$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ee0d0655-b77f-3f2d-8e5b-7d83cccd4880.roa File: ee0d0655-b77f-3f2d-8e5b-7d83cccd4880.roa (raw, json) Hash identifier: JQ1xYbs2/jgbtBt6wRphpmdSi3kQS2B7xhdwJo7t0jI= Subject key identifier: 49:D7:34:85:A1:46:0C:7E:03:8D:DB:FA:01:20:C7:67:69:1F:28:25 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BCDF04B5A20F7898A7200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ee0d0655-b77f-3f2d-8e5b-7d83cccd4880.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.236.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:cd:f0:4b:5a:20:f7:89:8a:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=38264531-7179-4a6e-834d-5903b996dd86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cd:2e:e0:63:b3:f5:41:8a:f6:94:9d:27:e0: 5d:6e:28:b2:2e:49:f6:e5:45:50:36:8b:ef:6a:bc: 1d:a7:65:89:bf:49:b9:a8:c6:f7:91:7a:a2:70:6d: 02:7c:4a:0e:ec:5a:5b:ef:97:0b:5b:77:18:d3:46: ce:c6:f1:d2:38:e3:5c:d0:dc:fc:90:9f:0f:73:ed: 2a:65:d6:47:15:d6:40:98:7f:c8:a1:8b:17:2b:10: 88:58:99:67:e9:d8:40:d0:69:69:d9:4b:5e:fa:f7: 17:38:75:9f:80:d5:13:68:19:f7:03:cd:36:05:2e: 41:dc:e1:9a:b4:6e:52:b3:09:07:78:ea:05:9c:e0: b3:78:b0:84:94:85:b7:c7:ef:2f:2c:03:b7:48:30: 21:cc:56:ea:9e:88:90:92:f8:ba:62:c1:bc:56:67: 62:1b:7e:f6:35:60:9f:3a:85:5f:ce:28:08:e8:30: 3e:d6:8b:52:86:23:8b:82:e7:92:5c:b1:4d:f6:49: d5:fd:4c:29:75:26:dc:2f:91:c7:01:65:99:1b:c0: 78:58:ff:29:4e:81:7d:ab:83:ab:fe:f1:a5:4a:10: fe:2d:25:f2:9d:64:14:bd:cc:58:2b:b4:b5:e4:7b: e3:8d:24:42:a2:42:73:77:ca:40:9a:c8:db:1e:ea: 96:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D7:34:85:A1:46:0C:7E:03:8D:DB:FA:01:20:C7:67:69:1F:28:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ee0d0655-b77f-3f2d-8e5b-7d83cccd4880.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.236.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:8e:e3:d7:9b:16:be:2f:88:61:a3:b8:d2:81:44:86:46:5f: 37:ab:7e:9d:cc:4b:88:b4:ef:76:5a:81:01:c9:a3:78:8b:ba: 5f:91:30:9c:cb:5c:21:23:3d:33:99:6f:a2:98:d1:91:46:e8: fb:7e:63:52:b0:e9:1b:1d:9e:37:42:13:7a:37:31:d1:86:ad: 19:0d:07:51:ff:1a:cb:38:6c:c3:ce:5f:d5:1f:6b:6f:d5:b0: bc:59:28:7b:2e:db:25:d2:a2:e7:0c:c5:f2:f0:14:60:de:1e: ab:5f:45:98:e1:96:82:8b:89:bc:1d:a4:95:2e:ab:b7:e7:d7: 5a:72:86:06:f2:33:4e:f1:f4:5d:0b:b5:8c:e4:74:13:1f:29: 0b:7c:aa:06:ad:31:49:f4:7d:63:5f:ea:29:76:79:c3:95:cb: 94:c7:1f:cf:58:64:36:bf:8b:fc:96:64:95:8a:e6:eb:9b:c3: 75:62:00:53:27:c6:b4:ea:db:66:33:19:44:9b:d2:ab:bf:f4: d3:54:3b:c6:ed:06:4d:8b:09:7d:7f:5e:86:70:32:1d:a2:6b: 5d:32:6f:3d:a6:cd:34:bd:d3:09:68:ce:a9:f2:af:8b:be:fa: 19:5e:02:a0:b6:0e:f9:22:ad:79:4e:36:b0:41:19:64:cd:cb: a1:51:d7:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS83wS1og94mKcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MzgyNjQ1MzEtNzE3OS00YTZlLTgzNGQtNTkwM2I5OTZkZDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM0u4GOz9UGK9pSdJ+BdbiiyLkn25UVQNovv arwdp2WJv0m5qMb3kXqicG0CfEoO7Fpb75cLW3cY00bOxvHSOONc0Nz8kJ8Pc+0q ZdZHFdZAmH/IoYsXKxCIWJln6dhA0Glp2Ute+vcXOHWfgNUTaBn3A802BS5B3OGa tG5SswkHeOoFnOCzeLCElIW3x+8vLAO3SDAhzFbqnoiQkvi6YsG8VmdiG372NWCf OoVfzigI6DA+1otShiOLgueSXLFN9knV/UwpdSbcL5HHAWWZG8B4WP8pToF9q4Or /vGlShD+LSXynWQUvcxYK7S15HvjjSRCokJzd8pAmsjbHuqWnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnXNIWhRgx+A43b+gEgx2dpHyglMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWUwZDA2NTUtYjc3Zi0z ZjJkLThlNWItN2Q4M2NjY2Q0ODgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+yQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyO49ebFr4viGGjuNKBRIZGXzerfp3MS4i073ZagQHJo3iLul+RMJzL XCEjPTOZb6KY0ZFG6Pt+Y1Kw6RsdnjdCE3o3MdGGrRkNB1H/Gss4bMPOX9Ufa2/V sLxZKHsu2yXSoucMxfLwFGDeHqtfRZjhloKLibwdpJUuq7fn11pyhgbyM07x9F0L tYzkdBMfKQt8qgatMUn0fWNf6il2ecOVy5THH89YZDa/i/yWZJWK5uubw3ViAFMn xrTq22YzGUSb0qu/9NNUO8btBk2LCX1/XoZwMh2ia10ybz2mzTS90wlozqnyr4u+ +hleAqC2DvkirXlONrBBGWTNy6FR17o= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:48 2025 by rpki-client