$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5aaf058-9fbc-36d7-877a-1a427aa1e4c2.roa File: a5aaf058-9fbc-36d7-877a-1a427aa1e4c2.roa (raw, json) Hash identifier: 6YudrjeMmqR2SZY3/p7hMGMOgLTA8Fa3zAWG+hIMDb4= Subject key identifier: 4D:52:B9:33:45:6B:FA:9A:FD:9A:E2:C5:76:C7:FE:AE:5D:1C:F3:CD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BAA87CA852CF2843B6400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5aaf058-9fbc-36d7-877a-1a427aa1e4c2.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.238.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:aa:87:ca:85:2c:f2:84:3b:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=95e0f960-4449-4874-9145-68257b7cc959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:19:2c:77:8d:78:a4:e0:de:91:b6:20:dd:40: 36:02:4c:91:5b:04:43:f1:f9:90:68:22:94:e8:46: 59:97:5b:42:45:d5:c1:f3:46:dd:e9:a5:db:bb:57: 8c:41:14:60:65:72:e8:15:55:03:93:ce:84:00:69: fb:1d:57:8d:9c:94:3a:78:63:43:4f:1c:dd:62:95: 0b:98:bf:45:10:9b:52:e8:77:3b:19:a1:df:c6:ad: 8f:8e:af:f4:e5:23:e2:3d:e9:23:56:ae:50:9a:09: ce:57:ac:5e:f2:a4:e3:1d:bc:4a:5f:91:72:b6:d5: 16:fd:82:b3:97:42:01:77:5b:34:a6:a9:30:bf:b1: bb:95:cc:df:a2:e9:c4:15:b4:a4:9b:91:27:6b:85: f2:c2:d9:2d:b9:52:b3:5a:2b:df:75:c3:db:96:b6: 93:7c:13:ec:f3:b7:d1:90:7d:1a:6a:ea:cc:7d:37: ec:fd:44:5c:2c:21:2f:84:c0:bb:75:18:a7:6f:df: 1e:7f:39:75:28:2f:b8:10:89:fb:01:50:eb:fe:d7: 47:9f:12:bc:a1:ea:c4:65:c6:17:e4:40:2a:c7:c4: 98:c0:b9:e8:b9:b5:1b:7a:19:fa:f8:cb:c9:12:f8: 15:4a:58:ce:73:fd:52:20:43:b6:b6:22:c9:a2:a4: b8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:52:B9:33:45:6B:FA:9A:FD:9A:E2:C5:76:C7:FE:AE:5D:1C:F3:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5aaf058-9fbc-36d7-877a-1a427aa1e4c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.238.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:02:4e:6a:9c:39:56:a5:b6:6f:bf:57:82:37:23:25:e9:6a: f6:f9:15:67:bb:ab:78:6c:86:85:26:2f:8d:8b:50:ca:c6:a9: c2:5c:d1:fa:14:1b:8b:7c:82:72:b5:41:a7:f6:49:fb:9d:53: 3f:d5:2b:8c:58:5d:d0:6e:77:dd:db:8d:97:ad:ce:a2:74:24: 26:53:24:98:db:7e:28:52:b6:a7:d9:b8:a1:08:5a:f6:c4:21: f1:e7:68:72:e2:d3:62:27:7b:32:ab:68:81:0c:9a:f4:6a:b6: 30:b8:e4:3f:b2:8c:9b:54:db:93:0e:46:86:fc:48:48:56:b1: f8:19:b4:d9:59:ec:96:1f:2b:3a:9a:2a:fe:b3:52:1b:4b:3c: ae:76:37:d7:97:d7:0e:21:13:30:b9:f9:50:1f:3e:45:3e:e8: 9b:6d:5b:a8:13:35:69:87:22:71:76:ef:11:22:a6:a3:35:e9: 88:17:af:c7:78:9e:96:64:de:be:72:8c:78:45:82:36:2a:59: f0:b3:61:e5:b7:25:ef:fa:3d:4a:b9:b5:39:cc:32:be:e4:84: 02:db:f5:54:67:a4:98:fc:3f:06:9b:d9:23:d8:80:6d:66:ee: f8:04:f0:ec:3d:7e:61:be:d6:ac:20:3c:56:c5:75:ef:f0:aa: 44:bb:60:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS6qHyoUs8oQ7ZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk OTVlMGY5NjAtNDQ0OS00ODc0LTkxNDUtNjgyNTdiN2NjOTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRksd414pODekbYg3UA2AkyRWwRD8fmQaCKU 6EZZl1tCRdXB80bd6aXbu1eMQRRgZXLoFVUDk86EAGn7HVeNnJQ6eGNDTxzdYpUL mL9FEJtS6Hc7GaHfxq2Pjq/05SPiPekjVq5QmgnOV6xe8qTjHbxKX5FyttUW/YKz l0IBd1s0pqkwv7G7lczfounEFbSkm5Ena4XywtktuVKzWivfdcPblraTfBPs87fR kH0aaurMfTfs/URcLCEvhMC7dRinb98efzl1KC+4EIn7AVDr/tdHnxK8oerEZcYX 5EAqx8SYwLnoubUbehn6+MvJEvgVSljOc/1SIEO2tiLJoqS4FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1SuTNFa/qa/ZrixXbH/q5dHPPNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTVhYWYwNTgtOWZiYy0z NmQ3LTg3N2EtMWE0MjdhYTFlNGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABICTmqcOValtm+/V4I3IyXpavb5FWe7q3hshoUmL42LUMrGqcJc0foU G4t8gnK1Qaf2SfudUz/VK4xYXdBud93bjZetzqJ0JCZTJJjbfihStqfZuKEIWvbE IfHnaHLi02InezKraIEMmvRqtjC45D+yjJtU25MORob8SEhWsfgZtNlZ7JYfKzqa Kv6zUhtLPK52N9eX1w4hEzC5+VAfPkU+6JttW6gTNWmHInF27xEipqM16YgXr8d4 npZk3r5yjHhFgjYqWfCzYeW3Je/6PUq5tTnMMr7khALb9VRnpJj8Pwab2SPYgG1m 7vgE8Ow9fmG+1qwgPFbFde/wqkS7YI0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:46:39 2025 by rpki-client