$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f9de2d8c-11aa-3691-8c23-37ee5283d668.roa File: f9de2d8c-11aa-3691-8c23-37ee5283d668.roa (raw, json) Hash identifier: OssQRWktRPp3SGB+1ucxsuuTUeFzXmBrj49s308lmJA= Subject key identifier: 68:7B:98:B4:5C:13:66:F8:68:1E:BE:9D:F7:75:31:8F:08:2A:17:AD Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C19C719C593E4D7D9B000 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f9de2d8c-11aa-3691-8c23-37ee5283d668.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.192.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:19:c7:19:c5:93:e4:d7:d9:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=3e676bba-60b3-4e2d-ae9b-9a2f371d2a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4b:6c:b6:03:ad:20:0b:75:72:a5:8c:43:09: f9:61:3e:41:75:5d:ee:ef:6a:42:71:2d:c4:6b:55: 75:b6:24:66:9e:86:fc:e6:ce:40:24:c9:f1:d1:b8: 2a:0f:4b:f8:2b:1a:cb:d1:84:ee:01:c6:85:43:49: ea:3c:ae:9b:e3:63:57:bc:48:c2:20:58:71:fd:d2: 2d:4c:aa:e9:a8:6e:bb:79:fb:ed:dc:3e:92:fc:1f: c5:af:b2:4b:15:e6:47:12:32:f5:ed:2a:1b:ef:d6: fd:d8:bd:91:0b:59:a4:14:6a:fe:bb:a3:ab:f3:89: 08:7f:74:b7:6d:19:c9:06:6d:a8:8c:56:43:cd:7a: 64:3d:04:0f:a7:cd:dc:ea:96:4d:ae:96:3a:e0:9d: 01:21:16:ed:7a:62:38:ad:e7:35:bc:ca:e4:78:81: e5:9f:ee:4d:56:16:c6:db:e9:50:b3:7e:6d:ef:d4: a2:1d:7f:64:1f:94:86:ee:a7:5c:a3:52:25:1b:86: ba:1c:85:67:b2:be:08:23:a3:1d:f8:a1:68:48:ff: 7a:8e:16:59:c7:8e:f4:a8:3f:7b:a1:bb:d0:3a:6d: 97:a3:a5:db:6c:37:be:97:a2:75:b3:9c:4e:48:44: 9e:92:cc:38:7e:ec:3d:52:d6:51:01:01:ef:a8:d3: de:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7B:98:B4:5C:13:66:F8:68:1E:BE:9D:F7:75:31:8F:08:2A:17:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f9de2d8c-11aa-3691-8c23-37ee5283d668.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.192.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:25:bb:9f:f5:53:a4:d9:b5:29:d3:af:f8:5b:5f:22:0f:d3: 50:d5:93:3e:7b:87:33:da:d6:9c:6d:82:85:80:a9:ac:69:75: ad:91:71:a4:7a:67:2d:f9:27:80:07:e2:30:ab:37:8d:8f:d2: 54:c1:d6:0a:d6:a5:d5:5f:ad:f7:d2:3f:6c:5e:17:83:be:e2: 0f:6a:1e:39:f3:5c:f0:03:27:7b:52:1f:bf:33:43:9c:ed:c2: 25:30:8a:09:15:0b:db:f4:73:37:38:e7:ae:c3:d5:6f:10:1d: 1b:db:89:12:f0:15:1f:41:52:4a:92:96:96:d0:60:e4:19:f0: 28:d9:c8:b9:b7:4e:3a:cd:90:fd:62:62:2d:4a:a5:ab:fd:87: 55:49:95:ef:c8:e8:92:67:6a:5a:e2:8a:6f:68:36:3d:27:7f: 3c:4d:9a:18:a8:a1:f3:1f:71:dd:85:f5:f2:b3:69:22:86:c3: f7:a7:32:e1:06:c5:18:ac:fa:67:31:b9:83:22:2c:34:b8:8d: 48:a3:bf:c2:ab:f3:4c:b7:1b:95:e8:49:4d:b0:59:3a:2f:0f: 96:dd:67:a9:e6:5b:c0:a5:e1:69:0e:86:95:82:60:4f:d9:1e: 6a:6b:25:33:7e:dd:11:da:89:9f:59:0e:da:fe:9f:43:6f:32: 0f:97:c3:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITBnHGcWT5NfZsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk M2U2NzZiYmEtNjBiMy00ZTJkLWFlOWItOWEyZjM3MWQyYTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0tstgOtIAt1cqWMQwn5YT5BdV3u72pCcS3E a1V1tiRmnob85s5AJMnx0bgqD0v4KxrL0YTuAcaFQ0nqPK6b42NXvEjCIFhx/dIt TKrpqG67efvt3D6S/B/Fr7JLFeZHEjL17Sob79b92L2RC1mkFGr+u6Or84kIf3S3 bRnJBm2ojFZDzXpkPQQPp83c6pZNrpY64J0BIRbtemI4rec1vMrkeIHln+5NVhbG 2+lQs35t79SiHX9kH5SG7qdco1IlG4a6HIVnsr4II6Md+KFoSP96jhZZx470qD97 obvQOm2Xo6XbbDe+l6J1s5xOSESeksw4fuw9UtZRAQHvqNPeQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGh7mLRcE2b4aB6+nfd1MY8IKhetMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjlkZTJkOGMtMTFhYS0z NjkxLThjMjMtMzdlZTUyODNkNjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8AQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQlu5/1U6TZtSnTr/hbXyIP01DVkz57hzPa1pxtgoWAqaxpda2RcaR6 Zy35J4AH4jCrN42P0lTB1grWpdVfrffSP2xeF4O+4g9qHjnzXPADJ3tSH78zQ5zt wiUwigkVC9v0czc4567D1W8QHRvbiRLwFR9BUkqSlpbQYOQZ8CjZyLm3TjrNkP1i Yi1Kpav9h1VJle/I6JJnalriim9oNj0nfzxNmhioofMfcd2F9fKzaSKGw/enMuEG xRis+mcxuYMiLDS4jUijv8Kr80y3G5XoSU2wWTovD5bdZ6nmW8Cl4WkOhpWCYE/Z HmprJTN+3RHaiZ9ZDtr+n0NvMg+Xw0k= -----END CERTIFICATE-----Generated at Sun Feb 16 15:46:19 2025 by rpki-client