$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1f4e3ba-ee06-30cd-9485-a8f6a8d5069f.roa File: d1f4e3ba-ee06-30cd-9485-a8f6a8d5069f.roa (raw, json) Hash identifier: EHlJFRqVm2qEMHIFL0lDrrKF8MrnHRM+kc2yG5OqVGk= Subject key identifier: A6:E5:D1:B1:EF:C4:5A:D0:9F:9D:46:32:B9:F1:DA:27:7B:D6:69:5F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C1B30A8372B5386B213C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1f4e3ba-ee06-30cd-9485-a8f6a8d5069f.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.220.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:1b:30:a8:37:2b:53:86:b2:13:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=944715ce-9a7f-4814-8564-3815753bb71e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:00:95:1d:de:d9:54:06:bb:8f:f1:6b:9b:f1: 16:d4:ba:f2:3c:51:a4:bf:7b:60:ce:fb:3c:68:0e: 11:a5:66:f5:08:e1:c8:68:82:cb:e6:86:dd:52:66: 57:11:8a:21:bb:62:53:43:3a:27:5a:a5:17:4b:6e: e5:44:b7:fb:00:9d:c1:5a:5f:3f:7f:c3:12:f1:04: 19:9c:fd:ee:4a:fd:d2:56:e3:54:50:b6:b4:8d:55: 80:98:57:17:c6:e8:ba:e1:02:79:3e:28:c8:6d:f7: 54:b4:8d:a1:06:30:ce:b6:69:c4:c6:9a:ec:90:d6: ee:15:10:86:24:76:5e:36:43:d1:3f:09:ea:91:8f: 1c:78:2d:fd:14:63:f7:da:0c:4a:b3:50:22:80:cd: 7d:fa:cd:76:c8:2b:e9:d8:22:7d:02:25:4a:23:a5: 4c:2e:c5:f5:d9:64:b5:71:b4:91:a1:ee:4d:0e:d1: 4f:95:4f:d8:16:17:c1:e9:6f:9e:62:a2:6d:12:c8: 3c:61:db:0d:f2:5b:d3:50:8f:da:58:6a:91:22:4d: 7c:eb:a5:6d:45:c9:25:f6:f5:21:e4:89:98:bd:f3: 3d:b7:42:19:da:b8:c9:95:85:e2:23:3a:92:a9:69: bc:29:c1:10:8f:b7:c9:58:2a:ba:c6:a0:0b:ae:0c: 57:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E5:D1:B1:EF:C4:5A:D0:9F:9D:46:32:B9:F1:DA:27:7B:D6:69:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1f4e3ba-ee06-30cd-9485-a8f6a8d5069f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.220.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:06:20:75:22:d8:8b:99:9d:06:76:bf:29:96:ee:fd:8c:4d: 04:d2:bf:63:77:72:9e:7d:1d:e9:5e:08:6c:04:c1:10:7b:ab: 21:ba:c0:95:c1:a2:b6:c1:c7:dc:f1:a5:ad:6e:a4:5d:15:d5: 15:6e:b7:97:1d:73:ac:d4:6e:3e:66:a5:fd:9e:0d:b3:87:f8: 73:76:81:1a:46:ea:a0:b4:5a:3d:75:29:85:90:a3:01:36:06: 21:17:c0:8b:c1:4b:9c:44:66:c4:26:49:d1:b4:3b:49:79:fa: 1e:68:9d:d4:d0:85:91:dd:f1:21:6f:2e:71:5f:56:14:45:14: c4:3b:08:bd:0b:de:4d:4a:b7:7b:c7:b2:20:35:48:57:33:14: 6e:df:1e:b4:ff:1a:96:e0:c2:70:b9:e5:d2:31:8c:b3:11:19: 57:bd:51:9c:55:f6:83:01:9d:76:11:8c:57:d5:03:c9:7d:be: 10:25:39:d1:4b:51:b5:19:cf:74:4d:86:1a:11:6d:70:40:43: 2a:a1:20:bb:80:df:b6:41:a1:d4:c7:02:ab:8b:fd:7c:18:72: d4:1e:21:ad:59:a9:d6:98:8d:87:b7:14:be:a6:7e:00:c0:36: 35:57:e9:d2:61:49:32:68:0a:1c:9a:c2:23:10:34:94:e2:1f: ff:e1:8e:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITBswqDcrU4ayE8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk OTQ0NzE1Y2UtOWE3Zi00ODE0LTg1NjQtMzgxNTc1M2JiNzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwCVHd7ZVAa7j/Frm/EW1LryPFGkv3tgzvs8 aA4RpWb1COHIaILL5obdUmZXEYohu2JTQzonWqUXS27lRLf7AJ3BWl8/f8MS8QQZ nP3uSv3SVuNUULa0jVWAmFcXxui64QJ5PijIbfdUtI2hBjDOtmnExprskNbuFRCG JHZeNkPRPwnqkY8ceC39FGP32gxKs1AigM19+s12yCvp2CJ9AiVKI6VMLsX12WS1 cbSRoe5NDtFPlU/YFhfB6W+eYqJtEsg8YdsN8lvTUI/aWGqRIk1866VtRckl9vUh 5ImYvfM9t0IZ2rjJlYXiIzqSqWm8KcEQj7fJWCq6xqALrgxX2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbl0bHvxFrQn51GMrnx2id71mlfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDFmNGUzYmEtZWUwNi0z MGNkLTk0ODUtYThmNmE4ZDUwNjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI9zwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8GIHUi2IuZnQZ2vymW7v2MTQTSv2N3cp59HeleCGwEwRB7qyG6wJXB orbBx9zxpa1upF0V1RVut5cdc6zUbj5mpf2eDbOH+HN2gRpG6qC0Wj11KYWQowE2 BiEXwIvBS5xEZsQmSdG0O0l5+h5ondTQhZHd8SFvLnFfVhRFFMQ7CL0L3k1Kt3vH siA1SFczFG7fHrT/GpbgwnC55dIxjLMRGVe9UZxV9oMBnXYRjFfVA8l9vhAlOdFL UbUZz3RNhhoRbXBAQyqhILuA37ZBodTHAquL/XwYctQeIa1ZqdaYjYe3FL6mfgDA NjVX6dJhSTJoChyawiMQNJTiH//hjqk= -----END CERTIFICATE-----Generated at Fri Apr 4 21:05:58 2025 by rpki-client