$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d126e1ab-78c4-3a31-b14a-e0ced3356c4b.roa File: d126e1ab-78c4-3a31-b14a-e0ced3356c4b.roa (raw, json) Hash identifier: x59JJYJhyXm+iAVAPPceeBefwR9fjVSXw/hkTciz5yY= Subject key identifier: 1A:5B:2E:31:69:1A:CC:39:42:61:2C:27:7B:70:AC:D3:5C:C8:DA:38 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BE8FA59DABB8AB1D21900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d126e1ab-78c4-3a31-b14a-e0ced3356c4b.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.240.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:e8:fa:59:da:bb:8a:b1:d2:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=a507fbd5-548a-47b4-a64c-b9a63186dd65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f7:c4:86:80:d3:e5:00:c8:76:68:62:ca:94: 68:d5:6d:fc:36:70:d9:60:c2:10:17:16:d0:48:21: 65:63:48:fc:c1:cf:8b:52:62:50:69:2a:be:d1:0d: bd:c9:47:cd:22:02:98:7c:00:0b:d5:fa:b0:3c:ec: ee:d9:ab:64:ac:10:57:b0:19:48:c5:86:2e:04:39: 4e:0d:32:cf:b5:19:9e:31:fb:92:73:72:0b:19:3c: 08:6b:cc:32:88:a7:a6:dd:4b:aa:84:58:be:03:1a: d0:8e:5c:a8:7e:df:fd:2f:3a:bc:6c:a6:d7:59:56: c6:b7:25:66:69:fb:fd:b9:55:df:cb:1f:06:fc:89: 60:a2:d8:4f:5b:c1:56:73:83:74:e4:24:6a:a4:c1: 02:4a:28:85:6c:39:1c:f5:13:e5:98:30:c6:12:b2: 1c:f1:c1:ad:2f:1e:9b:f1:ac:83:df:14:52:2f:d5: 80:75:0f:5b:c2:63:ae:e6:73:ba:5d:cf:61:09:2e: 6b:ff:87:14:b1:3e:5c:33:c9:42:b4:49:d7:ba:07: 1e:3b:18:d6:60:be:3a:57:ae:34:1f:97:5b:a2:97: 18:75:8e:98:f3:3c:6a:4d:61:3f:e1:12:94:36:48: d2:72:65:31:f3:33:c0:15:8e:33:30:43:5a:54:ba: 52:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5B:2E:31:69:1A:CC:39:42:61:2C:27:7B:70:AC:D3:5C:C8:DA:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d126e1ab-78c4-3a31-b14a-e0ced3356c4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.240.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:20:60:1a:2d:12:cc:20:b1:4d:90:fb:e3:fe:74:98:d2:58: 91:9f:c5:5f:6a:4f:49:91:50:be:c4:a2:a9:52:e4:ed:02:cd: 63:a3:d6:1a:f2:06:b7:92:a5:b2:11:ce:b6:d8:c4:cc:37:a0: 1b:5d:b7:c7:8b:d3:79:ae:82:fd:f9:f2:c7:39:f4:29:b6:28: 32:b7:fd:39:12:cb:8e:fe:9e:aa:f7:b9:e3:47:d7:2e:e0:74: 89:d2:8d:e3:01:1f:04:4e:87:88:d2:7c:2f:26:bd:43:d9:e5: e4:e0:3b:99:c8:43:a2:6b:e0:c2:33:96:60:2a:15:55:d4:21: 72:8f:2a:28:58:ab:db:d9:be:3e:0d:93:f5:7e:04:e8:34:9a: 57:11:0b:3b:50:92:fe:61:a5:55:06:93:fe:16:67:62:f2:af: e5:d6:ca:2e:bb:15:35:ec:4e:3a:7e:08:ab:3a:f6:eb:b7:d6: 41:bf:e0:43:d4:e5:2e:3c:b7:8d:81:78:c9:35:57:12:45:bd: 34:66:b7:72:c7:44:17:23:69:f6:a4:14:b1:b8:92:36:54:25: 6d:17:4b:13:6e:1b:97:fc:14:fe:b8:4e:dc:09:23:2f:af:b3: 20:cf:b7:61:9a:04:a2:8a:7a:08:fe:11:a7:cc:5a:30:d2:36: 3a:f9:57:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+j6Wdq7irHSGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk YTUwN2ZiZDUtNTQ4YS00N2I0LWE2NGMtYjlhNjMxODZkZDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vfEhoDT5QDIdmhiypRo1W38NnDZYMIQFxbQ SCFlY0j8wc+LUmJQaSq+0Q29yUfNIgKYfAAL1fqwPOzu2atkrBBXsBlIxYYuBDlO DTLPtRmeMfuSc3ILGTwIa8wyiKem3UuqhFi+AxrQjlyoft/9Lzq8bKbXWVbGtyVm afv9uVXfyx8G/IlgothPW8FWc4N05CRqpMECSiiFbDkc9RPlmDDGErIc8cGtLx6b 8ayD3xRSL9WAdQ9bwmOu5nO6Xc9hCS5r/4cUsT5cM8lCtEnXugceOxjWYL46V640 H5dbopcYdY6Y8zxqTWE/4RKUNkjScmUx8zPAFY4zMENaVLpSCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpbLjFpGsw5QmEsJ3twrNNcyNo4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDEyNmUxYWItNzhjNC0z YTMxLWIxNGEtZTBjZWQzMzU2YzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/DQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8gYBotEswgsU2Q++P+dJjSWJGfxV9qT0mRUL7EoqlS5O0CzWOj1hry BreSpbIRzrbYxMw3oBtdt8eL03mugv358sc59Cm2KDK3/TkSy47+nqr3ueNH1y7g dInSjeMBHwROh4jSfC8mvUPZ5eTgO5nIQ6Jr4MIzlmAqFVXUIXKPKihYq9vZvj4N k/V+BOg0mlcRCztQkv5hpVUGk/4WZ2Lyr+XWyi67FTXsTjp+CKs69uu31kG/4EPU 5S48t42BeMk1VxJFvTRmt3LHRBcjafakFLG4kjZUJW0XSxNuG5f8FP64TtwJIy+v syDPt2GaBKKKegj+EafMWjDSNjr5V9U= -----END CERTIFICATE-----Generated at Fri Mar 14 11:02:52 2025 by rpki-client