$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8aa7d31-5eda-3d04-8a12-16bd1a36ea39.roa File: d8aa7d31-5eda-3d04-8a12-16bd1a36ea39.roa (raw, json) Hash identifier: 0+Hsy7VolOsEOsEeGo8or2E9tOpDyMPRsHBnz4Elysc= Subject key identifier: A5:09:5D:4E:F6:CB:C9:48:C1:94:DC:A7:13:24:E9:58:CE:8F:C3:44 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C00142167B4A9363077C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8aa7d31-5eda-3d04-8a12-16bd1a36ea39.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.195.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:00:14:21:67:b4:a9:36:30:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=fe6b997d-05db-4729-a4bc-9ec592435d26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:55:60:68:ce:4b:35:48:5d:c8:e7:4b:cc:a5: ea:b3:1d:13:d2:ad:7c:f6:51:6f:a9:18:07:23:ff: e2:31:e7:b8:3a:00:9e:c6:ba:a9:da:2e:91:e0:67: ad:e2:1e:22:dc:11:44:bc:43:f6:22:00:7d:57:d1: 75:03:53:7c:88:f1:cd:4f:f3:c0:70:19:39:89:54: 31:99:c2:a4:1a:03:f0:f9:b6:a8:6a:7c:2c:a3:fb: c8:46:7c:7b:8e:58:ac:13:c3:85:76:81:ef:6d:80: a8:b7:8a:b2:fd:24:19:5a:2c:a5:f2:82:0f:9e:6e: 3f:6d:8c:32:32:8d:89:14:e5:33:c9:6e:67:5e:3a: 28:0f:c2:7f:9d:1d:d2:40:f3:f7:74:94:0d:b9:ab: 22:ab:1b:46:ab:2a:5e:7c:6a:61:27:32:6b:26:2d: 07:c0:14:6e:47:18:4a:4a:32:e7:00:e1:e3:f2:81: e4:7c:a0:bb:d9:9e:58:9f:6f:86:6e:70:eb:37:91: 9b:9b:78:18:ad:5c:0e:8c:31:b4:79:40:71:cb:b8: d1:ff:8b:ea:9a:8d:0d:79:78:2d:8f:b4:b2:60:ca: cb:da:9c:86:07:5c:af:90:80:72:cd:3f:66:15:16: e1:8d:4a:b5:bb:1c:b8:f8:ae:39:9c:67:25:83:b6: f0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:09:5D:4E:F6:CB:C9:48:C1:94:DC:A7:13:24:E9:58:CE:8F:C3:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8aa7d31-5eda-3d04-8a12-16bd1a36ea39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.195.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:a1:09:38:07:e3:d2:a0:a6:f3:76:0b:28:00:9c:69:85:90: 51:78:62:10:07:86:59:a4:11:c5:55:98:83:e8:be:b5:0b:bb: 9d:80:9e:21:31:63:00:b1:2d:41:11:d2:3e:a0:90:3a:d6:b2: 4c:27:ab:5d:66:28:b6:c1:f5:ce:18:4c:c9:ce:03:5e:ef:90: 84:d9:76:e5:52:d3:c2:e8:42:ad:ee:5c:74:d2:96:0f:41:b6: b5:c2:12:5b:e2:c7:32:28:f0:25:5d:cb:cd:a1:ee:8f:49:a0: 33:04:5d:c9:f1:3d:95:bb:49:44:2e:de:e3:00:ea:ac:45:0f: a7:71:b5:f4:0b:62:84:19:6f:31:0d:a4:23:cc:5d:3e:65:74: f7:89:75:bf:8f:4f:46:3c:e5:3b:69:7c:cc:99:84:51:86:f2: 10:aa:3c:6f:a3:dc:26:a1:af:d2:45:1a:12:03:a5:37:55:1b: 4f:8b:44:36:e5:f1:d3:b8:b5:5d:51:bb:3c:70:49:37:01:86: c6:83:5a:0f:3c:20:43:04:a3:29:ff:32:be:42:2a:76:d5:ed: 1a:3d:71:a8:bf:44:49:df:32:a9:55:dd:d5:3a:8d:63:d9:32: 5e:ac:c2:7f:fc:a7:a0:4d:18:b7:7b:a3:d5:1c:45:66:7e:c3: f2:24:a7:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITAAUIWe0qTYwd8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk ZmU2Yjk5N2QtMDVkYi00NzI5LWE0YmMtOWVjNTkyNDM1ZDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1VgaM5LNUhdyOdLzKXqsx0T0q189lFvqRgH I//iMee4OgCexrqp2i6R4Get4h4i3BFEvEP2IgB9V9F1A1N8iPHNT/PAcBk5iVQx mcKkGgPw+baoanwso/vIRnx7jlisE8OFdoHvbYCot4qy/SQZWiyl8oIPnm4/bYwy Mo2JFOUzyW5nXjooD8J/nR3SQPP3dJQNuasiqxtGqypefGphJzJrJi0HwBRuRxhK SjLnAOHj8oHkfKC72Z5Yn2+GbnDrN5Gbm3gYrVwOjDG0eUBxy7jR/4vqmo0NeXgt j7SyYMrL2pyGB1yvkIByzT9mFRbhjUq1uxy4+K45nGclg7bwCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUJXU72y8lIwZTcpxMk6VjOj8NEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDhhYTdkMzEtNWVkYS0z ZDA0LThhMTItMTZiZDFhMzZlYTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8OQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOhCTgH49KgpvN2CygAnGmFkFF4YhAHhlmkEcVVmIPovrULu52AniEx YwCxLUER0j6gkDrWskwnq11mKLbB9c4YTMnOA17vkITZduVS08LoQq3uXHTSlg9B trXCElvixzIo8CVdy82h7o9JoDMEXcnxPZW7SUQu3uMA6qxFD6dxtfQLYoQZbzEN pCPMXT5ldPeJdb+PT0Y85TtpfMyZhFGG8hCqPG+j3Cahr9JFGhIDpTdVG0+LRDbl 8dO4tV1RuzxwSTcBhsaDWg88IEMEoyn/Mr5CKnbV7Ro9cai/REnfMqlV3dU6jWPZ Ml6swn/8p6BNGLd7o9UcRWZ+w/Ikp5A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:13 2025 by rpki-client