$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c08b4e8b-14c1-3c61-8e49-3534647074e3.roa File: c08b4e8b-14c1-3c61-8e49-3534647074e3.roa (raw, json) Hash identifier: jvg/OHN0qxwCeg7w/PHLcHtW7O/oT9DL/PNdrs6phRo= Subject key identifier: D2:EC:04:47:22:2C:83:6D:2F:09:03:91:60:14:10:7C:04:09:A8:9B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BB4D40E48DDE89A86D500 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c08b4e8b-14c1-3c61-8e49-3534647074e3.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.198.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:b4:d4:0e:48:dd:e8:9a:86:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=b3a99215-f3a6-4f20-abe4-a389d6eb912d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1b:a8:69:eb:cd:fd:51:b8:27:7b:f8:b9:af: 79:e9:7f:49:2d:55:b3:c3:91:89:9a:1f:4d:79:14: 05:52:d5:1e:ec:d6:20:7e:6b:25:f7:d0:d9:f0:c1: bd:b4:90:53:f4:71:f9:9d:60:14:d9:af:f7:c6:1f: 4c:e8:85:75:52:ef:14:d7:2c:1b:ea:54:7b:61:99: 8a:8f:80:30:d9:93:a4:84:61:c5:4c:b1:bd:b5:a0: c8:e5:4e:62:58:07:85:9f:11:a8:9a:73:c2:fd:da: d0:99:50:4e:99:65:fa:5e:de:7b:b0:f8:44:0a:42: ff:58:21:a4:b7:c2:b8:c1:ac:47:68:c5:c0:f7:a3: 80:02:b2:6f:82:06:6d:9b:d8:3d:62:45:35:00:49: 71:18:e0:a7:a4:0e:9a:d9:a9:d2:87:82:e5:44:53: be:5e:ba:42:46:fa:7d:8a:c0:cc:35:66:11:ae:2a: f9:1e:00:91:f4:e3:74:96:16:6d:a5:b1:4c:aa:62: c0:db:6e:12:64:41:c2:60:be:dc:16:74:ff:75:f5: e4:4e:a6:24:b6:d1:2c:3e:0b:87:03:db:9b:c6:27: 2e:00:74:11:b6:bc:dc:ef:d9:63:5b:67:f5:c3:52: df:e3:e4:69:46:8c:f1:c5:fe:66:04:14:22:0f:65: e2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:EC:04:47:22:2C:83:6D:2F:09:03:91:60:14:10:7C:04:09:A8:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c08b4e8b-14c1-3c61-8e49-3534647074e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.198.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:9c:5e:83:3a:e8:02:ee:7c:e3:d7:86:8a:8a:7a:4b:1d:fe: ed:84:aa:c2:d8:f3:1a:b5:53:48:9a:b4:a3:86:1c:39:10:2c: 56:2c:6d:1e:a9:1f:c8:c9:18:6d:bb:d3:3f:a6:20:0c:48:7c: 1e:66:f2:70:d9:ea:ea:0d:14:3a:49:9b:3a:09:50:52:38:ea: d0:35:00:b3:93:2b:41:9a:62:54:21:8c:4c:62:7a:7d:7c:33: 03:d9:7d:1d:2d:25:25:57:8b:60:75:52:13:03:d8:5e:a1:0a: 0b:10:1a:5e:62:83:27:e8:e0:29:8a:1d:29:47:e0:fb:8c:f1: b7:3a:aa:dc:39:63:37:0b:e0:20:92:cc:fa:f5:22:cb:6c:20: 49:67:82:3c:37:78:f7:93:6d:f9:7f:ef:a9:a8:45:99:fa:dd: 4d:11:24:4b:cd:d4:ef:b0:32:37:63:93:39:82:32:85:6f:d3: 73:0f:62:4e:58:72:8a:21:19:8e:30:e5:37:32:75:ca:8c:93: 78:cd:82:ce:04:fb:4c:7b:14:53:90:0e:db:c3:6b:25:31:89: a7:99:42:06:2f:09:97:10:1c:2e:25:f4:b4:59:96:6c:fa:5c: 4a:cc:6d:09:4f:85:3f:ff:e2:00:81:72:19:50:b4:2f:19:95: de:fc:d7:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS7TUDkjd6JqG1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YjNhOTkyMTUtZjNhNi00ZjIwLWFiZTQtYTM4OWQ2ZWI5MTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhuoaevN/VG4J3v4ua956X9JLVWzw5GJmh9N eRQFUtUe7NYgfmsl99DZ8MG9tJBT9HH5nWAU2a/3xh9M6IV1Uu8U1ywb6lR7YZmK j4Aw2ZOkhGHFTLG9taDI5U5iWAeFnxGomnPC/drQmVBOmWX6Xt57sPhECkL/WCGk t8K4waxHaMXA96OAArJvggZtm9g9YkU1AElxGOCnpA6a2anSh4LlRFO+XrpCRvp9 isDMNWYRrir5HgCR9ON0lhZtpbFMqmLA224SZEHCYL7cFnT/dfXkTqYkttEsPguH A9ubxicuAHQRtrzc79ljW2f1w1Lf4+RpRozxxf5mBBQiD2XijwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLsBEciLINtLwkDkWAUEHwECaibMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzA4YjRlOGItMTRjMS0z YzYxLThlNDktMzUzNDY0NzA3NGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8YQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWcXoM66ALufOPXhoqKeksd/u2EqsLY8xq1U0iatKOGHDkQLFYsbR6p H8jJGG270z+mIAxIfB5m8nDZ6uoNFDpJmzoJUFI46tA1ALOTK0GaYlQhjExien18 MwPZfR0tJSVXi2B1UhMD2F6hCgsQGl5igyfo4CmKHSlH4PuM8bc6qtw5YzcL4CCS zPr1IstsIElngjw3ePeTbfl/76moRZn63U0RJEvN1O+wMjdjkzmCMoVv03MPYk5Y coohGY4w5TcydcqMk3jNgs4E+0x7FFOQDtvDayUxiaeZQgYvCZcQHC4l9LRZlmz6 XErMbQlPhT//4gCBchlQtC8Zld7810Q= -----END CERTIFICATE-----Generated at Fri Apr 4 21:45:09 2025 by rpki-client