$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b2678a67-8ef4-3062-adc8-762daaa2d576.roa File: b2678a67-8ef4-3062-adc8-762daaa2d576.roa (raw, json) Hash identifier: T3+34wtsUCiUCUdcIQlvvQ6zDygkx/xartM6Pu+kkjs= Subject key identifier: F0:37:23:E5:0E:B4:9D:91:EE:04:65:EE:2B:08:31:9F:D6:74:C8:9F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BFCF4010E2AD9A2350680 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b2678a67-8ef4-3062-adc8-762daaa2d576.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.203.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:fc:f4:01:0e:2a:d9:a2:35:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=3f4e0fab-e399-4107-b15e-adf2eb2ebd44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:9a:fe:4f:0e:03:b1:81:3b:18:58:5e:e7:e8: 73:71:12:b5:2b:c0:70:8f:16:b1:e4:e3:c8:08:c7: 9c:36:ed:11:ca:df:61:43:9e:da:be:f3:19:ea:50: 36:cb:ca:fc:b9:1d:08:16:00:d0:10:0e:ad:56:6e: f9:06:0b:01:ed:d3:10:48:1d:06:52:f4:27:e0:a1: 82:81:47:81:69:a6:ee:07:aa:d3:18:d0:b3:79:6a: a5:2e:7c:27:7c:8e:f0:ce:46:d7:29:2a:d8:e9:85: 48:1c:d0:d9:06:ed:9c:0c:d7:62:4f:51:9e:e9:f0: 19:43:7d:d3:35:6a:4e:81:95:02:f7:c2:bf:57:15: 05:0a:44:e2:c1:94:92:11:2b:9f:6e:f0:6e:0d:29: a4:49:22:50:4a:b9:81:8e:17:62:5d:ac:68:b8:38: 53:b6:fa:ef:d9:03:69:76:48:9d:e8:9c:2f:ac:9e: f5:fa:24:b5:5e:db:93:6d:f3:a1:a6:95:02:e4:ef: fe:2c:9a:ed:69:c8:32:6a:2b:3b:c1:8d:ad:c1:44: 2a:e7:41:50:89:b6:5a:45:45:99:f6:25:3d:72:f4: 41:97:e2:12:32:7e:41:bf:5c:4e:fd:d2:66:dc:7c: 24:e2:9b:c1:b4:e6:3c:7c:13:68:55:b7:d0:96:88: a5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:37:23:E5:0E:B4:9D:91:EE:04:65:EE:2B:08:31:9F:D6:74:C8:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b2678a67-8ef4-3062-adc8-762daaa2d576.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.203.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:1a:42:37:9b:5b:f4:c8:78:80:0c:01:f8:43:94:e7:6a:c5: f4:af:b5:ed:e6:d6:56:28:18:3a:86:0b:4e:a7:ac:5b:1a:8d: 8f:d1:59:76:d7:02:74:e7:df:72:d4:c6:13:22:2b:4b:a0:4a: 36:9f:7e:3b:a7:c1:44:5c:be:dd:d5:da:2d:f7:46:53:3d:fc: 41:f1:72:3c:b9:90:6b:f4:1a:eb:69:e5:8e:6b:ec:b5:c2:e4: d7:4a:d9:6e:06:6f:84:e8:a7:79:2c:a4:f0:80:36:32:7b:cf: a2:89:42:86:d4:47:6d:9c:af:2e:3a:25:f3:e4:ab:2e:33:53: 82:d0:e5:ca:bd:5a:d5:b2:1c:25:16:d4:0e:e3:7d:04:22:56: 2e:aa:32:f3:55:18:0f:51:4e:c6:c4:df:64:a5:13:25:04:e9: a1:ab:d3:33:b0:36:bf:2a:04:7a:a7:c0:96:15:d5:ef:5c:13: 7d:b7:fd:a3:23:c4:b3:5c:da:98:10:3c:27:1a:fc:0f:a8:e7: 13:56:35:ee:3b:ff:4f:18:9b:98:17:c1:00:0f:3a:7c:1d:c9: 83:a9:61:d6:fa:10:1b:d1:b3:2a:68:59:5c:00:8c:0d:08:99: 57:f1:cf:65:5c:6a:cb:f5:53:f3:99:29:08:25:0d:d6:3a:a5: 29:f1:c2:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS/z0AQ4q2aI1BoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk M2Y0ZTBmYWItZTM5OS00MTA3LWIxNWUtYWRmMmViMmViZDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/pr+Tw4DsYE7GFhe5+hzcRK1K8Bwjxax5OPI CMecNu0Ryt9hQ57avvMZ6lA2y8r8uR0IFgDQEA6tVm75BgsB7dMQSB0GUvQn4KGC gUeBaabuB6rTGNCzeWqlLnwnfI7wzkbXKSrY6YVIHNDZBu2cDNdiT1Ge6fAZQ33T NWpOgZUC98K/VxUFCkTiwZSSESufbvBuDSmkSSJQSrmBjhdiXaxouDhTtvrv2QNp dkid6JwvrJ71+iS1XtuTbfOhppUC5O/+LJrtacgyais7wY2twUQq50FQibZaRUWZ 9iU9cvRBl+ISMn5Bv1xO/dJm3Hwk4pvBtOY8fBNoVbfQloilmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPA3I+UOtJ2R7gRl7isIMZ/WdMifMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjI2NzhhNjctOGVmNC0z MDYyLWFkYzgtNzYyZGFhYTJkNTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI8vQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0aQjebW/TIeIAMAfhDlOdqxfSvte3m1lYoGDqGC06nrFsajY/RWXbX AnTn33LUxhMiK0ugSjaffjunwURcvt3V2i33RlM9/EHxcjy5kGv0Gutp5Y5r7LXC 5NdK2W4Gb4Top3kspPCANjJ7z6KJQobUR22cry46JfPkqy4zU4LQ5cq9WtWyHCUW 1A7jfQQiVi6qMvNVGA9RTsbE32SlEyUE6aGr0zOwNr8qBHqnwJYV1e9cE323/aMj xLNc2pgQPCca/A+o5xNWNe47/08Ym5gXwQAPOnwdyYOpYdb6EBvRsypoWVwAjA0I mVfxz2Vcasv1U/OZKQglDdY6pSnxwiM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:10 2025 by rpki-client