$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a8ad1a2a-df99-314b-a8e9-eb6994c3ce9f.roa File: a8ad1a2a-df99-314b-a8e9-eb6994c3ce9f.roa (raw, json) Hash identifier: GHELAU0yRVeptHNho4pgn9tRmJa7mLil2lkTczAz1Is= Subject key identifier: 56:3C:73:58:02:5F:2A:8B:A4:98:58:AC:42:75:F8:45:9F:A6:2D:A3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BFD98CA0D2758C803E540 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a8ad1a2a-df99-314b-a8e9-eb6994c3ce9f.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.225.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:fd:98:ca:0d:27:58:c8:03:e5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=81d4fae3-1b3d-4198-9857-603f18e20e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:cf:e5:5e:fb:f2:eb:95:95:8a:e8:03:29:76: de:0b:f8:9d:62:2c:16:78:e4:c1:73:32:74:6b:8a: d3:54:98:f1:e4:f1:00:ca:f7:b2:9a:07:14:f8:2e: 40:d7:82:34:32:7a:1f:3a:cb:e9:b7:7f:3c:55:c7: 71:48:52:af:81:3a:7e:d4:05:28:11:9d:48:48:6e: 89:ec:cc:03:0d:64:12:de:ba:9c:0d:11:9a:14:88: 11:c1:c8:23:0d:c9:23:f4:25:62:55:c1:2c:18:40: de:3b:fb:c9:87:16:d9:63:62:04:03:1d:21:6b:30: cd:8d:21:7a:be:95:d7:23:6c:13:99:e7:df:b4:2b: 79:e6:04:ed:12:40:79:00:2b:ea:f7:f6:cf:4b:44: cc:53:e3:a6:48:88:18:5f:88:fa:9e:fa:46:f5:fd: 18:45:87:f1:04:41:ad:10:6e:ae:10:16:67:6b:d8: 9f:6c:d0:e8:16:a8:c3:ab:84:a4:25:4d:75:d5:e7: f7:39:1e:1b:63:3d:66:c2:22:89:33:b9:9e:1c:52: e0:b6:35:60:de:0e:39:69:b6:6c:7f:2f:3c:a5:06: 30:89:ea:95:fe:c3:fb:e9:b3:be:a7:98:86:e9:13: f2:35:b5:3e:1e:bf:b5:ca:2f:59:19:d0:77:67:c7: ce:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:3C:73:58:02:5F:2A:8B:A4:98:58:AC:42:75:F8:45:9F:A6:2D:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a8ad1a2a-df99-314b-a8e9-eb6994c3ce9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.225.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:46:96:8a:76:68:09:24:8e:38:ea:cc:80:a7:dc:72:e5:8a: dc:b9:d5:c3:6a:38:ce:03:68:6a:b0:60:9d:e4:b7:50:9e:20: db:26:89:b5:c4:c7:9d:56:44:ff:a5:b7:5d:20:ac:ff:03:06: 61:98:21:c3:77:8b:0b:20:10:00:e7:30:03:bf:03:d9:dc:24: da:d1:9f:b1:44:25:3e:0b:7b:93:86:6e:f8:fc:5b:b9:bc:08: 21:f2:04:60:7f:39:ed:03:b4:53:68:ae:dd:51:75:0b:0b:01: 7b:b2:cb:c7:4f:aa:a3:9d:f8:3b:d1:ff:75:89:87:c3:78:15: 19:04:7c:a9:a6:2b:16:90:82:63:f0:30:cf:53:f8:28:8e:b6: 56:01:25:ad:d3:10:59:00:8b:90:ac:06:73:bd:01:5b:74:db: 60:1b:f9:a3:fc:6f:64:6b:c2:d1:7d:e0:b6:59:67:de:01:3a: b3:0a:43:a0:6c:1e:04:84:b9:8f:21:e2:cf:a7:fa:48:ed:c8: 79:81:e5:c5:d9:f2:33:03:a7:43:6e:3f:7d:da:cb:c4:e2:26: e4:50:31:0c:9d:c4:8c:cd:80:4c:18:9b:f4:d0:18:46:5a:68: 43:92:a1:a8:1c:58:3e:91:d0:27:a8:2b:29:77:78:f3:18:18: de:d3:6f:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS/2Yyg0nWMgD5UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ODFkNGZhZTMtMWIzZC00MTk4LTk4NTctNjAzZjE4ZTIwZTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgM/lXvvy65WViugDKXbeC/idYiwWeOTBczJ0 a4rTVJjx5PEAyveymgcU+C5A14I0MnofOsvpt388VcdxSFKvgTp+1AUoEZ1ISG6J 7MwDDWQS3rqcDRGaFIgRwcgjDckj9CViVcEsGEDeO/vJhxbZY2IEAx0hazDNjSF6 vpXXI2wTmefftCt55gTtEkB5ACvq9/bPS0TMU+OmSIgYX4j6nvpG9f0YRYfxBEGt EG6uEBZna9ifbNDoFqjDq4SkJU111ef3OR4bYz1mwiKJM7meHFLgtjVg3g45abZs fy88pQYwieqV/sP76bO+p5iG6RPyNbU+Hr+1yi9ZGdB3Z8fOKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFY8c1gCXyqLpJhYrEJ1+EWfpi2jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYThhZDFhMmEtZGY5OS0z MTRiLWE4ZTktZWI2OTk0YzNjZTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+HQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxGlop2aAkkjjjqzICn3HLlity51cNqOM4DaGqwYJ3kt1CeINsmibXE x51WRP+lt10grP8DBmGYIcN3iwsgEADnMAO/A9ncJNrRn7FEJT4Le5OGbvj8W7m8 CCHyBGB/Oe0DtFNort1RdQsLAXuyy8dPqqOd+DvR/3WJh8N4FRkEfKmmKxaQgmPw MM9T+CiOtlYBJa3TEFkAi5CsBnO9AVt022Ab+aP8b2RrwtF94LZZZ94BOrMKQ6Bs HgSEuY8h4s+n+kjtyHmB5cXZ8jMDp0NuP33ay8TiJuRQMQydxIzNgEwYm/TQGEZa aEOSoagcWD6R0CeoKyl3ePMYGN7Tbzs= -----END CERTIFICATE-----Generated at Fri Apr 4 21:03:53 2025 by rpki-client