$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a31dff1c-139d-388a-a3e6-347acb99e941.roa File: a31dff1c-139d-388a-a3e6-347acb99e941.roa (raw, json) Hash identifier: 7oIrr6EAIQXtMw8QtblMYttcfNWGYfeuMGC1NBTLnkA= Subject key identifier: A0:66:5D:F5:CE:91:47:D8:63:42:9D:B1:7F:79:81:FE:2C:DA:0D:EE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BB105DB0429B7E4244158 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a31dff1c-139d-388a-a3e6-347acb99e941.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.243.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:b1:05:db:04:29:b7:e4:24:41:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=ac254806-e370-4b3f-9b0d-9224b38fefdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b9:5e:bd:9c:9d:96:2f:8a:b7:07:df:5c:c0: ee:2f:a0:86:f8:67:65:46:38:24:94:ab:ba:95:f0: 52:dd:a3:60:44:ad:7e:ee:b5:d1:2b:10:bf:8d:d8: 54:86:7a:8e:c0:a0:85:a5:eb:4a:66:cf:af:9d:d3: 91:9f:30:68:c3:bd:b6:fe:0b:00:ac:72:a8:7f:69: 07:54:c8:5c:fe:f9:91:aa:f1:e8:b8:1e:21:a7:91: 1b:1f:fb:a5:f6:d3:40:3b:74:97:e3:06:8e:af:aa: 2e:ca:b4:12:fc:d3:93:06:93:4e:b0:b9:d7:81:e2: 62:b6:46:9b:8c:c8:eb:0a:4c:21:89:0d:29:c0:47: 79:60:b8:40:a7:60:28:80:70:21:67:b9:44:b7:ac: 96:28:1b:58:be:f3:cc:24:e0:3d:c9:9d:24:f6:cd: 4c:45:9b:da:f2:51:5f:92:14:f8:d2:61:2f:5b:ee: e0:1f:d6:60:bd:1f:c4:7b:e9:33:fd:65:f2:bd:3b: 4f:ed:14:ec:a5:87:f2:48:85:1e:14:cc:bb:2f:b6: 3b:f6:8c:ca:f9:04:26:c5:02:83:f5:d9:87:d7:fa: 83:61:81:9c:45:8c:de:f0:86:02:97:c1:0c:61:16: 1b:d7:c6:84:3a:65:03:8f:d8:86:e0:cd:00:03:8a: 4d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:66:5D:F5:CE:91:47:D8:63:42:9D:B1:7F:79:81:FE:2C:DA:0D:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a31dff1c-139d-388a-a3e6-347acb99e941.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.243.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:9c:de:09:3f:b5:f6:98:67:4e:8b:a5:2f:61:cb:34:ec:30: 1f:7d:09:0e:21:47:68:56:37:96:d7:f8:0b:c0:f4:a9:19:30: 85:12:50:56:93:eb:33:f1:d9:18:34:ad:f1:a8:4a:6f:87:31: fe:95:4e:ec:c8:d1:ad:c9:f1:20:f4:c8:45:2d:c3:d7:3c:e6: 27:f0:3d:92:8c:ac:bb:a8:94:b9:b1:d7:2d:21:de:5a:c4:7f: a8:ef:88:62:93:06:af:3e:67:89:29:15:4d:c1:26:40:ca:9c: ed:27:12:0e:56:b8:48:77:ae:9b:70:b8:6c:7a:86:ac:a4:cd: a4:17:39:24:58:dc:ec:6e:65:78:69:28:b9:b3:1c:a8:83:dc: 59:ab:61:a3:a4:f4:ac:0f:ac:f2:83:05:74:df:64:0a:ac:4d: f2:d3:ad:c5:3f:1b:43:d3:f4:9e:39:87:a8:4b:a6:9e:36:9e: 1e:74:43:00:d1:ff:07:20:5b:5a:c8:f0:37:d8:1c:cc:fc:a7: 39:b5:22:f5:b5:4d:ce:6a:1f:a3:60:ba:af:d3:de:c7:7d:35: e8:72:b4:95:f4:cd:51:d0:80:05:16:10:87:55:1d:96:c2:4c: ea:7c:22:99:30:04:61:37:bf:c5:ef:dd:fb:33:e4:d5:21:02: 51:97:75:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS7EF2wQpt+QkQVgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YWMyNTQ4MDYtZTM3MC00YjNmLTliMGQtOTIyNGIzOGZlZmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLlevZydli+KtwffXMDuL6CG+GdlRjgklKu6 lfBS3aNgRK1+7rXRKxC/jdhUhnqOwKCFpetKZs+vndORnzBow722/gsArHKof2kH VMhc/vmRqvHouB4hp5EbH/ul9tNAO3SX4waOr6ouyrQS/NOTBpNOsLnXgeJitkab jMjrCkwhiQ0pwEd5YLhAp2AogHAhZ7lEt6yWKBtYvvPMJOA9yZ0k9s1MRZva8lFf khT40mEvW+7gH9ZgvR/Ee+kz/WXyvTtP7RTspYfySIUeFMy7L7Y79ozK+QQmxQKD 9dmH1/qDYYGcRYze8IYCl8EMYRYb18aEOmUDj9iG4M0AA4pNGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBmXfXOkUfYY0KdsX95gf4s2g3uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTMxZGZmMWMtMTM5ZC0z ODhhLWEzZTYtMzQ3YWNiOTllOTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/PQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmc3gk/tfaYZ06LpS9hyzTsMB99CQ4hR2hWN5bX+AvA9KkZMIUSUFaT 6zPx2Rg0rfGoSm+HMf6VTuzI0a3J8SD0yEUtw9c85ifwPZKMrLuolLmx1y0h3lrE f6jviGKTBq8+Z4kpFU3BJkDKnO0nEg5WuEh3rptwuGx6hqykzaQXOSRY3OxuZXhp KLmzHKiD3FmrYaOk9KwPrPKDBXTfZAqsTfLTrcU/G0PT9J45h6hLpp42nh50QwDR /wcgW1rI8DfYHMz8pzm1IvW1Tc5qH6Nguq/T3sd9NehytJX0zVHQgAUWEIdVHZbC TOp8IpkwBGE3v8Xv3fsz5NUhAlGXdQA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:40 2025 by rpki-client