$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ffa9f9b7-3aca-349a-9364-f01b86c90070.roa File: ffa9f9b7-3aca-349a-9364-f01b86c90070.roa (raw, json) Hash identifier: X5cc4O4DZLoju8ej35qhy+ZFkOMWfqjy+P3W2AnUUi0= Subject key identifier: 27:B8:87:9D:4A:53:F3:DD:65:9A:83:7D:86:BC:57:F7:0E:5A:81:FE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84C1A66FFC572DB4C4B3740 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ffa9f9b7-3aca-349a-9364-f01b86c90070.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.244.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4c:1a:66:ff:c5:72:db:4c:4b:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=7e2c3ec4-070e-4866-8fab-6f137d6db1b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c7:e4:68:ed:d7:0f:c7:15:04:36:dd:f2:a6: 0d:d1:41:6e:d0:da:0d:6f:ed:71:d7:df:63:51:15: 8b:a3:67:5c:5e:87:04:5e:30:78:ac:b4:72:ce:12: 3c:70:fa:b9:c0:68:36:cb:f4:56:12:9c:b6:31:4d: d2:4f:f9:0d:fe:86:26:0d:29:6b:fb:75:45:04:b8: 1f:a7:eb:0a:9f:d9:75:41:ae:e8:d0:e3:9b:53:be: fa:33:7d:4e:75:a6:c9:6c:d0:45:fb:27:e8:e4:9b: 84:d8:25:d2:cd:1a:17:fd:17:2a:b5:c0:ee:d1:d1: ff:9c:9a:44:4d:e0:30:35:ae:d4:e7:1d:85:e9:85: 17:51:f8:ff:4e:45:7b:6f:85:27:a1:7f:50:98:8c: 3a:22:6d:c3:72:e9:5a:7b:03:b2:be:85:31:e8:65: 60:70:15:0c:e4:e9:30:f1:41:d0:12:0e:1a:15:d3: 06:d3:ac:79:e0:75:cc:0e:c5:b1:58:45:57:2f:e8: 24:b9:27:81:10:18:ac:aa:38:d3:74:70:25:6a:e6: 5e:93:73:74:83:4b:f8:f5:85:d4:29:c8:6e:db:46: 46:f9:77:02:9a:fd:04:f0:70:f3:c7:28:fe:62:c1: 94:cb:77:59:3f:00:13:83:4a:d4:c0:39:63:07:f5: ab:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B8:87:9D:4A:53:F3:DD:65:9A:83:7D:86:BC:57:F7:0E:5A:81:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ffa9f9b7-3aca-349a-9364-f01b86c90070.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.244.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:60:58:45:59:3f:ff:5e:a1:04:80:a5:5b:a5:2d:60:b9:b5: 02:0c:04:e2:f2:84:74:1c:32:ad:19:18:31:12:bc:a6:28:e1: 42:6f:dc:21:4b:ae:da:b7:39:c5:8e:37:35:1d:de:0f:d1:12: b1:f4:ad:a1:75:0a:f7:b5:7c:67:4b:7a:92:50:f5:99:11:d1: e6:75:b7:4e:6b:1e:cf:dd:25:6f:67:92:4a:21:bc:56:5b:2f: 19:45:44:54:06:b7:e9:4b:21:27:9b:6c:ef:72:d5:71:58:c8: 06:f1:63:fa:c7:c2:8f:8b:f8:65:58:02:08:f5:a4:77:31:b6: cd:4f:22:e7:ab:d6:0e:39:04:5f:27:5e:cd:25:b2:f5:9c:38: 3b:b1:0f:83:2a:7c:2d:e9:3b:03:da:52:3d:0b:e2:91:cc:d5: 4f:bd:7b:8f:48:3a:9a:8d:c1:23:6d:19:e1:e1:60:b4:45:ff: 96:1e:fa:25:9f:85:08:60:77:ba:e4:14:11:b2:0e:58:73:0d: a1:14:03:ab:66:4a:16:f8:7e:60:77:14:7d:54:d7:99:cd:43: cf:c6:8f:8a:fe:b1:5a:5b:6a:7c:3c:e2:ac:4c:56:7d:19:01: c5:7d:4a:25:8e:0f:ef:27:7f:65:2c:27:5a:81:eb:fa:45:8c: dd:ca:35:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITBpm/8Vy20xLN0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk N2UyYzNlYzQtMDcwZS00ODY2LThmYWItNmYxMzdkNmRiMWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcfkaO3XD8cVBDbd8qYN0UFu0NoNb+1x199j URWLo2dcXocEXjB4rLRyzhI8cPq5wGg2y/RWEpy2MU3ST/kN/oYmDSlr+3VFBLgf p+sKn9l1Qa7o0OObU776M31OdabJbNBF+yfo5JuE2CXSzRoX/RcqtcDu0dH/nJpE TeAwNa7U5x2F6YUXUfj/TkV7b4UnoX9QmIw6Im3DculaewOyvoUx6GVgcBUM5Okw 8UHQEg4aFdMG06x54HXMDsWxWEVXL+gkuSeBEBisqjjTdHAlauZek3N0g0v49YXU Kchu20ZG+XcCmv0E8HDzxyj+YsGUy3dZPwATg0rUwDljB/WrCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCe4h51KU/PdZZqDfYa8V/cOWoH+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZmZhOWY5YjctM2FjYS0z NDlhLTkzNjQtZjAxYjg2YzkwMDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/RwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJgWEVZP/9eoQSApVulLWC5tQIMBOLyhHQcMq0ZGDESvKYo4UJv3CFL rtq3OcWONzUd3g/RErH0raF1Cve1fGdLepJQ9ZkR0eZ1t05rHs/dJW9nkkohvFZb LxlFRFQGt+lLISebbO9y1XFYyAbxY/rHwo+L+GVYAgj1pHcxts1PIuer1g45BF8n Xs0lsvWcODuxD4MqfC3pOwPaUj0L4pHM1U+9e49IOpqNwSNtGeHhYLRF/5Ye+iWf hQhgd7rkFBGyDlhzDaEUA6tmShb4fmB3FH1U15nNQ8/Gj4r+sVpbanw84qxMVn0Z AcV9SiWOD+8nf2UsJ1qB6/pFjN3KNS4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:58 2025 by rpki-client