$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d0db29bb-78cc-357a-97c2-0eb39f740b03.roa File: d0db29bb-78cc-357a-97c2-0eb39f740b03.roa (raw, json) Hash identifier: XWSIIYuDSBe0cw428s3SSIdqTGL2NVT0NIP6GYfkFt4= Subject key identifier: A0:ED:89:74:CE:01:45:70:8D:89:CE:1D:E7:96:B5:02:0B:2E:47:52 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BAEFF1B963CFC6A10EE80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d0db29bb-78cc-357a-97c2-0eb39f740b03.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 35.216.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:ae:ff:1b:96:3c:fc:6a:10:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=ce419eca-f1d5-431d-9074-6264da466577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:29:89:3c:80:91:34:a6:9c:08:0f:ca:a7:51: 45:f6:3c:44:1a:61:55:15:23:a5:ef:0a:24:fd:1c: 3d:98:63:0f:29:91:69:e8:86:8c:a1:2a:4d:06:e4: e4:c3:0c:6e:9e:0a:ed:d2:a2:30:a1:91:3e:9b:32: 08:c5:e6:74:bd:d9:99:1a:65:44:f7:7c:bb:99:10: bd:5d:07:0e:6d:ac:fd:7c:19:1e:92:50:14:d9:fd: 63:f6:1e:ba:b1:48:59:0e:0d:d8:13:9a:29:41:02: 87:b7:ee:7c:8c:9b:d5:b9:fa:4b:e6:4c:15:b5:c0: 7e:56:4e:e7:d3:c6:dc:0a:7d:54:64:52:8d:ff:a1: 6d:0d:2c:52:3a:88:68:fd:ff:99:fd:32:99:71:40: fc:5d:5a:57:66:d8:fb:f7:04:a7:2d:de:d3:9a:d3: 1f:66:9d:53:7d:22:28:27:01:c3:a6:6a:1e:c2:a5: a6:c4:14:48:0d:84:e6:29:a3:09:52:50:a7:4d:9a: cd:9d:38:a0:63:22:20:eb:3d:e7:ff:d7:94:a9:e6: 90:e9:b6:65:5e:a6:64:7c:18:c1:64:09:68:d7:b7: 19:33:42:32:53:a2:45:4e:f3:1e:8e:2b:1b:59:ce: 7a:9e:fa:1d:70:ce:59:5f:1a:06:b5:d4:55:6b:5f: ea:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:ED:89:74:CE:01:45:70:8D:89:CE:1D:E7:96:B5:02:0B:2E:47:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d0db29bb-78cc-357a-97c2-0eb39f740b03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.216.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:9f:c0:c4:25:d4:f1:d7:aa:ae:ba:b9:fe:7b:31:8d:b6:f0: 9e:5d:12:df:2f:e8:82:85:f1:c4:8d:04:ed:a6:8f:f0:05:1a: 07:12:af:6d:11:88:b6:89:e2:a8:2c:12:a9:f6:63:64:de:b0: c5:f7:ee:b7:58:64:9c:36:02:ac:13:93:16:bc:3f:f7:40:d5: 1f:47:d0:ad:10:74:48:0e:2f:9e:0c:f7:73:91:02:b0:77:59: 4e:29:d9:0f:a3:c9:e9:6f:01:7b:96:f7:66:b5:a3:06:87:94: dd:b7:e2:42:7a:d7:8d:cd:79:89:fa:57:db:46:ac:ac:9b:75: 7d:4e:8e:38:fe:7b:d5:9e:13:e5:d6:2f:dc:df:80:fe:ba:27: 18:48:d4:6c:05:3f:85:73:40:28:e8:f4:b7:a4:2e:12:c4:03: 01:82:b0:ad:ce:df:66:19:d5:9b:79:51:94:04:9a:83:73:7d: 61:e0:10:c4:9e:0e:92:6e:15:79:26:bc:6f:1f:3c:ae:08:0f: 7f:9d:f4:10:d6:16:50:7d:ef:ca:28:86:65:16:af:6d:e8:03: dc:ea:22:ad:9d:bd:b8:8f:22:42:66:ad:a9:2c:d7:b6:62:a1: 6a:cc:ff:e8:b0:9a:e5:f1:b1:48:c6:3a:c1:97:1d:31:63:26: fc:22:7a:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS67/G5Y8/GoQ7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk Y2U0MTllY2EtZjFkNS00MzFkLTkwNzQtNjI2NGRhNDY2NTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzymJPICRNKacCA/Kp1FF9jxEGmFVFSOl7wok /Rw9mGMPKZFp6IaMoSpNBuTkwwxungrt0qIwoZE+mzIIxeZ0vdmZGmVE93y7mRC9 XQcObaz9fBkeklAU2f1j9h66sUhZDg3YE5opQQKHt+58jJvVufpL5kwVtcB+Vk7n 08bcCn1UZFKN/6FtDSxSOoho/f+Z/TKZcUD8XVpXZtj79wSnLd7TmtMfZp1TfSIo JwHDpmoewqWmxBRIDYTmKaMJUlCnTZrNnTigYyIg6z3n/9eUqeaQ6bZlXqZkfBjB ZAlo17cZM0IyU6JFTvMejisbWc56nvodcM5ZXxoGtdRVa1/qlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDtiXTOAUVwjYnOHeeWtQILLkdSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDBkYjI5YmItNzhjYy0z NTdhLTk3YzItMGViMzlmNzQwYjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI9iAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIufwMQl1PHXqq66uf57MY228J5dEt8v6IKF8cSNBO2mj/AFGgcSr20R iLaJ4qgsEqn2Y2TesMX37rdYZJw2AqwTkxa8P/dA1R9H0K0QdEgOL54M93ORArB3 WU4p2Q+jyelvAXuW92a1owaHlN234kJ6143NeYn6V9tGrKybdX1Ojjj+e9WeE+XW L9zfgP66JxhI1GwFP4VzQCjo9LekLhLEAwGCsK3O32YZ1Zt5UZQEmoNzfWHgEMSe DpJuFXkmvG8fPK4ID3+d9BDWFlB978oohmUWr23oA9zqIq2dvbiPIkJmraks17Zi oWrM/+iwmuXxsUjGOsGXHTFjJvwierk= -----END CERTIFICATE-----Generated at Fri Mar 14 10:12:56 2025 by rpki-client