$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3f3aab0-3526-3b7e-aaf8-ed2504d7f01e.roa File: e3f3aab0-3526-3b7e-aaf8-ed2504d7f01e.roa (raw, json) Hash identifier: Ml4atD7QuM8VRAIxo7bRUdJZkCXpHUQ+8yRXbOBjwao= Subject key identifier: 03:7B:54:A9:52:41:97:B6:5C:6D:EE:D2:1B:62:8C:F7:16:28:D7:F2 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BF48F1C48A3DBBCFFBE00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3f3aab0-3526-3b7e-aaf8-ed2504d7f01e.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.201.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:f4:8f:1c:48:a3:db:bc:ff:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=4fab79c3-27d5-42b4-9f2f-af1e80697e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2e:18:61:f5:ad:15:9d:1f:d1:89:fb:8c:af: 13:43:71:99:2b:fa:f1:46:13:ee:6d:a6:7c:f3:7b: 7d:5e:fd:8f:cb:d9:17:7c:66:94:10:f7:b4:b8:3c: 79:29:ab:5d:7c:5a:7d:83:6e:35:54:a2:c4:0a:18: ab:e5:29:95:e5:b8:d2:a0:6c:53:62:71:00:1a:3e: 3b:26:65:fe:5e:22:da:17:4d:f4:6d:9a:df:31:41: 4c:38:9a:20:22:7e:e6:d0:eb:77:0d:1d:0f:da:58: 5e:1d:82:fc:5b:cf:94:62:3a:cf:bf:f3:bc:12:4c: f0:68:95:f4:f1:36:8f:5d:c7:73:48:c6:04:93:f1: c0:aa:76:64:96:7a:45:75:01:af:96:8a:7d:9b:e2: 07:0d:57:5c:a2:bc:5c:20:27:0b:ec:7e:e1:83:0b: 27:d8:bc:03:69:c8:52:35:dd:c3:30:fb:83:2c:53: ef:32:3c:34:f7:36:03:01:9c:88:e2:ab:72:20:60: e4:91:ab:71:87:59:cd:cf:f2:66:f9:91:3d:2f:40: 1a:f0:39:d5:6e:8d:9d:05:fa:11:d6:63:1f:29:99: 20:bb:5f:19:a3:27:0a:eb:5f:38:97:e4:8d:fc:b5: f5:d5:53:23:23:e7:21:d8:2d:1b:af:60:45:4e:a1: f6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7B:54:A9:52:41:97:B6:5C:6D:EE:D2:1B:62:8C:F7:16:28:D7:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e3f3aab0-3526-3b7e-aaf8-ed2504d7f01e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.201.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:bf:49:92:6b:db:de:c1:03:0a:17:24:0e:76:cb:70:bb:c2: 15:1a:01:c5:90:69:06:3e:d0:90:17:79:8d:7b:d8:2b:3d:18: a1:de:30:88:e4:a9:d2:2b:7c:fe:4a:49:ff:e7:ff:54:53:4e: 17:c5:64:42:d2:6b:91:b4:5a:f8:d5:ae:d6:4f:2b:48:ed:ea: 02:4b:3c:6a:b4:db:98:58:37:62:4b:b6:bf:91:06:93:1f:30: 3c:a4:da:ca:68:ca:6d:0e:47:f7:20:52:44:0b:ff:55:49:3a: 7d:b6:96:51:40:5d:3f:ad:be:eb:1b:e6:1f:dd:4b:47:f5:7e: 60:23:aa:67:9e:e1:9f:c8:67:17:28:30:e4:cd:1c:a9:0d:0d: 02:06:41:ba:12:98:a5:3f:37:55:23:3c:f9:1e:0f:a6:0a:31: 7e:f4:86:74:dc:74:c4:35:4e:77:1f:e6:af:51:80:85:21:a2: 6e:fe:ef:d8:95:ab:9a:a4:4e:a4:9d:18:c5:a4:9d:16:10:65: 23:83:53:b3:9c:15:37:1a:ef:c3:87:37:e4:5f:c4:92:c0:f0: 9a:41:5a:5c:e3:9f:89:d5:cc:23:73:b1:64:95:d6:0a:10:ea: 6f:3f:fc:08:2f:ca:0c:dc:26:40:0a:2b:eb:4e:88:d1:92:dc: 58:c8:9d:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS/SPHEij27z/vgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NGZhYjc5YzMtMjdkNS00MmI0LTlmMmYtYWYxZTgwNjk3ZTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy4YYfWtFZ0f0Yn7jK8TQ3GZK/rxRhPubaZ8 83t9Xv2Py9kXfGaUEPe0uDx5KatdfFp9g241VKLEChir5SmV5bjSoGxTYnEAGj47 JmX+XiLaF030bZrfMUFMOJogIn7m0Ot3DR0P2lheHYL8W8+UYjrPv/O8EkzwaJX0 8TaPXcdzSMYEk/HAqnZklnpFdQGvlop9m+IHDVdcorxcICcL7H7hgwsn2LwDachS Nd3DMPuDLFPvMjw09zYDAZyI4qtyIGDkkatxh1nNz/Jm+ZE9L0Aa8DnVbo2dBfoR 1mMfKZkgu18ZoycK6184l+SN/LX11VMjI+ch2C0br2BFTqH27QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAN7VKlSQZe2XG3u0htijPcWKNfyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTNmM2FhYjAtMzUyNi0z YjdlLWFhZjgtZWQyNTA0ZDdmMDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI8khMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAy/SZJr297BAwoXJA52y3C7whUaAcWQaQY+0JAXeY172Cs9GKHeMIjk qdIrfP5KSf/n/1RTThfFZELSa5G0WvjVrtZPK0jt6gJLPGq025hYN2JLtr+RBpMf MDyk2spoym0OR/cgUkQL/1VJOn22llFAXT+tvusb5h/dS0f1fmAjqmee4Z/IZxco MOTNHKkNDQIGQboSmKU/N1UjPPkeD6YKMX70hnTcdMQ1Tncf5q9RgIUhom7+79iV q5qkTqSdGMWknRYQZSODU7OcFTca78OHN+RfxJLA8JpBWlzjn4nVzCNzsWSV1goQ 6m8//AgvygzcJkAKK+tOiNGS3FjIncY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:33:28 2025 by rpki-client