$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2586893-e250-31e8-92a1-f740bc668f0a.roa File: a2586893-e250-31e8-92a1-f740bc668f0a.roa (raw, json) Hash identifier: OiXqQJFE2rsb3hSNT9GHP7bvnkE3eTE6T8M3stXlPg0= Subject key identifier: 72:0A:F7:05:6A:6A:B6:29:25:82:E0:8A:8A:AD:C9:D9:31:17:D7:32 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BC738B2F9994DB3E93B3C Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2586893-e250-31e8-92a1-f740bc668f0a.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.202.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:c7:38:b2:f9:99:4d:b3:e9:3b:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=060666b7-d1eb-41b7-9d7e-d46a3f24a32e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6c:85:43:58:fb:ad:41:b2:ea:03:f3:d7:aa: e7:de:ed:b8:0a:82:06:d1:39:b8:19:c3:31:ef:35: b0:93:4c:93:56:2a:98:b4:b0:47:0c:c5:b6:e7:53: 01:21:76:61:8b:c8:29:77:79:f6:7c:f3:76:6e:2a: fd:1d:1d:59:7d:9a:c2:1d:bd:4b:b0:df:5d:4f:b0: 5f:c5:66:76:e5:85:5c:49:b5:89:98:3c:ce:c7:88: d0:b4:2a:3a:e7:f7:e2:89:ed:ec:06:55:27:94:f6: 0c:6b:a5:66:98:38:ba:2a:58:7b:36:ab:6b:62:dc: 86:03:96:68:39:19:fe:a2:c3:10:19:09:f6:1e:66: 1a:ee:1f:4f:89:81:7e:2e:f8:63:eb:88:0a:24:f8: 28:9d:8b:be:ec:b1:92:35:15:4b:6d:a9:ad:2d:96: 78:e9:ab:ce:20:dc:b7:a3:3e:93:8b:8d:2c:56:bc: 22:5e:9e:a1:c8:1b:e6:38:6e:15:de:b9:10:4e:5f: 29:0d:07:30:3c:83:5f:0a:dc:4f:4f:47:a8:82:aa: 20:9c:11:65:59:3d:7f:73:79:b3:7e:11:37:bb:fe: 89:1d:13:81:e4:9d:0a:84:a2:25:9e:04:aa:09:70: 08:c5:d1:27:00:13:0b:aa:1d:9f:41:57:6a:90:42: 8f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0A:F7:05:6A:6A:B6:29:25:82:E0:8A:8A:AD:C9:D9:31:17:D7:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a2586893-e250-31e8-92a1-f740bc668f0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.202.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:bf:c7:52:6a:de:f6:5b:52:e5:ca:0f:ed:39:79:8d:47:43: 58:69:73:68:b1:94:d5:0c:bf:2e:ee:b7:88:dd:a1:60:9d:9e: 16:67:f7:b8:2d:64:17:6a:60:b2:4e:4f:92:d1:3a:d4:ac:a6: 2e:c4:e8:4c:4d:40:fc:83:b7:f7:8d:3c:0f:87:78:f9:a0:ad: 45:a2:b9:25:5f:bb:2a:ed:61:b2:3b:31:3e:bc:73:cf:ac:06: d6:df:e4:76:c8:42:40:1e:c0:43:d0:89:a6:fa:65:86:c6:9c: 40:bd:31:0d:c8:97:29:33:96:cc:3e:ff:d0:d1:a3:67:66:f7: 67:1a:ff:80:fb:af:44:95:37:0e:09:ca:9d:96:1a:57:38:b6: a3:53:72:a8:d8:9a:c9:c3:25:10:99:a6:e6:4c:a8:55:bc:39: 7a:2e:ea:d7:8a:19:79:5f:75:cc:ee:49:f4:9d:fd:8e:9a:2f: dc:78:2d:7c:39:a2:01:b3:fd:3c:aa:e2:1e:0e:63:7d:f2:56: d8:4a:4c:61:2c:73:cc:9a:8e:15:25:c9:60:80:79:bc:d5:87: b9:6a:6d:23:65:e9:3c:0f:88:2c:94:44:ba:c3:49:65:4f:dd: b0:ec:7a:bf:26:c6:16:7a:fd:72:25:a9:6f:7e:ef:b0:5f:88: 70:d9:f1:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8c4svmZTbPpOzwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MDYwNjY2YjctZDFlYi00MWI3LTlkN2UtZDQ2YTNmMjRhMzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmyFQ1j7rUGy6gPz16rn3u24CoIG0Tm4GcMx 7zWwk0yTViqYtLBHDMW251MBIXZhi8gpd3n2fPN2bir9HR1ZfZrCHb1LsN9dT7Bf xWZ25YVcSbWJmDzOx4jQtCo65/fiie3sBlUnlPYMa6VmmDi6Klh7NqtrYtyGA5Zo ORn+osMQGQn2HmYa7h9PiYF+Lvhj64gKJPgonYu+7LGSNRVLbamtLZZ46avOINy3 oz6Ti40sVrwiXp6hyBvmOG4V3rkQTl8pDQcwPINfCtxPT0eogqognBFlWT1/c3mz fhE3u/6JHROB5J0KhKIlngSqCXAIxdEnABMLqh2fQVdqkEKPcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIK9wVqarYpJYLgioqtydkxF9cyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTI1ODY4OTMtZTI1MC0z MWU4LTkyYTEtZjc0MGJjNjY4ZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8qAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACO/x1Jq3vZbUuXKD+05eY1HQ1hpc2ixlNUMvy7ut4jdoWCdnhZn97gt ZBdqYLJOT5LROtSspi7E6ExNQPyDt/eNPA+HePmgrUWiuSVfuyrtYbI7MT68c8+s Btbf5HbIQkAewEPQiab6ZYbGnEC9MQ3Ilykzlsw+/9DRo2dm92ca/4D7r0SVNw4J yp2WGlc4tqNTcqjYmsnDJRCZpuZMqFW8OXou6teKGXlfdczuSfSd/Y6aL9x4LXw5 ogGz/Tyq4h4OY33yVthKTGEsc8yajhUlyWCAebzVh7lqbSNl6TwPiCyURLrDSWVP 3bDser8mxhZ6/XIlqW9+77BfiHDZ8S0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:57 2025 by rpki-client