$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f36399b4-707e-3503-a48d-cf36c1b09eb2.roa File: f36399b4-707e-3503-a48d-cf36c1b09eb2.roa (raw, json) Hash identifier: pTCk4LoMV+B6daoYL3fN2apmtjcPrEEH7sUZixCXjuA= Subject key identifier: 6E:56:4D:1B:7B:18:89:0C:FA:44:F8:CE:4E:6A:66:77:B7:9B:8B:A8 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BFE734759580E6600C200 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f36399b4-707e-3503-a48d-cf36c1b09eb2.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.240.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:fe:73:47:59:58:0e:66:00:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=69d9dd75-2122-4784-8d00-2647693fcb49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b0:bf:ea:43:34:6b:94:bf:80:c2:51:2d:ac: d7:67:4f:5d:b9:2c:04:39:25:72:32:bc:09:99:47: 14:1f:fc:94:fd:cd:a1:7b:2c:d3:54:bd:11:57:c9: e9:a1:62:09:a0:c8:21:6e:d3:b5:f9:0a:57:b8:50: ea:90:8f:c7:6c:e1:82:6c:a1:d0:c3:68:17:e7:e8: 28:c9:83:54:31:d5:e4:04:bc:78:ec:cf:75:f4:d1: c3:46:cd:c9:f1:06:3e:86:b6:7f:44:6d:a8:5c:85: 53:d2:07:96:56:4c:50:f6:0f:9a:01:c5:84:1e:01: d4:20:7e:e9:77:f2:e2:3d:af:71:17:68:1e:95:ae: c9:83:b8:13:59:6a:c2:11:b5:62:3f:47:b9:09:d4: e0:7a:c5:6c:2a:ec:60:c7:2e:a2:be:3c:02:9d:61: 75:94:e1:c4:b5:55:1f:40:d6:4c:40:84:1e:d2:52: 14:aa:88:66:7e:8e:83:fb:a0:5f:03:c6:32:aa:c5: c0:b1:75:39:c0:4d:00:32:46:27:e5:85:e4:fd:ad: 48:0a:72:dc:94:b9:5a:8e:16:a8:f7:3b:53:f9:c0: 13:13:ae:3b:a4:b2:a6:8c:b7:82:6c:5a:77:d3:9d: d8:4d:79:d2:a4:49:fe:e4:79:af:16:a1:b9:d3:1e: d7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:56:4D:1B:7B:18:89:0C:FA:44:F8:CE:4E:6A:66:77:B7:9B:8B:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f36399b4-707e-3503-a48d-cf36c1b09eb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.240.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:a9:98:a6:e0:71:6d:79:ff:a8:10:d5:37:70:cc:df:00:65: 79:54:d4:47:f3:28:eb:6d:39:9a:19:f0:ed:b7:9f:57:67:a4: cf:53:32:f7:10:bd:a5:8a:5f:14:2b:a4:d8:6e:e0:36:e3:e8: 21:ba:d0:4d:f8:12:d3:8f:b6:95:c6:c1:80:22:49:f9:de:e1: 48:c3:8d:87:23:e4:6a:79:30:5a:c8:19:b4:b3:1e:02:99:e0: 27:21:01:b1:fe:16:a3:9c:bf:cc:3f:11:34:6c:5d:b9:95:2f: 09:5b:3d:eb:f0:aa:1d:9c:92:d7:f1:ee:53:eb:7a:c2:94:f6: f8:1a:7d:7b:7c:2d:e8:80:f0:de:b2:e1:ac:46:fc:c5:f4:e6: 6d:6c:51:c6:50:e1:2c:e8:25:42:9c:e2:d2:95:cf:a6:59:41: 09:3e:03:a6:4a:78:ea:1b:2e:e5:8f:6b:74:21:50:8e:eb:b3: db:aa:da:ab:4a:14:4d:ca:45:e8:8b:b6:f3:7e:87:15:50:2b: f1:30:d1:bc:44:f3:ca:bb:7d:a7:40:07:9b:cb:80:eb:0c:1d: d1:33:04:30:83:06:15:dd:3f:19:7a:38:f6:7c:2b:99:90:e8: 37:91:0a:d6:a1:6a:50:02:f2:e3:ff:c9:d4:c2:f7:3f:3f:59: 7f:88:39:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS/5zR1lYDmYAwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk NjlkOWRkNzUtMjEyMi00Nzg0LThkMDAtMjY0NzY5M2ZjYjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobC/6kM0a5S/gMJRLazXZ09duSwEOSVyMrwJ mUcUH/yU/c2heyzTVL0RV8npoWIJoMghbtO1+QpXuFDqkI/HbOGCbKHQw2gX5+go yYNUMdXkBLx47M919NHDRs3J8QY+hrZ/RG2oXIVT0geWVkxQ9g+aAcWEHgHUIH7p d/LiPa9xF2gela7Jg7gTWWrCEbViP0e5CdTgesVsKuxgxy6ivjwCnWF1lOHEtVUf QNZMQIQe0lIUqohmfo6D+6BfA8YyqsXAsXU5wE0AMkYn5YXk/a1ICnLclLlajhao 9ztT+cATE647pLKmjLeCbFp3053YTXnSpEn+5HmvFqG50x7XHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5WTRt7GIkM+kT4zk5qZne3m4uoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjM2Mzk5YjQtNzA3ZS0z NTAzLWE0OGQtY2YzNmMxYjA5ZWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/AAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+pmKbgcW15/6gQ1TdwzN8AZXlU1EfzKOttOZoZ8O23n1dnpM9TMvcQ vaWKXxQrpNhu4Dbj6CG60E34EtOPtpXGwYAiSfne4UjDjYcj5Gp5MFrIGbSzHgKZ 4CchAbH+FqOcv8w/ETRsXbmVLwlbPevwqh2cktfx7lPresKU9vgafXt8LeiA8N6y 4axG/MX05m1sUcZQ4SzoJUKc4tKVz6ZZQQk+A6ZKeOobLuWPa3QhUI7rs9uq2qtK FE3KReiLtvN+hxVQK/Ew0bxE88q7fadAB5vLgOsMHdEzBDCDBhXdPxl6OPZ8K5mQ 6DeRCtahalAC8uP/ydTC9z8/WX+IOXQ= -----END CERTIFICATE-----Generated at Fri Apr 4 21:03:49 2025 by rpki-client