$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc150696-8f07-3f1a-b0ab-12a1eaff2e22.roa File: bc150696-8f07-3f1a-b0ab-12a1eaff2e22.roa (raw, json) Hash identifier: 9fz9clnMElGx7mn7+u398KtiWNjx2gINHaAoQQdtrEA= Subject key identifier: 8E:28:D7:00:FC:27:5A:E6:AB:A2:12:02:74:79:47:5A:F9:A0:46:F6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BC6CF09DF14EF5AF1A400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc150696-8f07-3f1a-b0ab-12a1eaff2e22.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.194.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:c6:cf:09:df:14:ef:5a:f1:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=a650272f-8239-4660-904d-34bc12564ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d4:12:86:46:0e:c4:54:c3:17:90:03:ae:30: 41:da:73:8a:fe:83:7f:d7:8a:a7:a6:4c:e4:17:8c: 49:fd:a0:e4:5a:f9:4b:f0:f2:ae:75:13:a0:1c:89: 27:5b:79:56:25:24:cf:c7:90:c9:f8:7b:62:6f:fa: 54:7c:d7:cb:38:c1:1e:8c:3d:b0:7f:62:ce:87:78: 4e:1d:1f:78:c5:6b:17:0b:42:bc:b8:66:1f:2c:85: b3:a6:d0:04:fe:45:69:19:44:bd:4f:7a:63:be:a7: b3:58:8f:b2:3a:39:37:f1:2b:05:74:cc:61:e9:24: 30:4d:8f:f6:ec:be:9d:34:a8:b6:f7:93:a2:da:b4: d7:fa:8d:16:b4:14:fd:84:6c:5a:92:e4:22:fc:be: 57:cb:d1:77:ef:df:dc:9c:a0:0d:7c:8f:0e:2e:2f: 33:b7:d6:96:5b:17:a5:15:5b:e9:65:7c:25:86:4f: 52:b8:31:cd:0a:72:0d:9f:e9:2a:93:6f:fe:8c:1b: 2e:c2:55:9d:f5:ec:62:89:91:18:40:5c:fd:e4:6f: bc:e9:9c:80:49:b9:a4:5d:40:a9:c3:39:fc:4c:52: 14:d7:8e:f8:49:49:c9:00:bc:ab:ed:c1:a8:8e:0e: da:83:65:b7:9b:65:ba:7a:9c:e7:a3:a5:ed:8a:78: b7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:28:D7:00:FC:27:5A:E6:AB:A2:12:02:74:79:47:5A:F9:A0:46:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bc150696-8f07-3f1a-b0ab-12a1eaff2e22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.194.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:e1:9c:ec:fe:e9:9b:2d:4a:23:d3:13:ee:14:1e:af:8e:aa: 39:1f:2d:dc:95:5e:91:7f:8c:69:c8:9c:3e:c0:10:fd:3e:d4: 2e:ef:ad:2d:25:a6:94:f8:31:77:1a:a8:1a:7c:ff:d6:b5:79: a8:6f:aa:49:ea:ad:8a:bf:7b:96:7d:57:6d:f5:a4:3a:5c:b7: 19:da:9f:b0:4e:4e:30:f5:68:b9:57:3f:58:d6:13:c6:28:01: ed:50:22:fe:18:5f:07:e5:fa:c0:38:b4:e4:dc:bf:dc:51:2a: dc:b5:d3:71:0f:77:d9:9a:db:02:dd:62:70:03:08:84:dd:32: 81:54:34:a3:eb:67:01:b1:42:bb:e6:8c:bf:63:61:33:62:55: ba:21:3a:8a:cf:81:b9:90:3a:8e:b0:16:c1:95:ca:e3:e8:fd: 21:4c:fa:0f:1c:c6:2d:83:e5:a4:fb:cc:29:c9:12:6d:e7:e0: d0:3d:6e:5f:39:f1:9a:b9:d0:c1:d2:f2:24:06:26:7a:ee:36: fb:09:48:9b:24:84:61:2f:ef:db:03:eb:6a:32:83:ee:15:59: cc:6a:1f:bb:0c:02:f0:2a:87:a7:2e:6b:bb:f4:10:96:80:b3: ac:9d:a4:5e:e4:34:ce:42:d2:d0:47:ef:72:73:2f:ce:0a:86: 38:d9:c3:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8bPCd8U71rxpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YTY1MDI3MmYtODIzOS00NjYwLTkwNGQtMzRiYzEyNTY0ZWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79QShkYOxFTDF5ADrjBB2nOK/oN/14qnpkzk F4xJ/aDkWvlL8PKudROgHIknW3lWJSTPx5DJ+Htib/pUfNfLOMEejD2wf2LOh3hO HR94xWsXC0K8uGYfLIWzptAE/kVpGUS9T3pjvqezWI+yOjk38SsFdMxh6SQwTY/2 7L6dNKi295Oi2rTX+o0WtBT9hGxakuQi/L5Xy9F379/cnKANfI8OLi8zt9aWWxel FVvpZXwlhk9SuDHNCnINn+kqk2/+jBsuwlWd9exiiZEYQFz95G+86ZyASbmkXUCp wzn8TFIU1474SUnJALyr7cGojg7ag2W3m2W6epzno6Xtini3sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4o1wD8J1rmq6ISAnR5R1r5oEb2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmMxNTA2OTYtOGYwNy0z ZjFhLWIwYWItMTJhMWVhZmYyZTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8LQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3hnOz+6ZstSiPTE+4UHq+OqjkfLdyVXpF/jGnInD7AEP0+1C7vrS0l ppT4MXcaqBp8/9a1eahvqknqrYq/e5Z9V231pDpctxnan7BOTjD1aLlXP1jWE8Yo Ae1QIv4YXwfl+sA4tOTcv9xRKty103EPd9ma2wLdYnADCITdMoFUNKPrZwGxQrvm jL9jYTNiVbohOorPgbmQOo6wFsGVyuPo/SFM+g8cxi2D5aT7zCnJEm3n4NA9bl85 8Zq50MHS8iQGJnruNvsJSJskhGEv79sD62oyg+4VWcxqH7sMAvAqh6cua7v0EJaA s6ydpF7kNM5C0tBH73JzL84KhjjZw58= -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:06 2025 by rpki-client