$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4aa230a-e464-3ead-a543-13e8d7a3df8a.roa File: a4aa230a-e464-3ead-a543-13e8d7a3df8a.roa (raw, json) Hash identifier: TaPkvaplMGhw5O/wzlFwxBCq3jzbe7ZE2r5vfkK3psc= Subject key identifier: 9A:44:76:71:94:BE:17:28:A6:F0:4B:18:A1:01:A6:CF:21:35:4F:DD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BAC6703CC80380DF7B6C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4aa230a-e464-3ead-a543-13e8d7a3df8a.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.240.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:ac:67:03:cc:80:38:0d:f7:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=7cca7011-35d9-419f-bc0a-ed6fca99d07c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:13:72:1f:c6:3e:52:4e:f4:13:b1:56:20:d1: 0a:2e:db:1b:54:b2:68:0d:a6:c8:bb:30:6d:39:9e: e7:5a:56:09:5d:94:4c:e0:6f:7a:f6:38:94:70:84: e6:68:27:30:d3:32:7b:a9:ff:e4:bc:92:60:e7:b2: 6f:4f:b5:56:61:19:74:f6:99:9a:c8:bd:33:04:15: 70:2c:e2:2c:ac:65:ca:5a:4d:e7:15:e0:54:35:85: 9c:85:1b:06:c9:47:0a:7c:98:7d:92:dd:9f:af:94: 45:e5:c5:f0:c0:82:19:49:3b:e4:1e:0d:29:82:fc: 0f:0f:44:88:53:2d:eb:76:a9:86:35:69:c4:44:f2: 84:bd:0f:24:14:83:13:2c:7e:de:54:ae:3a:ee:f3: 72:e5:a6:26:21:9a:5a:dc:e2:ff:62:32:58:88:54: ee:fd:89:ad:4d:9b:47:31:f3:31:6f:30:c7:fa:e5: 94:74:91:9c:bf:a1:f8:4c:1a:72:64:f6:99:b3:65: cd:4a:40:15:86:de:ea:08:81:3b:d6:ea:02:99:72: 98:20:96:10:6a:01:13:71:66:d3:a0:80:26:6c:3e: 0b:6b:a9:90:06:7d:68:1f:eb:c7:4b:99:1a:68:ac: 66:35:26:c1:25:98:be:e5:84:90:6b:a1:5a:30:ae: 6e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:44:76:71:94:BE:17:28:A6:F0:4B:18:A1:01:A6:CF:21:35:4F:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4aa230a-e464-3ead-a543-13e8d7a3df8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.240.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:d0:30:e1:5a:b1:17:2b:db:ea:4f:6e:ba:5b:71:62:8e:d8: 31:41:b5:12:1d:e8:17:08:9a:a7:d0:26:17:6b:9d:da:c2:5e: 55:2d:64:84:09:16:52:f4:68:48:d5:d5:7a:2c:b1:68:ee:57: 95:6a:d2:31:f3:13:9b:f2:b5:a1:9d:34:7a:15:4d:fe:e9:2b: e1:96:d7:31:56:87:1d:b3:77:66:44:ec:9c:3c:44:8c:1e:f2: 8a:db:e1:b4:02:be:d5:2b:47:d9:29:23:37:d8:19:03:f3:d8: d9:11:3d:f6:80:26:1d:2b:35:60:aa:94:3c:49:a9:1a:2e:7f: 69:f8:40:88:35:c9:43:0a:f1:72:d1:06:20:95:14:32:57:b7: e3:ea:b5:00:f8:be:86:f5:b6:32:0a:c4:a9:52:c1:69:b0:61: 1a:69:e5:a4:af:a8:05:5b:25:0e:e1:71:3d:23:2a:79:1b:9d: 1f:94:c0:cb:a0:09:9a:5a:6c:9c:07:4a:b4:49:24:db:54:2f: 86:a7:ff:e0:12:f9:b9:84:fc:69:a6:08:85:62:f9:c4:81:a7: 2c:46:3b:b3:06:57:13:c1:43:69:7f:7c:8d:ee:96:53:96:f1: 42:4a:c4:35:49:e9:21:ca:dd:2e:be:6f:b6:30:83:6a:13:dc: 87:6e:9a:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS6xnA8yAOA33tsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk N2NjYTcwMTEtMzVkOS00MTlmLWJjMGEtZWQ2ZmNhOTlkMDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBNyH8Y+Uk70E7FWINEKLtsbVLJoDabIuzBt OZ7nWlYJXZRM4G969jiUcITmaCcw0zJ7qf/kvJJg57JvT7VWYRl09pmayL0zBBVw LOIsrGXKWk3nFeBUNYWchRsGyUcKfJh9kt2fr5RF5cXwwIIZSTvkHg0pgvwPD0SI Uy3rdqmGNWnERPKEvQ8kFIMTLH7eVK467vNy5aYmIZpa3OL/YjJYiFTu/YmtTZtH MfMxbzDH+uWUdJGcv6H4TBpyZPaZs2XNSkAVht7qCIE71uoCmXKYIJYQagETcWbT oIAmbD4La6mQBn1oH+vHS5kaaKxmNSbBJZi+5YSQa6FaMK5uowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpEdnGUvhcopvBLGKEBps8hNU/dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTRhYTIzMGEtZTQ2NC0z ZWFkLWE1NDMtMTNlOGQ3YTNkZjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/DAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrQMOFasRcr2+pPbrpbcWKO2DFBtRId6BcImqfQJhdrndrCXlUtZIQJ FlL0aEjV1XossWjuV5Vq0jHzE5vytaGdNHoVTf7pK+GW1zFWhx2zd2ZE7Jw8RIwe 8orb4bQCvtUrR9kpIzfYGQPz2NkRPfaAJh0rNWCqlDxJqRouf2n4QIg1yUMK8XLR BiCVFDJXt+PqtQD4vob1tjIKxKlSwWmwYRpp5aSvqAVbJQ7hcT0jKnkbnR+UwMug CZpabJwHSrRJJNtUL4an/+AS+bmE/GmmCIVi+cSBpyxGO7MGVxPBQ2l/fI3ullOW 8UJKxDVJ6SHK3S6+b7Ywg2oT3Idumqc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:58 2025 by rpki-client