$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb2b1177-ab99-39ad-9aec-2440825ba5c9.roa File: cb2b1177-ab99-39ad-9aec-2440825ba5c9.roa (raw, json) Hash identifier: U5diFqBjZ6O9W7u1fnjDpbhMCEAEcpVaVNKyTyMsrX0= Subject key identifier: C8:63:B1:C7:61:21:E3:E7:CA:44:B6:CA:94:43:6C:E7:06:E3:55:D7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C0007255077F386158C80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb2b1177-ab99-39ad-9aec-2440825ba5c9.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.189.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:00:07:25:50:77:f3:86:15:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=36758b7e-54d5-40af-ac59-8245ea3500a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4e:bd:50:49:b2:7d:27:0e:94:54:44:1a:c8: b9:09:e1:1d:f2:e3:6d:b2:0d:1b:ab:cf:b7:c6:48: ee:48:0a:5b:94:0e:78:a0:57:f4:e6:11:61:f0:b8: 62:23:e0:21:ff:ce:f2:f2:94:68:7f:30:64:8b:15: b5:d8:6a:5a:70:86:08:9d:10:06:a6:78:43:26:51: 7d:e7:a2:6d:01:9c:09:56:d4:f1:84:fb:fe:23:28: 4d:49:20:ef:3d:91:24:ad:a7:13:de:90:b8:c9:2c: ce:b4:79:a0:75:d1:19:f2:35:d1:87:ab:9d:a8:9c: 3d:95:06:cd:50:68:4b:c4:6d:f9:2f:3e:94:dc:79: b8:ce:0b:06:13:9c:2e:8a:b8:2c:bb:7c:20:64:97: 0b:84:46:c9:b6:b9:9b:fe:92:a4:17:ee:db:b1:1b: fd:a5:ce:f8:3d:c5:c7:e7:93:a1:59:e6:21:8d:e8: 6b:34:47:75:d9:47:8d:c0:e3:d5:7d:f0:4a:75:5c: 04:76:6d:87:08:96:fa:b1:87:2a:54:95:32:69:c6: d5:89:3f:0d:aa:e3:e0:2b:94:6d:67:74:33:02:dd: 97:77:c8:47:c5:a8:1e:03:93:d3:21:25:2c:0f:ed: a5:0f:a8:00:7a:26:9f:ec:10:85:12:20:5e:d5:3b: a1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:63:B1:C7:61:21:E3:E7:CA:44:B6:CA:94:43:6C:E7:06:E3:55:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cb2b1177-ab99-39ad-9aec-2440825ba5c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.189.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:1c:35:2c:53:bb:73:52:f7:02:f4:27:5a:b8:3e:9f:cc:f3: 81:68:5f:fe:21:2b:83:56:2f:b9:db:92:b7:7f:2c:10:4b:05: f3:0a:9c:bf:cf:c8:c8:2f:aa:67:81:49:89:89:5e:16:06:e3: 54:5e:36:e9:33:22:e2:63:78:fd:aa:2e:a3:04:bd:83:d9:04: 17:2b:32:35:c4:5c:6e:bf:5c:b6:d6:4f:5a:b9:fe:25:e8:51: 7f:63:24:88:ae:20:2e:a9:45:3b:38:28:41:f6:72:e7:aa:f0: 9d:c7:c2:ec:2a:c6:71:a9:8b:d8:ed:e8:50:84:c6:2d:17:da: bc:aa:47:a9:ce:ec:86:df:b2:0f:d2:b7:0f:c6:33:b6:80:be: 59:d1:42:ee:50:e5:0e:a0:c8:08:03:d6:a5:49:41:9f:8a:4c: 53:31:e1:43:0a:11:d3:96:45:93:d5:83:9b:2a:13:74:c7:e3: 3a:64:06:71:65:12:f3:4a:e6:6b:8c:67:9a:fb:1c:64:03:9d: 77:1d:c6:bc:88:e2:01:e4:ca:cf:fe:9a:43:f9:69:e4:b5:d2: ae:e4:c8:98:aa:64:8b:7f:2c:27:13:a2:44:0a:3e:28:76:7e: 56:e1:71:ec:b7:30:cb:cd:dd:8f:56:cb:29:18:32:54:ac:32: b8:09:b2:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITAAHJVB384YVjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MzY3NThiN2UtNTRkNS00MGFmLWFjNTktODI0NWVhMzUwMGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj069UEmyfScOlFREGsi5CeEd8uNtsg0bq8+3 xkjuSApblA54oFf05hFh8LhiI+Ah/87y8pRofzBkixW12GpacIYInRAGpnhDJlF9 56JtAZwJVtTxhPv+IyhNSSDvPZEkracT3pC4ySzOtHmgddEZ8jXRh6udqJw9lQbN UGhLxG35Lz6U3Hm4zgsGE5wuirgsu3wgZJcLhEbJtrmb/pKkF+7bsRv9pc74PcXH 55OhWeYhjehrNEd12UeNwOPVffBKdVwEdm2HCJb6sYcqVJUyacbViT8NquPgK5Rt Z3QzAt2Xd8hHxageA5PTISUsD+2lD6gAeiaf7BCFEiBe1TuhSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhjscdhIePnykS2ypRDbOcG41XXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2IyYjExNzctYWI5OS0z OWFkLTlhZWMtMjQ0MDgyNWJhNWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI73QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFccNSxTu3NS9wL0J1q4Pp/M84FoX/4hK4NWL7nbkrd/LBBLBfMKnL/P yMgvqmeBSYmJXhYG41ReNukzIuJjeP2qLqMEvYPZBBcrMjXEXG6/XLbWT1q5/iXo UX9jJIiuIC6pRTs4KEH2cueq8J3HwuwqxnGpi9jt6FCExi0X2ryqR6nO7Ibfsg/S tw/GM7aAvlnRQu5Q5Q6gyAgD1qVJQZ+KTFMx4UMKEdOWRZPVg5sqE3TH4zpkBnFl EvNK5muMZ5r7HGQDnXcdxryI4gHkys/+mkP5aeS10q7kyJiqZIt/LCcTokQKPih2 flbhcey3MMvN3Y9WyykYMlSsMrgJskg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:07:25 2025 by rpki-client