$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db37a99b-a1a1-3f66-98e6-d6c1d96ecf61.roa File: db37a99b-a1a1-3f66-98e6-d6c1d96ecf61.roa (raw, json) Hash identifier: ZKIkxW1YnYehinzSuLFaIfTo38Mit0OOcpviuFiXpiM= Subject key identifier: 47:8E:6E:C1:79:07:06:C9:6C:C7:36:2A:68:9E:63:34:FE:DD:AC:BD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BC3DBE51545820387D780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db37a99b-a1a1-3f66-98e6-d6c1d96ecf61.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.187.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:c3:db:e5:15:45:82:03:87:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=23229ef3-9ddb-42a1-8be3-d056038229b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:e8:04:39:5d:19:30:65:6f:0a:9f:83:8f:e0: 7a:5c:bc:cb:cb:08:29:79:9b:ea:95:8f:77:21:56: 58:9a:8b:45:76:6a:0f:c4:7b:ae:2f:8e:ff:e0:77: 0b:ca:9a:d1:44:3e:5e:5b:ea:f7:17:f7:8d:c3:c4: de:53:36:ec:99:ad:9b:ec:cb:b0:09:e8:5d:55:52: b1:88:9d:5e:aa:55:f5:50:b1:67:d2:27:4f:4f:64: db:66:23:75:93:68:d9:2c:33:44:ad:c7:a2:63:80: e3:1a:5b:ca:7d:3c:da:69:29:d5:56:84:57:31:41: c2:ce:67:4f:b3:b4:84:60:40:8d:a4:01:6b:7f:ce: 7e:18:db:38:cf:77:cb:00:db:b0:92:f5:7d:b9:d7: 94:9b:e9:04:0a:78:4f:ff:8c:a2:3f:c8:36:bc:a2: 60:38:bc:bb:76:86:cb:a0:bf:9a:0d:78:5b:0e:20: 3c:bc:d6:c8:24:4a:fe:3b:28:ac:fc:ee:7d:32:08: e3:0b:88:7f:c5:b2:99:45:d5:e7:0b:d3:34:b3:f9: bc:33:a1:7d:cf:bd:f7:9f:cd:50:e6:7f:68:10:c6: 1e:22:23:11:57:e5:c0:5e:40:3a:f1:8e:8e:e6:b3: 11:ec:23:eb:0e:99:c3:1e:d0:35:36:96:c2:15:f1: 21:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8E:6E:C1:79:07:06:C9:6C:C7:36:2A:68:9E:63:34:FE:DD:AC:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db37a99b-a1a1-3f66-98e6-d6c1d96ecf61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.187.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:4e:b1:46:a5:60:f1:46:39:dc:bc:c7:ec:80:54:17:8e:79: 2d:89:75:b9:00:6b:7a:a0:b7:ad:4d:02:e6:be:94:d2:b3:4e: 9e:0b:37:7e:e7:38:05:4a:fe:f8:96:7b:d0:4c:4d:c3:e7:9c: 24:30:88:5a:3a:f1:5c:63:5a:fd:e4:bf:88:a6:06:61:5f:98: 8f:fc:a3:6e:1a:83:4b:e8:d2:2f:04:36:80:b1:c9:34:39:01: 6c:5b:b8:90:9d:b9:0d:fc:50:7e:4c:6e:b2:72:c3:ab:8f:6f: 9b:1a:a7:e8:e2:c8:73:5d:9c:ef:53:91:7f:7d:66:9d:a1:4d: 3c:13:ab:ff:cb:1d:76:48:70:d1:a9:1b:0b:02:a1:53:a9:45: 16:e0:dc:de:1f:13:2a:3d:af:4d:b8:d0:38:e8:94:e0:6d:c8: 25:a3:25:b6:4d:f1:e7:96:95:94:2b:1a:83:84:e4:80:55:65: 6a:19:98:17:4b:63:3d:0c:84:91:ed:fc:b5:a9:bd:ee:49:cf: 29:4c:ea:7e:7c:13:d2:e0:82:c5:4f:56:ef:5e:5c:a2:f1:62: 28:4d:09:aa:13:31:a4:d0:9b:fb:85:1c:4e:c4:79:99:bf:6a: af:9b:18:bb:b9:32:c4:46:5d:a2:17:3d:ce:eb:6b:57:d4:42: ae:63:f1:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS8Pb5RVFggOH14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MjMyMjllZjMtOWRkYi00MmExLThiZTMtZDA1NjAzODIyOWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9OgEOV0ZMGVvCp+Dj+B6XLzLywgpeZvqlY93 IVZYmotFdmoPxHuuL47/4HcLyprRRD5eW+r3F/eNw8TeUzbsma2b7MuwCehdVVKx iJ1eqlX1ULFn0idPT2TbZiN1k2jZLDNErceiY4DjGlvKfTzaaSnVVoRXMUHCzmdP s7SEYECNpAFrf85+GNs4z3fLANuwkvV9udeUm+kECnhP/4yiP8g2vKJgOLy7dobL oL+aDXhbDiA8vNbIJEr+Oyis/O59MgjjC4h/xbKZRdXnC9M0s/m8M6F9z733n81Q 5n9oEMYeIiMRV+XAXkA68Y6O5rMR7CPrDpnDHtA1NpbCFfEhCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEeObsF5BwbJbMc2KmieYzT+3ay9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGIzN2E5OWItYTFhMS0z ZjY2LTk4ZTYtZDZjMWQ5NmVjZjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI7twMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpOsUalYPFGOdy8x+yAVBeOeS2JdbkAa3qgt61NAua+lNKzTp4LN37n OAVK/viWe9BMTcPnnCQwiFo68VxjWv3kv4imBmFfmI/8o24ag0vo0i8ENoCxyTQ5 AWxbuJCduQ38UH5MbrJyw6uPb5sap+jiyHNdnO9TkX99Zp2hTTwTq//LHXZIcNGp GwsCoVOpRRbg3N4fEyo9r0240DjolOBtyCWjJbZN8eeWlZQrGoOE5IBVZWoZmBdL Yz0MhJHt/LWpve5JzylM6n58E9LggsVPVu9eXKLxYihNCaoTMaTQm/uFHE7EeZm/ aq+bGLu5MsRGXaIXPc7ra1fUQq5j8XM= -----END CERTIFICATE-----Generated at Fri Mar 14 11:04:15 2025 by rpki-client