$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df69434d-c794-3407-804e-69f0bb2a8ea7.roa File: df69434d-c794-3407-804e-69f0bb2a8ea7.roa (raw, json) Hash identifier: n7fyAqtDKl9Qboib+QUy2qwkbTbbJzuf9OEIijsLZDU= Subject key identifier: 99:DD:4A:A0:D3:AA:1A:66:E8:93:F0:E0:A3:1C:FB:DF:9B:F8:FB:D9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C0368DB36F33657054800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df69434d-c794-3407-804e-69f0bb2a8ea7.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 15169 IP address blocks: 35.206.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:03:68:db:36:f3:36:57:05:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=4f5e0f4a-7750-45bb-a51f-1a4683ac9366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:11:35:86:89:6b:57:11:12:70:5f:3a:63:13: 6d:3f:57:c5:2a:63:e6:fb:00:7d:6c:a0:78:ae:9b: 9a:78:0a:26:63:19:5c:5c:4b:ea:37:84:05:c3:88: 2c:e0:b4:7b:3d:ac:6f:f7:17:6c:83:22:14:7b:76: ce:46:0d:81:03:83:6d:4a:c7:89:a5:bc:fb:83:65: 7e:fd:05:c0:c4:92:f8:08:67:fa:08:dc:1e:c0:59: 28:ba:f6:22:07:c1:3c:cc:90:8a:ce:87:f1:4d:01: ad:6f:e3:31:2f:17:8f:7b:a2:45:e0:f1:9b:e3:09: 58:df:cf:44:09:87:5d:05:f3:b9:14:8f:2d:f9:0d: ee:45:bc:9a:0f:09:40:e2:ef:69:52:87:af:cf:22: 90:74:e0:06:22:bd:3f:27:4a:37:f5:84:9d:ec:d2: 70:40:71:f0:ab:7b:4c:12:89:f8:63:15:ce:b1:b5: 44:12:31:fb:3d:85:5b:d9:d1:68:9b:5e:51:22:54: d4:64:5a:c0:c9:b3:bd:26:c7:49:8e:66:0e:7d:41: af:cc:d2:7c:1e:63:df:e4:91:0f:cc:dd:c4:f3:4c: d2:6c:65:18:1d:13:7a:82:34:aa:41:9f:7a:f2:c3: a3:35:70:df:46:6b:14:8f:43:97:d7:c9:48:c8:d7: 74:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DD:4A:A0:D3:AA:1A:66:E8:93:F0:E0:A3:1C:FB:DF:9B:F8:FB:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df69434d-c794-3407-804e-69f0bb2a8ea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.206.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:49:e0:4a:24:1b:84:7f:06:2e:b5:e6:cd:03:c2:8f:8f:d5: 98:72:a6:ff:21:c3:69:07:8c:1a:02:a8:65:ac:eb:52:81:0f: a2:fd:cf:4b:18:ab:82:93:8c:84:8c:1c:21:c1:d2:ab:d2:f6: bc:0e:a6:3e:1e:16:cc:d9:a4:20:39:80:e1:01:5c:8f:b0:ca: 96:ac:1f:c3:b9:4f:d9:52:66:c4:85:4e:3c:c3:b2:94:52:37: 7e:78:27:07:1a:9b:8c:3b:07:d6:66:45:e2:37:c2:d4:64:61: 56:8c:7e:bf:94:a1:87:ff:07:1c:26:dd:78:49:40:29:40:e2: 0a:57:0b:49:67:54:ea:89:23:65:08:d5:6f:0e:2f:a5:18:a3: f6:5e:6d:00:45:bc:27:37:0e:76:4c:1e:89:8e:5e:e5:d9:55: b5:31:97:0c:4a:ed:b0:77:c8:1f:6c:1e:55:c9:bf:f3:11:24: d2:fa:07:a0:5f:e7:47:b1:06:6f:7a:f4:f7:4a:c1:a8:3d:33: f1:2a:f9:a2:62:8e:1a:4c:b5:69:14:bc:ec:85:ab:c8:e2:f6: 74:25:2d:84:e9:61:88:3f:f4:ca:f8:90:f9:f5:9c:2c:f8:af: ef:1b:0d:81:ba:85:85:5e:b8:36:77:d0:ca:93:86:c7:23:91: 80:34:f9:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITANo2zbzNlcFSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NGY1ZTBmNGEtNzc1MC00NWJiLWE1MWYtMWE0NjgzYWM5MzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BE1holrVxEScF86YxNtP1fFKmPm+wB9bKB4 rpuaeAomYxlcXEvqN4QFw4gs4LR7Paxv9xdsgyIUe3bORg2BA4NtSseJpbz7g2V+ /QXAxJL4CGf6CNwewFkouvYiB8E8zJCKzofxTQGtb+MxLxePe6JF4PGb4wlY389E CYddBfO5FI8t+Q3uRbyaDwlA4u9pUoevzyKQdOAGIr0/J0o39YSd7NJwQHHwq3tM Eon4YxXOsbVEEjH7PYVb2dFom15RIlTUZFrAybO9JsdJjmYOfUGvzNJ8HmPf5JEP zN3E80zSbGUYHRN6gjSqQZ968sOjNXDfRmsUj0OX18lIyNd0YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJndSqDTqhpm6JPw4KMc+9+b+PvZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGY2OTQzNGQtYzc5NC0z NDA3LTgwNGUtNjlmMGJiMmE4ZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI84EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpJ4EokG4R/Bi615s0Dwo+P1Zhypv8hw2kHjBoCqGWs61KBD6L9z0sY q4KTjISMHCHB0qvS9rwOpj4eFszZpCA5gOEBXI+wypasH8O5T9lSZsSFTjzDspRS N354Jwcam4w7B9ZmReI3wtRkYVaMfr+UoYf/Bxwm3XhJQClA4gpXC0lnVOqJI2UI 1W8OL6UYo/ZebQBFvCc3DnZMHomOXuXZVbUxlwxK7bB3yB9sHlXJv/MRJNL6B6Bf 50exBm969PdKwag9M/Eq+aJijhpMtWkUvOyFq8ji9nQlLYTpYYg/9Mr4kPn1nCz4 r+8bDYG6hYVeuDZ30MqThscjkYA0+Xw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:10:56 2025 by rpki-client