$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a368eebd-a087-3d04-9fb3-449dbfe7df18.roa File: a368eebd-a087-3d04-9fb3-449dbfe7df18.roa (raw, json) Hash identifier: 6N65Z9kQjUMExT2AXQOV745skmm92yP4wvNF0OYR/w0= Subject key identifier: F3:DF:A8:C5:37:65:1C:97:F3:4D:2A:28:3D:4E:43:87:D0:3A:13:C2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BD2D1CB065A3456496AA0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a368eebd-a087-3d04-9fb3-449dbfe7df18.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.203.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:d2:d1:cb:06:5a:34:56:49:6a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=77e72296-4632-4fef-aa46-855ec8ab7678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:45:a3:2c:d7:18:44:b9:cf:2c:ae:95:72:fe: 09:0a:55:9b:2a:cf:c2:f1:32:57:cb:35:6f:dc:91: e3:8c:5f:f5:9a:46:b4:f8:6c:7f:72:00:05:3a:dc: ee:14:99:c9:68:1f:3a:c6:24:eb:2b:5e:0b:ba:8a: bd:05:95:e5:d9:13:76:46:74:28:34:90:59:75:9d: 3b:d2:b5:30:32:b2:1e:ce:5a:e6:0a:fd:56:91:e8: b7:2d:7a:69:d0:43:63:5d:20:ab:eb:52:c5:2c:84: cf:96:da:86:9d:93:16:7d:37:54:ec:04:35:c9:2f: 47:ed:4e:3e:60:b7:aa:0a:13:e7:63:c4:57:d1:22: 2a:cc:68:41:eb:58:ec:84:6b:43:2b:b1:65:06:2a: 23:88:41:a5:05:a9:22:55:ea:05:6f:d9:92:bc:87: 2b:b7:e2:bc:d8:33:e8:60:41:72:e7:e7:1f:1d:bb: ad:69:a0:3e:05:b0:3a:f3:1f:de:15:f4:0c:98:73: 0d:72:de:0a:a4:49:6d:e9:43:7f:b4:13:f9:34:d1: d5:0a:e2:fa:0b:4c:b6:54:9c:2e:8e:4f:0d:89:16: 24:3b:0a:34:09:60:7f:01:53:e7:31:f0:cc:3f:82: 1d:91:6b:74:89:52:81:7b:46:65:d1:e4:be:25:44: 77:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:DF:A8:C5:37:65:1C:97:F3:4D:2A:28:3D:4E:43:87:D0:3A:13:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a368eebd-a087-3d04-9fb3-449dbfe7df18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.203.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:e8:78:26:4d:53:70:96:28:ab:7b:c3:14:57:60:b8:d2:d5: 1e:74:f4:0b:ab:e9:d2:a9:aa:a0:98:64:00:a5:37:02:d7:b9: 75:30:d2:f3:09:63:5e:6d:f4:65:ce:1b:d0:de:15:85:38:96: d9:3f:da:a3:d0:14:3f:e7:c8:af:d1:00:f6:91:8a:92:5a:a0: b4:59:1b:2f:3c:be:54:13:6f:09:ae:fe:53:1e:96:a2:16:c5: 6a:55:bc:53:eb:f1:88:c3:17:ce:f4:69:b4:31:6f:42:b8:c8: f1:19:57:d3:e0:f1:6e:ea:7a:07:8c:27:1f:0e:87:1b:ab:44: f4:fe:cd:4f:75:87:bd:de:99:af:99:86:96:dd:32:d4:f3:cd: 43:dd:bf:70:f4:fb:6c:63:55:5d:c0:62:7e:a4:93:70:2f:fb: 48:21:ea:71:24:8c:5e:7b:a1:84:60:49:af:87:7e:6f:3c:c8: 51:ae:60:ef:57:8e:81:49:ff:b7:21:c5:62:28:be:69:21:51: 9a:1c:ee:a5:09:bc:52:bd:2b:a5:05:60:58:1e:d0:50:45:be: dc:14:bf:34:c9:9d:21:f3:6a:1d:9e:c8:21:76:46:c4:ae:00: 92:6d:cf:d6:93:f2:64:d2:35:a2:11:82:2c:e0:ac:4c:07:f1: cf:e0:89:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS9LRywZaNFZJaqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NzdlNzIyOTYtNDYzMi00ZmVmLWFhNDYtODU1ZWM4YWI3Njc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0WjLNcYRLnPLK6Vcv4JClWbKs/C8TJXyzVv 3JHjjF/1mka0+Gx/cgAFOtzuFJnJaB86xiTrK14Luoq9BZXl2RN2RnQoNJBZdZ07 0rUwMrIezlrmCv1Wkei3LXpp0ENjXSCr61LFLITPltqGnZMWfTdU7AQ1yS9H7U4+ YLeqChPnY8RX0SIqzGhB61jshGtDK7FlBiojiEGlBakiVeoFb9mSvIcrt+K82DPo YEFy5+cfHbutaaA+BbA68x/eFfQMmHMNct4KpElt6UN/tBP5NNHVCuL6C0y2VJwu jk8NiRYkOwo0CWB/AVPnMfDMP4IdkWt0iVKBe0Zl0eS+JUR3kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPfqMU3ZRyX800qKD1OQ4fQOhPCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTM2OGVlYmQtYTA4Ny0z ZDA0LTlmYjMtNDQ5ZGJmZTdkZjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI8vcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3oeCZNU3CWKKt7wxRXYLjS1R509Aur6dKpqqCYZAClNwLXuXUw0vMJ Y15t9GXOG9DeFYU4ltk/2qPQFD/nyK/RAPaRipJaoLRZGy88vlQTbwmu/lMelqIW xWpVvFPr8YjDF870abQxb0K4yPEZV9Pg8W7qegeMJx8OhxurRPT+zU91h73ema+Z hpbdMtTzzUPdv3D0+2xjVV3AYn6kk3Av+0gh6nEkjF57oYRgSa+Hfm88yFGuYO9X joFJ/7chxWIovmkhUZoc7qUJvFK9K6UFYFge0FBFvtwUvzTJnSHzah2eyCF2RsSu AJJtz9aT8mTSNaIRgizgrEwH8c/giUQ= -----END CERTIFICATE-----Generated at Fri Mar 14 11:14:08 2025 by rpki-client