$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ae2d0ba3-8909-313b-9a92-4fa056328564.roa File: ae2d0ba3-8909-313b-9a92-4fa056328564.roa (raw, json) Hash identifier: U9QsU1BtAmnO4Wr7hFnyjhdjtlprriWyzhMw/5otUro= Subject key identifier: A0:0C:9C:38:14:6C:D0:50:A8:2F:C2:BC:BD:CF:41:6F:EF:23:AF:34 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C001F86F93EAB9BE47140 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ae2d0ba3-8909-313b-9a92-4fa056328564.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.229.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:00:1f:86:f9:3e:ab:9b:e4:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=c63252b7-91b9-40bb-bcf4-3ae0dda6e897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:62:07:fb:1f:a0:58:f5:d0:eb:8f:40:51:97: 23:c2:cb:73:6f:dd:ff:63:91:d5:b2:4d:0c:5a:66: e3:2e:b7:cd:0e:06:ae:b3:d1:93:d6:98:ac:9d:13: f8:f4:48:00:e3:8e:b3:43:e3:37:f8:6d:6e:3d:f5: fb:83:66:0c:e2:62:6f:73:f0:5b:c6:e2:5c:d5:94: 31:b5:6b:3e:33:b6:34:4a:51:ba:f4:5e:82:6f:ce: 77:47:eb:56:bd:96:58:13:b8:f2:dc:52:58:7f:6a: 4f:8f:2c:53:13:80:bc:32:5e:a8:c2:e5:f1:e8:a6: fe:82:29:a0:42:35:32:03:d0:3a:c0:40:29:24:fa: b1:bf:d8:0e:d0:48:14:1c:6d:64:cc:21:5e:39:33: 40:d9:2b:72:b2:0b:cc:01:63:58:36:c5:4a:a3:cc: 53:70:84:81:b3:d5:e2:c9:8e:d5:66:4e:26:fb:f2: af:04:61:9e:1d:d8:e4:3e:5b:04:62:62:e7:c9:8e: e5:fa:d4:54:c0:16:b9:65:17:a7:fe:6f:fb:05:cc: 1a:a7:37:e4:22:f8:ae:b3:34:76:9e:11:b3:ca:57: 1b:1b:00:d5:d0:54:66:f9:14:2a:13:55:c7:f7:e0: 52:ad:9f:65:52:23:04:6a:92:32:6a:96:06:a7:5d: bc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0C:9C:38:14:6C:D0:50:A8:2F:C2:BC:BD:CF:41:6F:EF:23:AF:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ae2d0ba3-8909-313b-9a92-4fa056328564.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.229.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:a0:af:84:a6:a2:d2:1e:f6:c4:94:c0:a0:a6:62:85:a0:68: ad:05:d8:ed:7c:f9:e2:33:13:f8:68:f8:24:b5:92:17:ea:8c: 31:44:5d:47:7c:21:ff:3c:64:22:5f:6b:6b:ad:76:d0:b3:e2: fb:f5:bd:a6:10:41:45:8c:0f:56:4e:19:ec:5d:d9:88:4b:dc: 4c:44:66:94:e6:88:97:53:1d:4b:d9:c8:f7:b8:a1:75:50:ca: d6:bc:fb:5a:56:64:8c:ef:af:5d:3f:37:1d:99:87:2b:31:61: 46:9a:23:bb:ba:66:1d:04:fd:2f:9a:78:86:e0:cb:28:82:f9: 24:72:5a:62:76:ad:98:cb:bb:b9:b8:e4:ca:e4:06:7b:04:8a: ee:46:f5:16:67:1e:97:b2:6d:36:c7:0d:f8:f4:76:ae:35:69: 83:76:0d:b5:a3:83:a2:60:bf:4c:d5:d4:fa:6f:75:67:47:8d: 92:65:77:07:ae:46:39:e9:22:21:80:e8:f7:51:87:f5:8a:d8: 25:80:b5:4c:bf:e3:0c:7b:51:30:06:ad:f6:82:6e:bc:a8:1f: f6:91:54:b0:47:96:fe:d6:7a:d7:16:cb:0e:7d:9e:d7:58:1a: 64:8e:67:31:be:c2:7e:8d:1c:39:6d:fd:9a:ad:a2:5c:af:f5: 93:6f:95:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITAAfhvk+q5vkcUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YzYzMjUyYjctOTFiOS00MGJiLWJjZjQtM2FlMGRkYTZlODk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2IH+x+gWPXQ649AUZcjwstzb93/Y5HVsk0M WmbjLrfNDgaus9GT1pisnRP49EgA446zQ+M3+G1uPfX7g2YM4mJvc/BbxuJc1ZQx tWs+M7Y0SlG69F6Cb853R+tWvZZYE7jy3FJYf2pPjyxTE4C8Ml6owuXx6Kb+gimg QjUyA9A6wEApJPqxv9gO0EgUHG1kzCFeOTNA2StysgvMAWNYNsVKo8xTcISBs9Xi yY7VZk4m+/KvBGGeHdjkPlsEYmLnyY7l+tRUwBa5ZRen/m/7BcwapzfkIviuszR2 nhGzylcbGwDV0FRm+RQqE1XH9+BSrZ9lUiMEapIyapYGp128FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAMnDgUbNBQqC/CvL3PQW/vI680MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWUyZDBiYTMtODkwOS0z MTNiLTlhOTItNGZhMDU2MzI4NTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+UAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSgr4SmotIe9sSUwKCmYoWgaK0F2O18+eIzE/ho+CS1khfqjDFEXUd8 If88ZCJfa2utdtCz4vv1vaYQQUWMD1ZOGexd2YhL3ExEZpTmiJdTHUvZyPe4oXVQ yta8+1pWZIzvr10/Nx2ZhysxYUaaI7u6Zh0E/S+aeIbgyyiC+SRyWmJ2rZjLu7m4 5MrkBnsEiu5G9RZnHpeybTbHDfj0dq41aYN2DbWjg6Jgv0zV1PpvdWdHjZJldweu RjnpIiGA6PdRh/WK2CWAtUy/4wx7UTAGrfaCbryoH/aRVLBHlv7WetcWyw59ntdY GmSOZzG+wn6NHDlt/Zqtolyv9ZNvlYo= -----END CERTIFICATE-----Generated at Fri Apr 4 21:45:42 2025 by rpki-client