$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfdf5b71-e803-3cb8-a3d8-7a845fea49e7.roa File: cfdf5b71-e803-3cb8-a3d8-7a845fea49e7.roa (raw, json) Hash identifier: BD2X2VWHhuTLZyHeyt4xcba774htWp5Mpub9cHfbWEA= Subject key identifier: 41:91:B7:1E:43:9D:BF:C4:A8:8B:9D:EA:5D:4F:53:0A:CE:00:4E:99 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C0A0C5800DF1608584F40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfdf5b71-e803-3cb8-a3d8-7a845fea49e7.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.222.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:0a:0c:58:00:df:16:08:58:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=d0cbcd6a-5306-4c86-abd1-4ea1b071d461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:98:c8:65:41:47:25:13:75:83:70:e4:e9:8b: 15:68:34:e2:c2:61:ae:e0:cf:91:4f:05:3a:ce:d0: 65:d2:4f:4a:be:ab:27:43:88:7a:7d:07:a6:34:16: 91:b4:bd:ff:ad:bc:ad:92:c0:f2:15:93:25:7d:9a: 7d:60:55:49:7b:64:fa:b3:35:44:de:02:e6:09:99: 9d:0b:af:9d:71:01:8d:32:72:7b:60:00:d5:17:43: 77:2e:25:e0:3e:85:ff:b3:81:70:7a:95:4b:bb:a1: b4:45:c5:d7:7a:2e:be:1f:13:3a:1e:6d:ec:c5:cf: 3f:9d:ca:42:51:bf:11:14:ea:65:11:80:40:63:5e: 4c:8a:19:99:a8:a2:53:f8:04:71:6e:5d:5b:fc:d7: 24:b6:a0:36:2f:1a:6c:ef:19:13:a6:09:cf:20:76: 06:45:a6:b3:77:2c:d9:18:69:ff:e6:3c:fc:1e:0c: d8:58:7c:9c:fc:d8:4e:8d:e9:47:2d:af:51:82:b3: 32:db:0f:2d:58:30:ad:59:3c:2f:af:70:10:d8:b4: fe:f1:ef:01:1c:ad:8d:ed:b1:f4:5b:8c:55:aa:92: 40:49:43:b0:b3:d3:63:c3:12:0a:7c:74:fa:25:5a: ac:df:4b:ce:96:7c:81:d4:6b:3a:bc:fc:1e:a4:98: 3f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:91:B7:1E:43:9D:BF:C4:A8:8B:9D:EA:5D:4F:53:0A:CE:00:4E:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cfdf5b71-e803-3cb8-a3d8-7a845fea49e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.222.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:8b:e3:c3:51:0e:1b:75:57:05:99:24:c3:e3:6d:fe:64:7d: 50:d6:26:48:a4:af:1c:59:8a:86:42:16:9a:a8:c5:b2:3b:4f: 80:2b:df:0f:46:68:ae:f2:11:a7:16:85:a8:75:97:92:60:11: 59:75:8f:50:04:0f:8c:26:1b:36:73:2b:72:40:e4:49:bf:a9: 87:80:b8:16:7c:3a:a9:28:79:92:94:a9:4e:ee:f6:e3:8c:06: 2a:2a:cf:07:1a:c8:f3:93:8a:b8:cf:ea:f6:ad:bf:2d:d5:72: 86:0d:b6:1f:a2:63:8e:00:ed:56:3f:ea:fa:ea:0a:1a:63:c9: 16:bb:14:55:31:5e:70:4d:0b:98:d0:cb:6b:fd:28:74:44:d4: 55:e4:b2:2f:39:cf:e9:25:e9:85:6f:15:7f:c8:e7:20:d7:ae: 35:4c:3e:92:b8:64:56:e3:7c:6e:e1:da:30:d7:6c:47:3c:40: 9b:56:4f:fe:d9:24:a6:dc:70:d3:6f:ca:4f:1f:27:fc:8e:04: 52:04:5e:cf:e8:be:82:80:b6:67:56:f2:28:64:e5:b9:26:86: 62:19:e5:69:7a:20:fe:05:b3:62:fb:4d:7c:43:ca:bc:d4:e0: fb:47:5e:58:b0:41:6c:2d:90:9d:25:3b:0a:49:78:66:d7:1d: fc:b1:3c:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITAoMWADfFghYT0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZDBjYmNkNmEtNTMwNi00Yzg2LWFiZDEtNGVhMWIwNzFkNDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJjIZUFHJRN1g3Dk6YsVaDTiwmGu4M+RTwU6 ztBl0k9KvqsnQ4h6fQemNBaRtL3/rbytksDyFZMlfZp9YFVJe2T6szVE3gLmCZmd C6+dcQGNMnJ7YADVF0N3LiXgPoX/s4FwepVLu6G0RcXXei6+HxM6Hm3sxc8/ncpC Ub8RFOplEYBAY15MihmZqKJT+ARxbl1b/NcktqA2Lxps7xkTpgnPIHYGRaazdyzZ GGn/5jz8HgzYWHyc/NhOjelHLa9RgrMy2w8tWDCtWTwvr3AQ2LT+8e8BHK2N7bH0 W4xVqpJASUOws9NjwxIKfHT6JVqs30vOlnyB1Gs6vPwepJg/9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGRtx5Dnb/EqIud6l1PUwrOAE6ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2ZkZjViNzEtZTgwMy0z Y2I4LWEzZDgtN2E4NDVmZWE0OWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI97wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESL48NRDht1VwWZJMPjbf5kfVDWJkikrxxZioZCFpqoxbI7T4Ar3w9G aK7yEacWhah1l5JgEVl1j1AED4wmGzZzK3JA5Em/qYeAuBZ8OqkoeZKUqU7u9uOM BioqzwcayPOTirjP6vatvy3VcoYNth+iY44A7VY/6vrqChpjyRa7FFUxXnBNC5jQ y2v9KHRE1FXksi85z+kl6YVvFX/I5yDXrjVMPpK4ZFbjfG7h2jDXbEc8QJtWT/7Z JKbccNNvyk8fJ/yOBFIEXs/ovoKAtmdW8ihk5bkmhmIZ5Wl6IP4Fs2L7TXxDyrzU 4PtHXliwQWwtkJ0lOwpJeGbXHfyxPEk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:55 2025 by rpki-client