$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b6b631c9-1d4d-3ea7-8a4c-a0c5635e1014.roa File: b6b631c9-1d4d-3ea7-8a4c-a0c5635e1014.roa (raw, json) Hash identifier: 9kh+SOMZpTCD9UCdnTcpB6hqVlzai17tXKM61Y3xUFw= Subject key identifier: 42:81:1C:60:B1:66:72:8A:FA:62:46:68:8E:8F:A1:DD:A9:C0:C3:89 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C226B698DE48F542F9D00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b6b631c9-1d4d-3ea7-8a4c-a0c5635e1014.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.185.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:22:6b:69:8d:e4:8f:54:2f:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=4ffa271b-05c2-4d3a-8408-1392300d9b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fa:0d:75:09:7a:be:8f:fe:9c:c0:d5:b0:ce: a9:6c:2c:80:2c:fc:75:da:75:33:8b:19:d3:1b:ce: 78:4e:e2:ae:25:4d:47:bc:b7:80:16:ca:ee:dc:28: 6f:00:b0:0f:d7:63:c1:a3:04:f5:b1:15:3e:04:18: b9:c7:6c:c1:03:fb:0e:e0:e9:4b:7b:62:40:a5:b4: 52:7f:e7:43:cd:c5:7f:42:68:c7:01:e0:35:dc:70: fd:3e:6a:fd:00:5f:f4:28:07:3f:fb:c7:2c:57:9c: c1:de:e3:9d:56:5b:cf:f9:81:60:ca:8f:3c:cb:cf: 09:b4:ae:54:a5:6b:01:6c:bf:9f:eb:00:c0:71:7d: cc:ee:bf:45:e4:fa:66:7d:9a:06:82:ab:97:e0:cd: d7:26:e3:26:72:6e:31:42:38:42:0c:fd:f4:bc:2b: 1d:50:60:5a:70:89:e3:4b:6d:d1:08:47:f1:f8:54: 2a:c9:44:40:b8:fb:e4:b8:7d:54:cc:ca:96:c6:ab: 74:d1:e9:e8:a2:68:fd:c9:62:0c:23:30:33:3e:97: ae:84:7d:18:81:ce:77:ce:a0:10:09:cf:27:5f:8c: 5d:50:3b:2e:d1:62:3b:66:b1:ff:5c:49:ec:d8:6f: 21:49:a6:b0:38:8a:e0:47:b4:28:3a:55:2e:f7:67: 06:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:81:1C:60:B1:66:72:8A:FA:62:46:68:8E:8F:A1:DD:A9:C0:C3:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b6b631c9-1d4d-3ea7-8a4c-a0c5635e1014.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.185.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:1d:b0:87:70:ac:bd:76:0b:6f:1e:ad:6b:b9:ba:1c:b7:dd: 95:e0:95:a1:5b:75:02:a6:55:11:2b:48:09:7d:56:04:d3:7a: f5:dc:fc:49:36:f3:a2:49:64:46:6a:0b:98:de:df:86:94:fe: 0a:8e:35:e4:a3:f5:9c:4a:64:e9:e7:7b:25:8c:86:b1:d3:28: d5:fe:58:dc:fa:3c:55:04:2a:f3:04:a9:1d:9c:7e:62:2a:99: 5b:c4:45:1b:a1:76:15:75:61:da:b0:d7:09:3a:90:55:4e:6d: 91:6d:5d:66:7c:6b:5b:a7:0e:89:1a:4a:e7:7f:b2:33:22:ce: 40:02:d2:cd:12:ef:38:14:43:41:83:d0:ad:85:56:93:85:31: ca:e5:21:50:8f:f4:5d:35:19:8a:57:35:af:e6:72:ec:be:9a: 3b:5b:a5:4b:26:a4:4f:ae:ca:a2:37:60:52:dc:4f:2c:aa:8c: 72:ed:3d:ee:c4:4e:8c:db:87:e4:f6:bf:b8:76:82:7d:4c:bf: b8:34:3f:f1:65:9e:23:a0:1c:4b:87:6c:c3:8a:14:ef:52:92: 94:a4:7a:ae:41:6f:45:57:e3:3b:77:9f:c8:79:d8:a2:db:ce: 6f:7b:cf:b6:f0:f4:8c:ab:46:57:67:c2:bc:d8:b5:15:ef:88: 30:7b:3c:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITCJraY3kj1QvnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NGZmYTI3MWItMDVjMi00ZDNhLTg0MDgtMTM5MjMwMGQ5Yjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPoNdQl6vo/+nMDVsM6pbCyALPx12nUzixnT G854TuKuJU1HvLeAFsru3ChvALAP12PBowT1sRU+BBi5x2zBA/sO4OlLe2JApbRS f+dDzcV/QmjHAeA13HD9Pmr9AF/0KAc/+8csV5zB3uOdVlvP+YFgyo88y88JtK5U pWsBbL+f6wDAcX3M7r9F5PpmfZoGgquX4M3XJuMmcm4xQjhCDP30vCsdUGBacInj S23RCEfx+FQqyURAuPvkuH1UzMqWxqt00enoomj9yWIMIzAzPpeuhH0Ygc53zqAQ Cc8nX4xdUDsu0WI7ZrH/XEns2G8hSaawOIrgR7QoOlUu92cG6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKBHGCxZnKK+mJGaI6Pod2pwMOJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjZiNjMxYzktMWQ0ZC0z ZWE3LThhNGMtYTBjNTYzNWUxMDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7mQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgdsIdwrL12C28erWu5uhy33ZXglaFbdQKmVRErSAl9VgTTevXc/Ek2 86JJZEZqC5je34aU/gqONeSj9ZxKZOnneyWMhrHTKNX+WNz6PFUEKvMEqR2cfmIq mVvERRuhdhV1Ydqw1wk6kFVObZFtXWZ8a1unDokaSud/sjMizkAC0s0S7zgUQ0GD 0K2FVpOFMcrlIVCP9F01GYpXNa/mcuy+mjtbpUsmpE+uyqI3YFLcTyyqjHLtPe7E Tozbh+T2v7h2gn1Mv7g0P/FlniOgHEuHbMOKFO9SkpSkeq5Bb0VX4zt3n8h52KLb zm97z7bw9IyrRldnwrzYtRXviDB7PNc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:55 2025 by rpki-client