$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c974d9f5-cd2a-3b81-b107-fb0c584990e2.roa File: c974d9f5-cd2a-3b81-b107-fb0c584990e2.roa (raw, json) Hash identifier: xeWEFcJ+rH/YG8ITmcjPZfUl+5bZuCu6aLD71ye1RtM= Subject key identifier: FB:18:97:2E:5F:A7:1F:B1:1B:70:50:90:80:0E:0D:6A:32:5E:DA:F7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C04A120C274FC62BE8200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c974d9f5-cd2a-3b81-b107-fb0c584990e2.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.189.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:04:a1:20:c2:74:fc:62:be:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=b6c3ebd0-d184-40a0-921d-854ca1fe88ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:77:f5:14:7e:58:95:74:bb:2c:60:a3:4e:57: f0:b4:dc:24:ce:c8:e7:7c:05:ad:81:ac:7a:e2:f1: 43:39:27:53:b8:17:f6:18:7c:0a:03:90:6c:bf:a4: 9d:f1:d2:3d:09:0e:68:99:4c:c8:a0:96:a7:08:ac: a8:41:ad:4d:1f:1c:c3:b9:f9:af:ae:0f:02:03:8e: d4:89:d5:1a:1d:55:8d:95:86:84:cb:8b:02:8b:a8: e8:55:66:1f:35:4b:81:9b:a8:b2:ad:de:31:16:2b: 9f:de:d9:dd:d5:51:ec:06:26:df:67:3f:22:b8:f5: 1c:f8:7f:48:c3:fb:da:57:20:9c:42:9b:6d:12:b2: b4:5b:c6:e5:85:e0:43:ba:53:e0:cd:06:ff:96:24: 43:56:2f:88:25:e1:1f:fd:8c:85:64:1c:4c:81:e8: 75:5c:40:84:a0:90:65:b3:37:c3:bb:31:56:4a:8f: 9e:e8:a8:cc:61:11:de:68:d6:51:a1:24:c7:19:c6: 5e:25:aa:2b:4c:3e:3c:78:c1:75:dd:2b:30:79:28: a0:4b:da:db:22:69:e5:5b:b4:eb:04:3d:c5:41:d5: 32:9e:f9:07:e0:fe:0c:1f:7b:9d:77:63:1d:d2:5b: 3a:e6:e5:0f:88:11:5c:eb:67:27:21:ce:69:c4:2d: 65:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:18:97:2E:5F:A7:1F:B1:1B:70:50:90:80:0E:0D:6A:32:5E:DA:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c974d9f5-cd2a-3b81-b107-fb0c584990e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.189.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:b2:7e:02:6d:d9:b9:78:79:d4:63:96:1d:42:61:7a:8d:12: 57:f8:64:7f:56:34:6a:3a:08:f3:c5:1d:35:f5:09:1b:07:e8: 84:41:49:4a:e7:26:5c:5c:fa:93:e5:c9:dd:dc:ab:49:1d:e3: e8:80:0f:28:d4:05:39:3e:c5:de:eb:20:7c:ea:40:41:48:36: e9:4a:87:b8:da:da:09:10:ff:c0:d0:06:d8:8b:44:bf:bc:fd: a2:ba:d7:81:89:b3:4e:1c:0b:e3:2a:23:46:24:ad:2a:e2:49: 50:80:c4:0c:7a:d2:13:fd:98:25:9f:5a:77:0e:c7:74:3b:c4: 21:e1:bf:55:49:58:80:8a:6a:e1:f5:18:be:e0:3d:f4:96:28: 5f:a1:80:7b:70:e9:90:1c:6b:ef:c5:c2:f7:9a:c1:1a:7e:d6: f0:b7:85:af:61:5f:74:21:fb:be:58:5f:8a:92:13:97:99:c6: 93:44:1a:94:b1:3f:62:ed:6e:48:7b:70:8d:ab:8f:19:71:4a: 03:e3:04:a8:d4:1b:f9:82:1b:62:97:fc:ea:4c:d1:51:1a:ba: 77:07:4c:75:25:37:f0:0b:90:76:b1:d7:56:95:d5:6c:1f:4f: fd:10:4e:0d:a4:8a:22:ea:a7:f5:5e:bc:a0:98:7d:d5:b4:45: f9:db:e3:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITAShIMJ0/GK+ggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YjZjM2ViZDAtZDE4NC00MGEwLTkyMWQtODU0Y2ExZmU4OGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXf1FH5YlXS7LGCjTlfwtNwkzsjnfAWtgax6 4vFDOSdTuBf2GHwKA5Bsv6Sd8dI9CQ5omUzIoJanCKyoQa1NHxzDufmvrg8CA47U idUaHVWNlYaEy4sCi6joVWYfNUuBm6iyrd4xFiuf3tnd1VHsBibfZz8iuPUc+H9I w/vaVyCcQpttErK0W8blheBDulPgzQb/liRDVi+IJeEf/YyFZBxMgeh1XECEoJBl szfDuzFWSo+e6KjMYRHeaNZRoSTHGcZeJaorTD48eMF13SsweSigS9rbImnlW7Tr BD3FQdUynvkH4P4MH3udd2Md0ls65uUPiBFc62cnIc5pxC1l9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsYly5fpx+xG3BQkIAODWoyXtr3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzk3NGQ5ZjUtY2QyYS0z YjgxLWIxMDctZmIwYzU4NDk5MGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI71QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2yfgJt2bl4edRjlh1CYXqNElf4ZH9WNGo6CPPFHTX1CRsH6IRBSUrn Jlxc+pPlyd3cq0kd4+iADyjUBTk+xd7rIHzqQEFINulKh7ja2gkQ/8DQBtiLRL+8 /aK614GJs04cC+MqI0YkrSriSVCAxAx60hP9mCWfWncOx3Q7xCHhv1VJWICKauH1 GL7gPfSWKF+hgHtw6ZAca+/FwveawRp+1vC3ha9hX3Qh+75YX4qSE5eZxpNEGpSx P2Ltbkh7cI2rjxlxSgPjBKjUG/mCG2KX/OpM0VEauncHTHUlN/ALkHax11aV1Wwf T/0QTg2kiiLqp/VevKCYfdW0Rfnb45w= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:34 2025 by rpki-client