$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa31434b-d455-3716-8753-f1c07991149e.roa File: aa31434b-d455-3716-8753-f1c07991149e.roa (raw, json) Hash identifier: zUbMoecNYixhr8R40nwskD+syZGkvR4aoeAmUWgTwB4= Subject key identifier: 70:34:4B:19:73:CD:F4:27:08:4E:D0:58:CF:5E:B0:EF:60:46:79:5E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C06A7E2536495F296F090 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa31434b-d455-3716-8753-f1c07991149e.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.188.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:06:a7:e2:53:64:95:f2:96:f0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=3883bc80-93db-487f-935b-f4e857be8fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1c:bd:68:f0:63:de:dc:d2:6b:cd:56:d5:63: e7:07:ba:fe:2d:28:24:46:67:6c:f0:7d:8b:29:0b: 34:99:b5:f3:99:b9:9b:22:66:43:8c:b1:61:8d:e8: 8d:12:20:02:38:8b:a7:49:12:ae:e6:ec:8e:6a:e8: 30:0e:bb:3b:0e:b3:c1:08:14:bb:2f:cc:c4:69:b0: 9c:36:89:40:5a:99:81:2a:49:66:4a:d0:f9:2a:c1: 04:7f:cd:85:c1:d1:92:ec:a0:0a:36:f3:fb:c3:b0: 4f:9e:ec:f6:e8:ed:d0:48:e3:5f:c4:9b:c9:a0:e6: ea:f2:75:66:6a:ee:0a:21:51:38:81:1b:44:5f:03: a0:03:7f:4e:79:bf:87:c6:fb:6f:49:62:59:5d:94: 2e:2c:b0:1f:85:9e:06:c4:be:df:00:de:0b:a9:37: f0:57:6b:1e:ac:b1:5c:c6:ea:58:92:1b:50:74:b7: 4a:d1:d9:67:94:c2:07:18:a7:46:cb:83:51:d3:51: c5:80:68:03:b5:0b:f6:5c:78:c1:0c:ce:60:59:28: e7:52:37:33:a1:fd:b1:07:a4:76:16:06:66:5b:4e: aa:a6:6c:d5:8c:c7:a9:6e:66:ff:e3:68:93:c9:7a: 19:9a:50:5d:25:6c:b9:0f:97:1c:39:c8:ac:32:24: f6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:34:4B:19:73:CD:F4:27:08:4E:D0:58:CF:5E:B0:EF:60:46:79:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/aa31434b-d455-3716-8753-f1c07991149e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.188.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:31:e4:9b:8a:fa:11:66:b9:aa:8d:ca:d2:9a:98:04:c1:37: 98:15:d4:68:92:d1:0d:e0:a4:6c:e5:d5:8d:a4:60:66:02:a1: 07:2c:ea:8c:99:2a:26:ef:c7:3f:bc:20:cb:b3:6d:e5:3a:f6: da:6a:26:de:25:74:d8:fe:83:a8:47:c3:7e:7b:d1:e7:bd:34: 28:1a:81:89:48:f4:37:6d:13:bf:89:d0:66:ec:e6:7d:1e:70: ab:19:05:87:ad:f9:e7:9d:6d:63:6f:b3:0e:98:2f:c5:23:2e: 35:ee:4e:c6:6f:e2:67:d6:c8:c6:05:d3:a6:7d:2d:c0:b6:42: 69:c9:9e:71:29:50:8e:0a:fa:ad:8b:3f:3e:a1:8c:fb:dd:c1: a4:a6:0d:3c:68:88:2e:0f:4c:e7:ab:32:15:c8:82:2f:dd:95: 9d:72:f7:f5:f5:c3:8f:66:f2:04:70:c8:77:ec:70:6e:d2:62: 78:01:7a:50:8c:70:87:61:9d:a9:e0:24:ce:84:b8:83:b6:6a: 3f:13:33:81:cc:7c:ff:8c:64:9d:d1:ae:2d:86:77:a3:08:c8: 40:e2:35:89:4b:be:37:bb:27:6c:41:a7:27:88:4d:eb:4e:c6: f7:e6:04:8d:1a:a1:d0:6a:10:c9:c6:fe:3f:c1:f8:69:0d:63: d4:cc:86:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITAan4lNklfKW8JAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk Mzg4M2JjODAtOTNkYi00ODdmLTkzNWItZjRlODU3YmU4ZmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBy9aPBj3tzSa81W1WPnB7r+LSgkRmds8H2L KQs0mbXzmbmbImZDjLFhjeiNEiACOIunSRKu5uyOaugwDrs7DrPBCBS7L8zEabCc NolAWpmBKklmStD5KsEEf82FwdGS7KAKNvP7w7BPnuz26O3QSONfxJvJoObq8nVm au4KIVE4gRtEXwOgA39Oeb+HxvtvSWJZXZQuLLAfhZ4GxL7fAN4LqTfwV2serLFc xupYkhtQdLdK0dlnlMIHGKdGy4NR01HFgGgDtQv2XHjBDM5gWSjnUjczof2xB6R2 FgZmW06qpmzVjMepbmb/42iTyXoZmlBdJWy5D5ccOcisMiT2kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHA0SxlzzfQnCE7QWM9esO9gRnleMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWEzMTQzNGItZDQ1NS0z NzE2LTg3NTMtZjFjMDc5OTExNDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7yQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIx5JuK+hFmuaqNytKamATBN5gV1GiS0Q3gpGzl1Y2kYGYCoQcs6oyZ Kibvxz+8IMuzbeU69tpqJt4ldNj+g6hHw3570ee9NCgagYlI9DdtE7+J0Gbs5n0e cKsZBYet+eedbWNvsw6YL8UjLjXuTsZv4mfWyMYF06Z9LcC2QmnJnnEpUI4K+q2L Pz6hjPvdwaSmDTxoiC4PTOerMhXIgi/dlZ1y9/X1w49m8gRwyHfscG7SYngBelCM cIdhnangJM6EuIO2aj8TM4HMfP+MZJ3Rri2Gd6MIyEDiNYlLvje7J2xBpyeITetO xvfmBI0aodBqEMnG/j/B+GkNY9TMhvU= -----END CERTIFICATE-----Generated at Fri Mar 14 10:47:38 2025 by rpki-client