$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dc707b53-fce9-3d82-a2ba-508b164a5ac2.roa File: dc707b53-fce9-3d82-a2ba-508b164a5ac2.roa (raw, json) Hash identifier: ZQviilWC81mRqMctr6dxyEVGWcF9yeuPW3+qMnuImik= Subject key identifier: BD:57:E2:9E:68:24:C5:EC:8B:AE:D6:AB:84:74:B1:0A:E3:BA:C6:CF Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C1DA35A46ED528196DA00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dc707b53-fce9-3d82-a2ba-508b164a5ac2.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.246.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:1d:a3:5a:46:ed:52:81:96:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=56c4563a-3d3d-4fbc-a5e5-568e93c97e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e8:2a:51:81:e1:bc:46:6a:9d:47:bf:d1:7d: f2:40:37:35:c5:16:da:9e:2c:f4:b4:8d:01:98:42: eb:3a:b2:a2:1e:9c:e3:fe:6e:3c:93:38:c7:8a:5d: 71:d1:8a:1f:0b:10:40:7c:22:50:e7:64:42:9c:f7: 75:91:55:42:3b:f0:23:6e:c0:27:8e:49:65:25:3c: 54:e5:19:61:4f:ef:ae:79:31:af:57:90:69:6f:7a: 3c:4c:3e:cc:c4:27:77:5e:2f:da:ca:50:76:6c:b4: 9f:1c:fd:6c:61:3d:3d:5c:06:59:97:72:6d:dd:64: 79:72:7e:b8:cc:42:88:f1:f9:f5:0d:fb:a0:27:f0: b3:0e:64:c3:e9:0b:c0:71:78:8a:f1:d8:89:04:6c: 88:f4:9e:88:45:b1:58:9f:5e:8a:9a:d4:14:91:5e: aa:ec:cb:de:b0:d6:75:b6:fb:a7:3b:b1:4b:03:1c: 6d:e0:de:40:66:fa:89:7b:44:be:10:02:73:5d:e1: ad:e6:49:66:ca:05:47:25:41:74:0d:aa:af:9f:cf: 9e:ea:42:02:fe:c0:4e:27:20:a6:b2:28:02:6f:8f: 0b:47:90:19:57:66:71:79:5d:7d:d6:0d:6c:48:80: e8:33:6a:92:14:16:1b:8b:01:b7:d4:b0:0c:66:25: d3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:57:E2:9E:68:24:C5:EC:8B:AE:D6:AB:84:74:B1:0A:E3:BA:C6:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dc707b53-fce9-3d82-a2ba-508b164a5ac2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.246.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:eb:e0:3d:e0:d4:87:43:83:e7:32:f3:a0:42:46:61:97:89: 9d:65:24:2d:e9:be:73:66:53:ca:c6:31:70:26:f8:da:ae:46: 29:4f:16:87:76:09:ae:17:3f:34:2b:1a:37:5b:17:a5:e0:69: f4:80:97:bd:29:20:79:f0:7a:ba:a0:85:55:31:ba:ed:7e:7e: 6e:9a:e0:b7:3a:91:17:5b:50:d8:af:77:67:8f:df:01:27:c7: 90:4b:95:f5:8c:06:d9:c6:a1:c0:da:5b:14:ba:67:08:8e:c1: d4:12:3a:e5:b5:df:a3:1d:3c:a6:37:51:cc:50:69:d8:f9:ca: 9e:a2:f5:f0:99:1d:9e:9f:d1:87:b8:f4:20:8a:a1:01:69:2e: 1a:71:ea:d8:d7:6e:f4:ec:56:ac:e0:ee:ff:4f:15:57:5d:98: 46:a2:5e:3c:a9:5c:d9:3c:ce:cc:99:f0:b8:7e:42:55:83:f9: 93:59:70:ff:00:49:08:1f:11:7c:6a:35:2d:6a:87:2c:92:35: ad:e8:4e:84:c7:00:81:e0:83:8c:c7:ba:48:3e:b9:7a:6d:f1: 6e:73:8d:f8:5c:f6:59:59:9f:73:94:d8:4a:a0:af:1f:8c:46: 37:6a:a5:0c:2d:2a:35:0c:b1:18:50:33:82:d2:79:34:bc:0c: e1:93:f4:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITB2jWkbtUoGW2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NTZjNDU2M2EtM2QzZC00ZmJjLWE1ZTUtNTY4ZTkzYzk3ZTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOgqUYHhvEZqnUe/0X3yQDc1xRbaniz0tI0B mELrOrKiHpzj/m48kzjHil1x0YofCxBAfCJQ52RCnPd1kVVCO/AjbsAnjkllJTxU 5RlhT++ueTGvV5Bpb3o8TD7MxCd3Xi/aylB2bLSfHP1sYT09XAZZl3Jt3WR5cn64 zEKI8fn1DfugJ/CzDmTD6QvAcXiK8diJBGyI9J6IRbFYn16KmtQUkV6q7MvesNZ1 tvunO7FLAxxt4N5AZvqJe0S+EAJzXeGt5klmygVHJUF0Daqvn8+e6kIC/sBOJyCm sigCb48LR5AZV2ZxeV191g1sSIDoM2qSFBYbiwG31LAMZiXT8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1X4p5oJMXsi67Wq4R0sQrjusbPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGM3MDdiNTMtZmNlOS0z ZDgyLWEyYmEtNTA4YjE2NGE1YWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/aQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfr4D3g1IdDg+cy86BCRmGXiZ1lJC3pvnNmU8rGMXAm+NquRilPFod2 Ca4XPzQrGjdbF6XgafSAl70pIHnwerqghVUxuu1+fm6a4Lc6kRdbUNivd2eP3wEn x5BLlfWMBtnGocDaWxS6ZwiOwdQSOuW136MdPKY3UcxQadj5yp6i9fCZHZ6f0Ye4 9CCKoQFpLhpx6tjXbvTsVqzg7v9PFVddmEaiXjypXNk8zsyZ8Lh+QlWD+ZNZcP8A SQgfEXxqNS1qhyySNa3oToTHAIHgg4zHukg+uXpt8W5zjfhc9llZn3OU2Eqgrx+M RjdqpQwtKjUMsRhQM4LSeTS8DOGT9PE= -----END CERTIFICATE-----Generated at Fri Apr 4 21:40:20 2025 by rpki-client