$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b9a224d6-0db9-363e-95dd-dd71f107722c.roa File: b9a224d6-0db9-363e-95dd-dd71f107722c.roa (raw, json) Hash identifier: DqRH4tH5llcx6j3RFGwt0gJCloeqHgjiE0y3LhmSZwU= Subject key identifier: 40:A8:7E:D2:28:33:3B:E7:FC:B1:8E:69:71:C2:F3:B5:91:28:C4:97 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C13A6CA51F97C2B999400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b9a224d6-0db9-363e-95dd-dd71f107722c.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.195.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:13:a6:ca:51:f9:7c:2b:99:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=223510be-03b6-4e59-8d78-e1d40b94fc45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d4:f5:cd:03:45:8c:d6:49:74:2a:44:75:ed: 00:46:59:64:d2:93:c0:68:2d:1e:b4:fa:c1:b1:90: b2:28:97:c7:0b:f0:47:d2:44:2f:3f:24:c8:da:f9: 98:65:0a:af:5d:82:79:bf:64:a7:9a:a8:37:40:0d: 08:23:6c:6d:43:72:f7:d9:15:73:c4:88:04:04:f0: 63:cd:ec:1d:25:74:fa:ab:5d:60:bf:38:60:c3:07: cf:d0:e8:3a:3f:09:4b:50:cb:b4:71:68:02:47:4f: 1d:04:d0:31:9b:82:79:14:1d:4e:36:cf:c1:11:60: 7e:4b:90:15:1d:c2:0c:2f:95:c0:56:8a:71:57:b2: f4:60:34:ab:0e:de:45:27:8f:c2:63:ca:f8:a6:12: 9d:e4:4a:83:5f:c3:89:22:cc:8c:94:10:d1:a3:72: 8e:bb:35:5c:cf:ae:51:78:98:01:52:8e:7c:0a:3f: c7:54:f5:7b:a3:8b:22:c6:b7:f0:39:0a:85:26:3c: dc:64:aa:35:bf:c8:c0:ef:6b:51:00:29:34:7f:ce: aa:5e:cd:9f:19:4e:41:65:fd:ac:8f:bb:77:53:1f: 3d:e0:e7:82:25:dd:7a:ac:ed:55:03:f7:cb:8b:80: 77:6d:9b:ca:2a:16:62:82:b6:66:23:f2:d2:cc:cf: 05:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A8:7E:D2:28:33:3B:E7:FC:B1:8E:69:71:C2:F3:B5:91:28:C4:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b9a224d6-0db9-363e-95dd-dd71f107722c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.195.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:bb:ce:d0:f6:ce:bc:99:39:aa:da:d8:86:52:d4:84:25:3c: a3:84:5b:c3:ed:33:77:b2:25:6b:3c:56:36:7b:ef:8e:e7:78: 03:61:00:fd:08:d1:f1:a5:a8:02:30:3e:37:fb:a5:e8:ec:a7: 36:96:1a:04:20:34:d0:a4:57:d9:a3:ab:f1:a1:bb:4c:6a:06: 2d:fb:1c:6f:bb:cc:65:9f:02:fa:26:2d:9b:a4:25:79:c0:b1: f6:34:59:90:6c:73:8c:bf:10:2f:ab:b7:4b:78:7b:0f:22:fc: 74:76:79:18:bc:3e:a0:8e:04:d7:c5:cd:7d:a4:62:ef:64:70: ec:9f:fb:ce:6e:93:6a:a6:0b:c3:fc:9a:5e:69:93:82:17:64: e2:79:3d:97:22:c1:45:f3:a6:8c:f2:54:40:22:d9:b7:14:b0: ff:a1:5c:f4:8d:83:e5:f4:21:be:99:5b:38:62:6f:4a:c2:45: 68:65:31:25:31:91:e1:b5:bc:b9:28:73:44:35:ee:a7:46:58: 83:65:e0:94:6c:82:be:26:38:68:0a:3e:e4:48:b0:ed:9d:0f: 71:a8:72:69:b4:f7:60:d1:1d:eb:f9:81:d4:ee:ba:26:c6:c4: cb:f1:f8:90:19:38:e0:9a:87:c7:15:7e:8c:cb:2d:f7:a9:8c: 9e:37:b7:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITBOmylH5fCuZlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MjIzNTEwYmUtMDNiNi00ZTU5LThkNzgtZTFkNDBiOTRmYzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktT1zQNFjNZJdCpEde0ARllk0pPAaC0etPrB sZCyKJfHC/BH0kQvPyTI2vmYZQqvXYJ5v2Snmqg3QA0II2xtQ3L32RVzxIgEBPBj zewdJXT6q11gvzhgwwfP0Og6PwlLUMu0cWgCR08dBNAxm4J5FB1ONs/BEWB+S5AV HcIML5XAVopxV7L0YDSrDt5FJ4/CY8r4phKd5EqDX8OJIsyMlBDRo3KOuzVcz65R eJgBUo58Cj/HVPV7o4sixrfwOQqFJjzcZKo1v8jA72tRACk0f86qXs2fGU5BZf2s j7t3Ux894OeCJd16rO1VA/fLi4B3bZvKKhZigrZmI/LSzM8FHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECoftIoMzvn/LGOaXHC87WRKMSXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjlhMjI0ZDYtMGRiOS0z NjNlLTk1ZGQtZGQ3MWYxMDc3MjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8PAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACG7ztD2zryZOara2IZS1IQlPKOEW8PtM3eyJWs8VjZ7747neANhAP0I 0fGlqAIwPjf7pejspzaWGgQgNNCkV9mjq/Ghu0xqBi37HG+7zGWfAvomLZukJXnA sfY0WZBsc4y/EC+rt0t4ew8i/HR2eRi8PqCOBNfFzX2kYu9kcOyf+85uk2qmC8P8 ml5pk4IXZOJ5PZciwUXzpozyVEAi2bcUsP+hXPSNg+X0Ib6ZWzhib0rCRWhlMSUx keG1vLkoc0Q17qdGWINl4JRsgr4mOGgKPuRIsO2dD3Gocmm092DRHev5gdTuuibG xMvx+JAZOOCah8cVfozLLfepjJ43t/8= -----END CERTIFICATE-----Generated at Fri Apr 4 21:42:49 2025 by rpki-client