$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1b2c949-53d6-381a-8fe7-62a862aa1408.roa File: d1b2c949-53d6-381a-8fe7-62a862aa1408.roa (raw, json) Hash identifier: x3LIcOGRGcvQS8vTOqm5mVNt1T5oOKzWG1LLVMPE+dU= Subject key identifier: BE:1B:C3:2A:F8:6B:6A:06:01:40:0B:C4:49:A9:BA:AF:38:F6:16:F4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BDB080F1DC30297796DC0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1b2c949-53d6-381a-8fe7-62a862aa1408.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.235.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:db:08:0f:1d:c3:02:97:79:6d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=619265a9-554f-4306-8b30-a5c28e9e263f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d0:52:91:3c:92:ee:95:69:52:6a:ae:dd:49: 82:ce:b9:17:9f:0a:64:88:29:02:72:6f:ce:92:84: 10:de:4d:fb:4a:f6:b2:0c:82:5b:20:4a:d7:ab:41: c9:c7:a5:58:86:2a:32:48:92:54:0f:ec:98:40:be: 8e:89:b2:72:dd:5d:f7:0a:cf:a7:1d:fe:43:09:8d: b8:24:0c:0c:6a:2d:8d:01:ff:69:c1:96:f4:dc:49: 6b:26:4f:34:da:13:72:35:6d:8d:a6:fe:93:98:d1: 74:3d:7e:39:52:ea:59:45:af:6b:cc:f7:5f:d3:f2: 5f:a4:23:a2:bd:df:fc:1d:1d:16:14:63:ed:b8:3b: 4d:e0:ed:21:da:d1:9b:d3:60:f5:53:2e:6b:fc:22: 92:26:93:56:5b:59:79:e3:00:39:2c:e3:03:8c:af: 9e:45:09:08:79:e2:07:9c:84:32:36:bd:82:43:63: bf:1b:f0:14:6c:ef:01:72:6b:14:28:06:c7:25:44: 10:1b:3d:d9:df:8d:73:8b:e9:04:07:43:e1:ff:ea: 8c:eb:a3:4f:b8:7e:7c:cc:da:ec:20:5c:55:b7:25: 5b:d3:8c:d7:c8:7f:69:c1:62:b7:bb:c1:47:56:ff: f4:f0:e7:e8:1b:3d:fa:22:9c:e7:dc:37:8f:1d:83: 30:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:1B:C3:2A:F8:6B:6A:06:01:40:0B:C4:49:A9:BA:AF:38:F6:16:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1b2c949-53d6-381a-8fe7-62a862aa1408.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.235.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:b0:f6:41:f3:42:fa:29:d3:5a:c7:36:e5:00:60:d2:e0:a1: 37:88:27:3c:7a:c9:36:ae:c1:aa:f1:52:52:13:57:26:f0:1f: 81:49:36:d0:e0:8f:d8:99:40:db:ca:b8:ce:80:2b:31:8d:30: 91:18:e5:b6:5b:8d:12:32:ec:a9:23:26:13:d9:89:f9:81:2b: 46:75:f4:9a:63:42:53:68:a0:c6:b9:c0:6d:72:f9:90:34:73: 8a:cc:c6:47:ab:c1:df:7a:60:23:e0:19:2c:d8:e0:3b:44:25: 4a:46:d1:62:30:7e:72:3d:80:bb:3e:e8:b9:14:71:99:ff:ea: 08:13:a5:63:71:fe:db:17:52:c6:7f:c4:09:54:37:bc:a7:8d: 46:70:59:21:b3:ed:21:95:92:bb:a5:e6:aa:78:30:cc:2e:c9: 71:4d:8b:b0:ca:dc:0a:bc:cd:c8:de:ec:c4:93:47:9a:e7:75: a2:7b:cc:7c:f4:aa:08:e6:ad:74:9a:75:60:f6:b7:f2:31:13: 92:fd:1d:df:8f:e3:07:d1:e5:df:63:41:79:eb:b0:85:47:e4: 3d:29:9f:3e:65:d8:6a:fa:5a:9b:fb:03:d5:c3:17:5e:cb:27: 2a:d9:ee:e2:f5:41:21:28:e3:20:7b:3a:cb:39:b9:74:74:36: 71:c6:17:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS9sIDx3DApd5bcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NjE5MjY1YTktNTU0Zi00MzA2LThiMzAtYTVjMjhlOWUyNjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9BSkTyS7pVpUmqu3UmCzrkXnwpkiCkCcm/O koQQ3k37SvayDIJbIErXq0HJx6VYhioySJJUD+yYQL6OibJy3V33Cs+nHf5DCY24 JAwMai2NAf9pwZb03ElrJk802hNyNW2Npv6TmNF0PX45UupZRa9rzPdf0/JfpCOi vd/8HR0WFGPtuDtN4O0h2tGb02D1Uy5r/CKSJpNWW1l54wA5LOMDjK+eRQkIeeIH nIQyNr2CQ2O/G/AUbO8BcmsUKAbHJUQQGz3Z341zi+kEB0Ph/+qM66NPuH58zNrs IFxVtyVb04zXyH9pwWK3u8FHVv/08OfoGz36Ipzn3DePHYMwZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4bwyr4a2oGAUALxEmpuq849hb0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDFiMmM5NDktNTNkNi0z ODFhLThmZTctNjJhODYyYWExNDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI+vAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOw9kHzQvop01rHNuUAYNLgoTeIJzx6yTauwarxUlITVybwH4FJNtDg j9iZQNvKuM6AKzGNMJEY5bZbjRIy7KkjJhPZifmBK0Z19JpjQlNooMa5wG1y+ZA0 c4rMxkerwd96YCPgGSzY4DtEJUpG0WIwfnI9gLs+6LkUcZn/6ggTpWNx/tsXUsZ/ xAlUN7ynjUZwWSGz7SGVkrul5qp4MMwuyXFNi7DK3Aq8zcje7MSTR5rndaJ7zHz0 qgjmrXSadWD2t/IxE5L9Hd+P4wfR5d9jQXnrsIVH5D0pnz5l2Gr6Wpv7A9XDF17L JyrZ7uL1QSEo4yB7Oss5uXR0NnHGF4U= -----END CERTIFICATE-----Generated at Fri Apr 4 18:09:18 2025 by rpki-client