$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5ec7d68-0c35-3ed2-94fc-b47c208abb7e.roa File: a5ec7d68-0c35-3ed2-94fc-b47c208abb7e.roa (raw, json) Hash identifier: TMxaPWgD39lxD2rm03RlHSDN2dcucbh7P4W6vQUMdr8= Subject key identifier: 8F:7E:1B:79:7A:08:1A:10:4C:EB:6E:86:53:38:BD:AA:3F:86:1F:27 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C021C0A1FC4B101FFC000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5ec7d68-0c35-3ed2-94fc-b47c208abb7e.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 35.217.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:02:1c:0a:1f:c4:b1:01:ff:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=268efb4b-1b5d-48e7-9a38-211f1c5b98e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:24:5f:cc:ca:80:9c:03:95:56:5a:a6:35:95: 67:b4:a3:95:77:8d:c1:4d:0c:34:92:cf:4b:fc:47: b8:1e:e9:a8:7f:1f:44:12:4f:e5:18:46:78:f1:5a: 4a:43:10:a0:94:b5:c0:95:22:37:13:15:0e:4d:34: c3:7b:89:27:4d:2f:2f:8d:f3:b6:1a:75:9f:1f:0c: 77:1f:65:00:25:7e:52:dc:76:f6:4a:a2:65:4c:f3: e3:f6:05:5a:ff:a5:ac:c2:f4:66:c8:44:12:6c:a2: 17:9f:78:e3:2c:c5:5e:99:0a:8e:d2:bf:c4:36:b4: 60:f5:d9:26:11:13:0f:e1:fe:52:e0:62:8b:c9:da: ee:c1:d0:42:23:65:19:52:45:36:3b:72:49:d2:ab: 15:d9:a2:8d:cc:a4:2e:b9:db:f5:72:9f:dc:e2:c1: 37:ad:30:cf:94:d5:93:6f:af:51:b7:e2:46:6d:8c: 80:b5:95:e6:df:7f:a6:ec:c4:1b:6c:5e:5d:1c:2f: e5:7a:c5:02:ce:8b:c8:de:cd:6b:8b:29:09:3d:b9: 2a:b3:98:38:84:e3:a9:1c:ce:fd:ba:67:4e:07:fb: 7e:5c:0d:f6:45:37:87:1f:d1:50:20:f8:05:32:04: 37:9e:5e:1b:ee:7f:c9:28:c9:1d:62:2a:a6:1e:59: 3f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:7E:1B:79:7A:08:1A:10:4C:EB:6E:86:53:38:BD:AA:3F:86:1F:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a5ec7d68-0c35-3ed2-94fc-b47c208abb7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.217.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:14:f5:5d:22:5f:7a:53:08:47:5a:06:cb:6b:cf:f0:ce:39: 8f:cf:d3:37:52:c2:c1:55:ab:bb:8c:cd:26:c5:b4:c6:10:4e: 0b:d6:5a:5e:1a:6b:ee:62:b2:ac:6f:24:ea:44:75:ba:ee:a0: 39:74:a3:de:41:24:40:d3:39:ed:ee:78:24:01:23:5b:26:4f: c9:b3:6a:b2:17:4f:73:28:50:4e:ad:7d:2d:76:8d:66:ed:d5: 74:a1:60:ef:18:08:b7:98:31:66:5c:52:9d:f4:97:aa:9a:e5: 2d:1f:15:98:8b:65:b6:42:cd:e4:a6:e1:74:d8:81:e3:f1:9e: f4:10:25:0d:2d:16:82:5e:48:1a:35:9e:7f:3b:b7:bf:33:89: eb:f8:a9:12:a7:b6:18:dd:9f:aa:09:20:06:d8:6e:b2:4f:ac: 62:6c:f3:c7:6e:e1:ce:a3:f1:3c:ba:96:29:c7:8a:0f:e9:c2: 2e:94:4c:d7:13:e0:27:fc:99:94:3f:23:b7:fe:4f:5d:64:a4: 99:0d:71:13:d4:ac:cc:0e:8c:97:b8:7c:3e:df:3d:64:f0:24: a0:e7:32:6f:51:c0:94:65:d5:52:5e:d9:47:f3:73:93:57:52: 66:63:e1:57:1b:df:c6:c7:e3:ae:07:d2:91:81:51:03:7a:48: 39:10:8c:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITAIcCh/EsQH/wAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MjY4ZWZiNGItMWI1ZC00OGU3LTlhMzgtMjExZjFjNWI5OGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyRfzMqAnAOVVlqmNZVntKOVd43BTQw0ks9L /Ee4Humofx9EEk/lGEZ48VpKQxCglLXAlSI3ExUOTTTDe4knTS8vjfO2GnWfHwx3 H2UAJX5S3Hb2SqJlTPPj9gVa/6WswvRmyEQSbKIXn3jjLMVemQqO0r/ENrRg9dkm ERMP4f5S4GKLydruwdBCI2UZUkU2O3JJ0qsV2aKNzKQuudv1cp/c4sE3rTDPlNWT b69Rt+JGbYyAtZXm33+m7MQbbF5dHC/lesUCzovI3s1riykJPbkqs5g4hOOpHM79 umdOB/t+XA32RTeHH9FQIPgFMgQ3nl4b7n/JKMkdYiqmHlk/dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9+G3l6CBoQTOtuhlM4vao/hh8nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTVlYzdkNjgtMGMzNS0z ZWQyLTk0ZmMtYjQ3YzIwOGFiYjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI9mAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYU9V0iX3pTCEdaBstrz/DOOY/P0zdSwsFVq7uMzSbFtMYQTgvWWl4a a+5isqxvJOpEdbruoDl0o95BJEDTOe3ueCQBI1smT8mzarIXT3MoUE6tfS12jWbt 1XShYO8YCLeYMWZcUp30l6qa5S0fFZiLZbZCzeSm4XTYgePxnvQQJQ0tFoJeSBo1 nn87t78ziev4qRKnthjdn6oJIAbYbrJPrGJs88du4c6j8Ty6linHig/pwi6UTNcT 4Cf8mZQ/I7f+T11kpJkNcRPUrMwOjJe4fD7fPWTwJKDnMm9RwJRl1VJe2Ufzc5NX UmZj4Vcb38bH464H0pGBUQN6SDkQjLE= -----END CERTIFICATE-----Generated at Fri Apr 4 08:42:13 2025 by rpki-client