$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd6f1db2-878d-3045-aa9e-11f2d46ef7b4.roa File: dd6f1db2-878d-3045-aa9e-11f2d46ef7b4.roa (raw, json) Hash identifier: 0X0tTEIHBSetmGFwdERcgfwYJGFKaaxM78nqnTnkflo= Subject key identifier: 48:9E:57:E4:6E:5A:58:86:44:6F:35:6D:2E:C4:7B:48:E1:69:74:5F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C1A58E64E4A3D54C184C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd6f1db2-878d-3045-aa9e-11f2d46ef7b4.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.202.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:1a:58:e6:4e:4a:3d:54:c1:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=8ee88f7a-f5a9-40a4-841b-1e3541612411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:39:0e:b4:28:10:2b:fb:a1:2c:04:32:86:55: 61:1f:91:5b:d5:84:39:bd:f7:f4:a0:b8:34:66:cd: e3:12:ec:2c:2d:e7:2f:be:d5:e2:49:62:9c:bb:9d: e0:09:9d:a2:0c:53:b3:6e:b0:59:ac:15:71:e4:00: b4:99:2f:a6:75:43:00:20:bc:9f:82:1d:0c:37:0e: 3a:8f:1a:67:e3:98:68:97:59:da:bd:11:33:0b:e0: 05:c3:47:c4:44:f9:91:3d:8d:59:f9:3a:39:9e:ee: 9c:22:5a:49:e0:68:2a:0c:3c:42:c1:9a:be:e4:06: 6e:45:9f:fb:a8:98:03:30:5d:e8:c6:55:b4:4e:21: 08:f5:d0:a6:36:c3:61:51:32:f4:de:f1:af:3a:a7: 04:31:9d:ec:18:15:44:8b:a3:3e:c0:6c:83:7a:d2: 31:4f:70:87:3a:e3:a6:a1:b0:04:33:c4:e6:82:d1: 07:31:ec:76:65:a0:c2:57:70:d1:ac:19:f9:2b:35: 97:1e:17:91:60:cc:49:f2:dc:e1:c9:21:c6:d6:51: e1:14:08:ee:3d:3f:85:d8:68:85:d0:f4:2c:1f:16: 84:91:8e:29:70:62:67:50:3d:36:0f:38:e2:53:2f: 5e:7c:5c:fd:9d:4c:af:d9:80:c3:a2:30:8a:7e:c1: e1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:9E:57:E4:6E:5A:58:86:44:6F:35:6D:2E:C4:7B:48:E1:69:74:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/dd6f1db2-878d-3045-aa9e-11f2d46ef7b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.202.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:3d:e1:61:54:8e:5c:53:70:f6:86:f3:c0:f3:ac:eb:c2:da: 0b:52:5b:16:e8:b4:39:58:95:d0:98:7b:b6:2f:f1:98:c8:0a: 06:f6:81:05:87:47:fa:75:5a:f1:ec:d7:51:e8:78:f6:52:55: 16:c0:64:04:6c:30:d1:42:ad:c4:12:d2:91:8f:5a:fb:c7:ff: df:5e:a9:75:45:23:8e:c7:2b:81:f4:cf:20:3f:2e:37:6b:3c: 2f:51:4c:e1:ff:40:a3:65:63:21:08:6c:c5:91:a6:98:57:15: 29:26:fb:c8:e5:c6:58:8f:c8:e8:19:e4:c3:8c:53:8d:3c:08: 0d:66:17:c4:89:cc:85:d3:13:8b:e0:d5:a9:1f:cc:f6:13:da: 96:5b:52:ad:53:bf:d2:65:f7:29:3a:cf:c5:17:fd:f3:26:52: 7e:ec:4f:35:00:fe:8e:62:36:ce:47:5e:11:65:fc:20:2e:9f: ed:ae:cd:fc:50:3d:79:50:36:21:65:ca:d6:a8:c7:1e:d3:f3: 48:a4:0a:ae:01:1d:a6:83:a4:6a:f7:b9:17:b0:00:42:03:3a: 25:e3:93:bc:55:39:9b:09:c9:25:2d:17:69:ec:37:92:20:d7: ac:e7:b7:d2:d5:5e:7f:66:ef:14:39:d4:75:63:33:bf:3a:b0: 2a:26:44:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITBpY5k5KPVTBhMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk OGVlODhmN2EtZjVhOS00MGE0LTg0MWItMWUzNTQxNjEyNDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjkOtCgQK/uhLAQyhlVhH5Fb1YQ5vff0oLg0 Zs3jEuwsLecvvtXiSWKcu53gCZ2iDFOzbrBZrBVx5AC0mS+mdUMAILyfgh0MNw46 jxpn45hol1navREzC+AFw0fERPmRPY1Z+To5nu6cIlpJ4GgqDDxCwZq+5AZuRZ/7 qJgDMF3oxlW0TiEI9dCmNsNhUTL03vGvOqcEMZ3sGBVEi6M+wGyDetIxT3CHOuOm obAEM8TmgtEHMex2ZaDCV3DRrBn5KzWXHheRYMxJ8tzhySHG1lHhFAjuPT+F2GiF 0PQsHxaEkY4pcGJnUD02DzjiUy9efFz9nUyv2YDDojCKfsHhcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEieV+RuWliGRG81bS7Ee0jhaXRfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGQ2ZjFkYjItODc4ZC0z MDQ1LWFhOWUtMTFmMmQ0NmVmN2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8qgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKA94WFUjlxTcPaG88DzrOvC2gtSWxbotDlYldCYe7Yv8ZjICgb2gQWH R/p1WvHs11HoePZSVRbAZARsMNFCrcQS0pGPWvvH/99eqXVFI47HK4H0zyA/Ljdr PC9RTOH/QKNlYyEIbMWRpphXFSkm+8jlxliPyOgZ5MOMU408CA1mF8SJzIXTE4vg 1akfzPYT2pZbUq1Tv9Jl9yk6z8UX/fMmUn7sTzUA/o5iNs5HXhFl/CAun+2uzfxQ PXlQNiFlytaoxx7T80ikCq4BHaaDpGr3uRewAEIDOiXjk7xVOZsJySUtF2nsN5Ig 16znt9LVXn9m7xQ51HVjM786sComRIg= -----END CERTIFICATE-----Generated at Fri Apr 4 21:40:37 2025 by rpki-client