 6c:15:08:de:55:4a:1f:c7:b2:0a:de:47:12:5c:c9:d2:9c:30: 15:08:d4:60:ab:41:8d:b1:7e:9f:ea:bd:8f:cd:5d:bf:63:6e: c6:07:09:d0:9e:da:ad:45:33:b1:83:8c:e7:aa:19:a4:31:ab: 73:f9:64:86:db:96:e2:e9:72:07:4d:e6:c1:58:94:cf:dc:5a: a3:2f:95:cd:38:98:b5:63:95:2e:e5:22:78:dd:dd:3e:cd:e0: 64:d8:d9:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITAUbGi9uG5znWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZTIxZWNlZWMtNTBjNi00YjRkLThmYjAtYTgwY2EzM2ExNDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst8lBqqBg1NKK+GwY//3ID41lDdlE3ACQANh WF9U9JdV2nLjTjTTa7X92xWFl/KM2OLTaweEtFhw8Xz3mWzRo4UnyZ0PAouviFLL EDmkAcHZmAvFqfeOTJn0lKILMhfRk0Ut4JrjjGmZMwaogIkarh7OvvJifvk8Ii/4 HZdPi1odDiSkN2l3X2JRAkGj3nNPvgew0UAjffRWR4OYLE2Pujo5MXHvqS4NEdr/ J40YGH17N7j9hb/h9i8pJyoTkAxMOjvAqPgqB3jLGY9nYrVRbcEiZYBMlS3OBM5U t/iYn62PNa5zoKGAEYO7SJt7CcHs6DzqJITJfEUC7TBb8H7gSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkMR4M8pcdn4iMkTROwXRI6NDvDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWRhZjE5YWMtZTU4Ni0z ZTJiLThkNjYtZmQ1ZjAxZGU4NzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI95AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVSYtAMdKakX0OhpySli5jgMH1Q3ZA4PKp80d1ehAnnR38+ClP2g/qg fD8D3DktFMDGhR/Ux1senr9nE7H7+7bHWtu8C9sIWp4ODpn11VDhptpoMt+0m9L0 wfdCijigHWvlJ3rhcKxdgOxG1YtNuNimJw6qW6bmtEApRPPbulf/pV7Ufrlv+mXM wS/sfvjg3G/muRamXM9ygHFzYCridXbu72wVCN5VSh/HsgreRxJcydKcMBUI1GCr QY2xfp/qvY/NXb9jbsYHCdCe2q1FM7GDjOeqGaQxq3P5ZIbbluLpcgdN5sFYlM/c WqMvlc04mLVjlS7lInjd3T7N4GTY2bo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:33 2025 by rpki-client