$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b9e0a711-99b9-38e8-a04a-c4dfe1c9b21f.roa File: b9e0a711-99b9-38e8-a04a-c4dfe1c9b21f.roa (raw, json) Hash identifier: KpAScg8m0+FzeUap/+HaM8I3n+sWGOSN4TS1DVmIP1k= Subject key identifier: 85:39:B4:C9:80:C8:97:D3:CA:34:8A:30:02:19:59:EE:43:B5:03:A3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BE4ACCE9C3481B2F9CAC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b9e0a711-99b9-38e8-a04a-c4dfe1c9b21f.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.190.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:e4:ac:ce:9c:34:81:b2:f9:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=65f4c9db-639e-4035-b9f9-62365d050667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5b:58:81:ad:d6:19:66:28:3e:db:47:fa:7c: 32:b9:58:09:3f:fb:51:08:80:5f:cd:89:e6:e0:80: 42:7d:ca:55:8f:5f:d2:51:02:fa:c8:e6:9e:41:12: cf:d7:20:2c:0e:18:09:45:24:af:60:5e:ca:05:98: 33:49:c6:bc:18:49:d3:ac:98:28:8f:a3:f3:84:07: 36:d5:0b:da:72:9a:60:82:0d:fd:29:f2:68:b9:ca: 15:f9:1f:4b:c7:da:a0:f4:62:13:01:77:4e:b0:3e: a7:81:c4:fc:a9:36:16:78:ce:12:55:c3:cc:86:89: f9:9f:44:db:f5:1b:68:5c:0f:a2:b3:d3:76:df:a5: b3:e0:9e:94:6e:3d:98:f8:f1:f0:56:de:c9:6e:ef: 2c:9b:74:29:e2:8d:e6:ff:68:1f:6b:35:25:9d:5a: 3c:aa:c5:76:33:e3:d2:be:c3:bf:fa:50:cd:8c:79: c8:b8:3c:1e:09:4b:ea:0d:3c:23:22:98:dc:50:97: 85:2c:6a:49:de:d2:15:55:6a:95:b6:27:d2:7a:d1: 39:51:13:c8:1d:a3:6b:3f:50:61:00:b5:65:9d:fc: 8d:b3:61:5a:db:f8:ff:d4:21:5b:21:ba:4b:a2:c4: fb:c3:76:5d:20:5e:9b:15:3a:23:ae:2a:fd:39:4c: e1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:39:B4:C9:80:C8:97:D3:CA:34:8A:30:02:19:59:EE:43:B5:03:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b9e0a711-99b9-38e8-a04a-c4dfe1c9b21f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.190.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:27:71:37:45:87:2d:e5:0d:f4:24:0a:76:a8:04:ea:49:d2: 43:85:40:06:3d:01:96:60:2a:de:48:16:7e:7e:eb:c6:0f:fa: 2f:0e:3f:86:0f:e5:3c:55:00:d2:ed:91:53:f6:83:a1:15:f1: 92:2d:33:6f:fe:40:fd:a2:6b:dd:88:95:22:4e:f6:03:0a:96: 28:40:68:df:77:c7:1b:f3:9e:2b:fb:e0:54:bf:65:e7:06:70: cb:5a:93:bf:52:ef:07:49:c8:a6:2d:73:29:c9:c9:a1:69:89: 47:25:da:3a:27:7d:e1:80:b8:e7:dd:04:07:a3:a5:4d:10:68: 40:28:6f:58:40:6d:66:ce:ec:5e:66:21:b9:e4:c0:7c:e1:e2: 8a:0e:40:85:53:aa:b3:ea:a1:99:01:f3:ce:d4:e4:fd:9e:84: a1:eb:29:da:bb:54:4d:3f:73:cb:b7:3b:84:60:df:a9:a6:eb: cd:38:fd:a3:ca:4e:0a:88:db:aa:10:c0:d5:b8:9a:9d:80:fd: de:f2:6a:fe:12:f4:38:49:d6:ae:69:61:73:ed:9f:75:85:16: 76:07:df:eb:58:33:7f:5a:ab:fb:4f:77:92:6f:cf:18:20:cf: ba:99:6c:a1:93:ea:da:f2:38:3f:cc:36:25:f4:17:2a:60:e7: 98:e9:48:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+Sszpw0gbL5ysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NjVmNGM5ZGItNjM5ZS00MDM1LWI5ZjktNjIzNjVkMDUwNjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFtYga3WGWYoPttH+nwyuVgJP/tRCIBfzYnm 4IBCfcpVj1/SUQL6yOaeQRLP1yAsDhgJRSSvYF7KBZgzSca8GEnTrJgoj6PzhAc2 1Qvacppggg39KfJoucoV+R9Lx9qg9GITAXdOsD6ngcT8qTYWeM4SVcPMhon5n0Tb 9RtoXA+is9N236Wz4J6Ubj2Y+PHwVt7Jbu8sm3Qp4o3m/2gfazUlnVo8qsV2M+PS vsO/+lDNjHnIuDweCUvqDTwjIpjcUJeFLGpJ3tIVVWqVtifSetE5URPIHaNrP1Bh ALVlnfyNs2Fa2/j/1CFbIbpLosT7w3ZdIF6bFTojrir9OUzh1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIU5tMmAyJfTyjSKMAIZWe5DtQOjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYjllMGE3MTEtOTliOS0z OGU4LWEwNGEtYzRkZmUxYzliMjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBI770MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcncTdFhy3lDfQkCnaoBOpJ0kOFQAY9AZZgKt5IFn5+68YP+i8OP4YP 5TxVANLtkVP2g6EV8ZItM2/+QP2ia92IlSJO9gMKlihAaN93xxvzniv74FS/ZecG cMtak79S7wdJyKYtcynJyaFpiUcl2jonfeGAuOfdBAejpU0QaEAob1hAbWbO7F5m IbnkwHzh4ooOQIVTqrPqoZkB887U5P2ehKHrKdq7VE0/c8u3O4Rg36mm6804/aPK TgqI26oQwNW4mp2A/d7yav4S9DhJ1q5pYXPtn3WFFnYH3+tYM39aq/tPd5Jvzxgg z7qZbKGT6tryOD/MNiX0Fypg55jpSLI= -----END CERTIFICATE-----Generated at Fri Apr 4 21:40:34 2025 by rpki-client