$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd538f77-993a-3a7b-b68e-2bd33845696f.roa File: bd538f77-993a-3a7b-b68e-2bd33845696f.roa (raw, json) Hash identifier: GzpXRnusHJY7avK+gGKxIURs1Pp1UL8LzzQlJ4zF6LA= Subject key identifier: 6B:D7:17:37:BA:B3:6E:10:88:2E:93:95:0E:D3:7D:FC:91:8F:51:C8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BDDD65BF6FA0AC4362700 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd538f77-993a-3a7b-b68e-2bd33845696f.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.240.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:dd:d6:5b:f6:fa:0a:c4:36:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=3addb9d3-9b69-4860-a8e7-5f0b0cec65be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:59:10:57:ea:f9:5e:b4:d7:e7:6b:b4:0a:03: 47:76:ed:56:53:3c:aa:7f:61:aa:f1:09:6c:5f:46: b5:cf:70:5e:05:5e:24:6f:62:aa:f5:6f:8c:a4:42: 3e:d7:d5:1a:b0:fa:ff:ec:3a:13:c0:91:3e:c7:49: e9:a4:68:0e:15:ab:87:ab:9b:30:c3:f3:ff:ae:ce: 3c:0f:28:06:18:44:ed:0c:41:68:d9:97:a3:9c:8e: 21:d2:fc:52:c8:b0:9a:61:dc:5b:9c:40:4c:b3:3b: 76:8e:49:b7:c3:00:b4:1d:90:70:b5:58:cc:90:42: 19:6d:9f:64:09:d6:fb:a3:12:56:95:cb:2b:67:4e: f6:62:1f:32:41:13:f4:f3:4b:ba:62:c9:d2:18:96: 62:cd:59:9b:cd:9e:a7:ab:2c:4e:f6:33:85:77:5f: 79:ac:fa:00:c3:6c:8e:ec:f7:75:03:c6:46:77:36: fc:89:aa:05:f9:5d:01:59:ae:09:6a:0c:7d:73:ea: b0:19:d8:b6:1a:ae:17:9a:af:f9:de:8a:b2:24:b7: 61:72:be:b7:64:58:f7:4e:70:27:36:b1:82:04:2a: 32:ab:73:b7:54:ec:af:42:9d:2f:7b:9e:56:4f:89: 68:d7:79:13:f1:42:3a:c8:9c:f5:35:33:b0:ce:ea: e3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D7:17:37:BA:B3:6E:10:88:2E:93:95:0E:D3:7D:FC:91:8F:51:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bd538f77-993a-3a7b-b68e-2bd33845696f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.240.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:c1:0e:d6:7e:24:3a:90:60:32:d8:27:27:ed:b1:2f:4f:c3: 8c:47:e9:73:e6:07:c4:3d:d0:c7:51:11:97:ed:f1:a1:fc:1a: 9d:fa:c9:56:0a:a8:ec:c2:25:43:08:17:76:05:c3:d3:77:ee: 19:2f:a7:68:12:fd:49:c8:92:a9:98:28:83:2a:d2:50:81:c9: de:d4:11:c8:51:77:ed:b0:1c:c3:94:a0:d5:e6:d0:f0:0c:b1: 30:a7:46:fc:ef:16:fb:76:b6:58:97:fc:9c:20:07:c3:a6:b4: 43:3f:cf:b0:bf:15:62:e7:3e:aa:fd:ec:b2:3a:06:aa:5d:8b: 21:67:50:8e:8c:41:0f:bd:d8:65:ba:5e:1a:2a:58:c6:2a:f4: cf:00:04:3a:1c:fb:a9:2c:df:51:3c:d5:0b:38:fa:a7:fb:a5: 3d:6d:7b:e1:c8:66:50:0d:9f:5d:cb:fc:0b:09:34:61:81:af: a6:71:1e:ed:52:ba:ef:20:2d:8c:83:d1:52:c8:b4:36:63:c0: d4:de:b0:69:83:53:97:90:ac:aa:bb:d7:28:ff:13:55:09:63: 7a:ff:bd:59:de:be:3c:f3:e9:e0:c4:cb:0e:4b:ab:74:76:65: 41:3d:0e:ad:15:41:b7:da:ff:fc:eb:7b:d6:14:4b:4c:cc:40: 95:4d:b9:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS93WW/b6CsQ2JwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk M2FkZGI5ZDMtOWI2OS00ODYwLWE4ZTctNWYwYjBjZWM2NWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFkQV+r5XrTX52u0CgNHdu1WUzyqf2Gq8Qls X0a1z3BeBV4kb2Kq9W+MpEI+19UasPr/7DoTwJE+x0nppGgOFauHq5sww/P/rs48 DygGGETtDEFo2ZejnI4h0vxSyLCaYdxbnEBMszt2jkm3wwC0HZBwtVjMkEIZbZ9k Cdb7oxJWlcsrZ072Yh8yQRP080u6YsnSGJZizVmbzZ6nqyxO9jOFd195rPoAw2yO 7Pd1A8ZGdzb8iaoF+V0BWa4Jagx9c+qwGdi2Gq4Xmq/53oqyJLdhcr63ZFj3TnAn NrGCBCoyq3O3VOyvQp0ve55WT4lo13kT8UI6yJz1NTOwzurj/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvXFze6s24QiC6TlQ7TffyRj1HIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmQ1MzhmNzctOTkzYS0z YTdiLWI2OGUtMmJkMzM4NDU2OTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/DwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHBDtZ+JDqQYDLYJyftsS9Pw4xH6XPmB8Q90MdREZft8aH8Gp36yVYK qOzCJUMIF3YFw9N37hkvp2gS/UnIkqmYKIMq0lCByd7UEchRd+2wHMOUoNXm0PAM sTCnRvzvFvt2tliX/JwgB8OmtEM/z7C/FWLnPqr97LI6BqpdiyFnUI6MQQ+92GW6 XhoqWMYq9M8ABDoc+6ks31E81Qs4+qf7pT1te+HIZlANn13L/AsJNGGBr6ZxHu1S uu8gLYyD0VLItDZjwNTesGmDU5eQrKq71yj/E1UJY3r/vVnevjzz6eDEyw5Lq3R2 ZUE9Dq0VQbfa//zre9YUS0zMQJVNufg= -----END CERTIFICATE-----Generated at Fri Mar 14 10:42:40 2025 by rpki-client