$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5ce5c57-b26e-3482-9648-a2053fc50a73.roa File: b5ce5c57-b26e-3482-9648-a2053fc50a73.roa (raw, json) Hash identifier: cX3BEDfXsf2wsSNip94TzRQf7ZAqg2ja32s+bNWe1kM= Subject key identifier: 63:77:DC:52:60:CC:E4:17:CD:9F:99:61:7A:A6:5B:54:5B:97:D8:94 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BB17DAD3ECB1CD0297B80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5ce5c57-b26e-3482-9648-a2053fc50a73.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.236.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:b1:7d:ad:3e:cb:1c:d0:29:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=c4c8ee6e-dbe8-4ead-915e-8abf4ada686d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ba:87:2d:d3:4d:f8:6c:e0:37:6b:54:ef:a7: 9d:55:48:81:6b:52:b3:e0:6b:c3:f7:15:6f:95:4d: 52:d9:e3:38:f9:71:ba:4c:36:ba:eb:cb:b4:27:f5: a6:ca:83:77:5f:00:5e:10:4a:0a:74:09:2b:c9:1e: 35:b9:65:ae:ba:7c:03:d1:38:b9:f2:66:fd:ff:31: 36:1e:7d:5b:fa:3e:33:eb:c1:e7:d6:c5:53:3d:d4: d3:d2:37:06:38:ff:98:b4:3d:83:cd:f8:35:cc:46: de:eb:68:97:40:eb:b5:94:08:d7:ad:c2:8e:b3:27: f3:73:80:82:02:1f:38:dd:4c:2d:8a:9c:42:32:e7: 90:ae:a9:51:14:b1:c9:33:61:50:e7:fc:94:03:f0: 9e:4c:a2:f8:d1:17:64:7b:d5:0c:b0:e8:0c:6b:7e: ae:0f:be:ec:2f:11:43:d4:d5:08:7b:98:f1:49:a9: 81:6c:5a:3a:38:ab:07:d8:bc:52:8e:1d:55:c4:b3: d4:79:d8:d7:80:ab:3c:53:77:9c:0c:36:a8:a9:1f: b9:2f:26:84:66:f0:96:be:9a:b1:fb:56:29:8c:06: 14:36:8d:0e:bd:de:d1:3d:cf:e2:05:d3:33:fb:ad: 2f:06:eb:1f:9d:15:df:bd:9d:3d:3a:69:df:10:84: 63:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:77:DC:52:60:CC:E4:17:CD:9F:99:61:7A:A6:5B:54:5B:97:D8:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b5ce5c57-b26e-3482-9648-a2053fc50a73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.236.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:bc:7f:d1:03:19:f6:2d:3e:ab:ac:6a:52:85:62:f3:f9:cb: f1:fb:38:47:00:b3:86:da:17:a6:25:cb:fd:76:41:1e:97:58: dd:d1:4b:86:5f:41:80:7f:7f:a9:93:35:5e:c0:61:5d:53:3d: 61:db:b4:20:e0:2b:b2:08:42:c5:3c:8e:10:ed:bf:23:27:79: b9:62:1a:02:03:ec:1a:4c:0e:87:98:48:26:98:75:95:2d:e0: 54:8d:33:4c:b5:29:03:2e:a3:97:d3:57:b3:88:7a:04:32:54: 6e:70:f4:2e:8c:a3:58:bd:1e:b4:f2:0d:ee:ec:c4:06:10:ec: 91:bc:df:06:aa:8c:97:f1:e3:d5:77:84:d0:8c:5a:7e:a0:c3: 66:ba:3e:d2:4d:22:85:93:c8:14:a0:ad:0f:45:ef:58:26:2d: 4c:96:d0:f0:57:54:69:6b:04:0a:ed:e6:f4:20:eb:73:4b:03: cb:dc:d9:67:7a:5c:c3:0e:01:c2:df:69:6f:2e:6b:cb:1d:0e: 78:88:f2:c1:da:4a:d5:3c:9c:15:96:1a:f4:0d:36:82:a2:f1: 2f:31:7c:26:03:03:46:16:23:06:24:d1:dd:c9:e8:31:45:56: f3:24:ff:fe:55:69:ae:c9:ad:2c:4d:e6:b0:c4:86:66:cd:cb: 79:10:20:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS7F9rT7LHNApe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YzRjOGVlNmUtZGJlOC00ZWFkLTkxNWUtOGFiZjRhZGE2ODZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bqHLdNN+GzgN2tU76edVUiBa1Kz4GvD9xVv lU1S2eM4+XG6TDa668u0J/WmyoN3XwBeEEoKdAkryR41uWWuunwD0Ti58mb9/zE2 Hn1b+j4z68Hn1sVTPdTT0jcGOP+YtD2Dzfg1zEbe62iXQOu1lAjXrcKOsyfzc4CC Ah843UwtipxCMueQrqlRFLHJM2FQ5/yUA/CeTKL40Rdke9UMsOgMa36uD77sLxFD 1NUIe5jxSamBbFo6OKsH2LxSjh1VxLPUedjXgKs8U3ecDDaoqR+5LyaEZvCWvpqx +1YpjAYUNo0Ovd7RPc/iBdMz+60vBusfnRXfvZ09OmnfEIRjFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGN33FJgzOQXzZ+ZYXqmW1Rbl9iUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjVjZTVjNTctYjI2ZS0z NDgyLTk2NDgtYTIwNTNmYzUwYTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+yAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGC8f9EDGfYtPqusalKFYvP5y/H7OEcAs4baF6Yly/12QR6XWN3RS4Zf QYB/f6mTNV7AYV1TPWHbtCDgK7IIQsU8jhDtvyMnebliGgID7BpMDoeYSCaYdZUt 4FSNM0y1KQMuo5fTV7OIegQyVG5w9C6Mo1i9HrTyDe7sxAYQ7JG83waqjJfx49V3 hNCMWn6gw2a6PtJNIoWTyBSgrQ9F71gmLUyW0PBXVGlrBArt5vQg63NLA8vc2Wd6 XMMOAcLfaW8ua8sdDniI8sHaStU8nBWWGvQNNoKi8S8xfCYDA0YWIwYk0d3J6DFF VvMk//5Vaa7JrSxN5rDEhmbNy3kQIOM= -----END CERTIFICATE-----Generated at Fri Apr 4 18:08:49 2025 by rpki-client