$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d35ea6b9-1316-3b8c-99ab-60bed73457bf.roa File: d35ea6b9-1316-3b8c-99ab-60bed73457bf.roa (raw, json) Hash identifier: byjkMV8BU+BNkEfcgkZwaZ6dtbvtmqXjGY2VpT4X/kE= Subject key identifier: A4:FB:9C:D0:68:C3:B6:62:7A:B3:B5:65:BC:05:4B:A5:B1:DC:A5:AB Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C08A947145117069CF180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d35ea6b9-1316-3b8c-99ab-60bed73457bf.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.246.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:08:a9:47:14:51:17:06:9c:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=ed8ca2ff-80d4-4b30-a649-5ba598a0f6ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c9:a0:b3:ff:bc:be:4f:6e:2d:b5:72:3c:ab: 8a:85:5b:3e:e1:f1:a2:ab:b3:0d:9d:e6:31:16:d4: 7d:8d:ad:77:b9:ac:99:0a:07:aa:d1:5d:2a:d3:57: 01:15:e0:3e:f6:d0:9c:56:2e:69:16:bc:b4:63:05: 70:4e:3c:2c:db:8b:d9:49:af:14:98:2f:52:29:24: f1:f9:8c:b9:b3:8b:50:85:c3:cc:04:fe:fd:74:42: 71:e0:46:b7:21:81:a8:9f:a5:e1:2c:68:c5:99:f7: d5:f5:a1:6b:c7:13:00:ed:b7:a8:89:d2:50:50:d8: 84:e0:60:22:4f:d0:e5:23:d6:d1:0e:cb:ca:aa:77: 66:67:ad:f1:e3:76:21:44:df:1c:b3:5e:9f:53:f0: 35:77:c3:35:cd:09:b1:3c:b3:68:50:29:6e:44:41: 26:64:9b:dd:d1:61:1b:d0:f0:33:f8:97:54:17:61: a5:5b:8d:03:b2:3c:36:8b:28:74:aa:f1:9f:fe:1a: e0:8d:e5:57:bb:e1:ce:c6:33:c0:11:eb:2d:06:f5: 85:9f:e2:33:a0:9c:8c:f3:2e:e9:61:07:41:34:d5: f9:fb:a7:9f:5b:39:93:a7:c4:f9:b5:37:a7:9c:8a: 58:af:b1:3d:5c:8f:55:93:82:27:90:5d:34:5e:cd: 6d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FB:9C:D0:68:C3:B6:62:7A:B3:B5:65:BC:05:4B:A5:B1:DC:A5:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d35ea6b9-1316-3b8c-99ab-60bed73457bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.246.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:95:7c:3d:8d:04:41:de:96:a4:12:5b:3e:b8:b7:4c:3c:ca: 98:69:27:cb:d2:5b:b1:81:11:69:d9:99:f9:11:74:3e:95:01: 94:8d:d4:71:cc:48:dc:e0:3d:25:3c:e8:cd:2c:7e:37:56:e0: 39:7c:71:cb:dd:6f:e7:69:22:9f:06:1f:90:30:73:71:8b:d3: 92:77:3e:92:26:9a:e9:08:c4:2a:f7:20:ae:7d:f3:6f:7b:1e: eb:0a:b8:ce:4e:d3:7c:fb:e7:56:c5:a6:29:09:cf:53:ba:e6: e0:87:85:3d:47:11:68:ca:93:35:11:b2:23:42:e3:fb:cb:c9: ca:4c:26:77:52:2f:35:ad:89:56:29:43:dc:e6:0e:dc:67:9d: 82:48:fe:e3:a5:e6:da:97:6e:2a:59:6a:be:e9:93:2c:3c:a2: 70:f7:4a:27:1f:a0:1b:c5:7e:61:11:09:80:30:6a:d8:9e:d0: d4:aa:da:e6:12:d6:5e:4a:66:e4:e6:71:e3:5e:c2:dc:1b:cd: 66:94:b3:17:bc:ac:ae:2e:26:3c:25:4a:4c:26:18:a8:3a:e0: e2:71:93:9a:b7:51:3d:a7:48:48:f4:97:78:7f:de:88:07:cd: de:1e:4d:36:d9:30:02:7e:f4:20:31:46:56:c5:37:18:4a:b3: 99:51:3b:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITAipRxRRFwac8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZWQ4Y2EyZmYtODBkNC00YjMwLWE2NDktNWJhNTk4YTBmNmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8mgs/+8vk9uLbVyPKuKhVs+4fGiq7MNneYx FtR9ja13uayZCgeq0V0q01cBFeA+9tCcVi5pFry0YwVwTjws24vZSa8UmC9SKSTx +Yy5s4tQhcPMBP79dEJx4Ea3IYGon6XhLGjFmffV9aFrxxMA7beoidJQUNiE4GAi T9DlI9bRDsvKqndmZ63x43YhRN8cs16fU/A1d8M1zQmxPLNoUCluREEmZJvd0WEb 0PAz+JdUF2GlW40Dsjw2iyh0qvGf/hrgjeVXu+HOxjPAEestBvWFn+IzoJyM8y7p YQdBNNX5+6efWzmTp8T5tTennIpYr7E9XI9Vk4InkF00Xs1tzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKT7nNBow7ZierO1ZbwFS6Wx3KWrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDM1ZWE2YjktMTMxNi0z YjhjLTk5YWItNjBiZWQ3MzQ1N2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/aAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaVfD2NBEHelqQSWz64t0w8yphpJ8vSW7GBEWnZmfkRdD6VAZSN1HHM SNzgPSU86M0sfjdW4Dl8ccvdb+dpIp8GH5Awc3GL05J3PpImmukIxCr3IK598297 HusKuM5O03z751bFpikJz1O65uCHhT1HEWjKkzURsiNC4/vLycpMJndSLzWtiVYp Q9zmDtxnnYJI/uOl5tqXbipZar7pkyw8onD3SicfoBvFfmERCYAwatie0NSq2uYS 1l5KZuTmceNewtwbzWaUsxe8rK4uJjwlSkwmGKg64OJxk5q3UT2nSEj0l3h/3ogH zd4eTTbZMAJ+9CAxRlbFNxhKs5lROzI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:38 2025 by rpki-client