$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1a61a605-ff79-3024-8d2d-f8ef92039b0b.roa File: 1a61a605-ff79-3024-8d2d-f8ef92039b0b.roa (raw, json) Hash identifier: hSkPsnjgLNF3yrhBqrYr0oH7aUPiGL/FDvCfBSjqoPc= Subject key identifier: F4:5C:9A:4D:AD:92:6B:4A:63:8C:FF:15:97:2A:90:AA:6F:E9:54:36 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F432858487FB5DCA302140DCEA22A1980 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1a61a605-ff79-3024-8d2d-f8ef92039b0b.roa Signing time: Fri 10 Jan 2025 14:00:51 +0000 ROA not before: Fri 10 Jan 2025 14:00:51 +0000 ROA not after: Thu 10 Apr 2025 13:00:51 +0000 asID: 396356 IP address blocks: 216.170.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7f:b5:dc:a3:02:14:0d:ce:a2:2a:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Jan 10 14:00:51 2025 GMT Not After : Apr 10 13:00:51 2025 GMT Subject: CN=0e0dd76f-c683-4313-b414-f1e4cd66db5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:34:39:ed:58:8e:25:b8:18:10:aa:50:6f:ff: d9:08:b2:32:be:1c:da:34:2d:bc:30:82:7a:f5:91: 2c:53:77:9b:07:10:84:c2:c6:1c:11:b8:7a:b9:ed: 27:f7:0a:a8:7e:6f:14:44:d6:f6:33:63:35:d7:8b: aa:f9:f8:20:f6:25:b4:fc:2d:84:74:54:32:38:6a: b6:20:e6:99:d8:d3:c6:74:69:d8:cf:de:c6:9f:f9: 5f:2b:84:e8:ee:23:29:b0:7e:c8:a2:8c:7c:c1:ec: cd:67:7f:91:e0:5f:3d:87:b9:e8:33:72:2d:02:8f: eb:07:fd:5f:d2:c6:e9:20:37:ed:36:38:55:23:b5: d4:8a:a5:1b:e4:6e:9b:d2:e6:42:9a:9f:26:cd:88: 11:41:9b:4f:30:79:58:d6:43:ca:ea:b5:c4:74:9a: bf:80:41:9a:7a:42:3b:b9:d3:e8:3d:f9:40:26:db: 22:5b:72:86:3e:45:40:bc:46:e2:9d:eb:8f:4d:a2: 6c:50:37:d5:77:f0:79:4b:08:b9:e5:f8:bc:ae:02: 5a:75:39:64:24:8f:02:bb:71:bd:51:7e:54:e2:d7: ba:bc:3d:38:81:7d:9a:81:f0:1b:cc:e3:51:26:e5: 68:09:c6:d0:59:9c:ed:6d:d6:4b:6d:f4:8b:54:18: 37:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:5C:9A:4D:AD:92:6B:4A:63:8C:FF:15:97:2A:90:AA:6F:E9:54:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1a61a605-ff79-3024-8d2d-f8ef92039b0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 216.170.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:17:16:98:42:62:9b:61:1f:fa:67:b2:9e:b7:e3:e7:52:97: e8:cc:70:25:3b:63:72:72:11:b0:df:c5:59:48:19:33:3d:7e: 0a:ff:bd:5d:08:49:cb:9c:62:63:e9:02:99:11:8b:49:ea:25: f4:63:8b:cb:6c:d4:17:e6:aa:06:bf:aa:33:dc:70:99:db:41: 2a:e8:3b:60:83:f8:c5:98:52:cf:f2:a4:86:99:fc:d3:51:62: bd:9b:a8:72:ba:54:64:ab:4f:f0:ee:3c:34:33:57:cd:77:e7: 2c:77:db:60:e7:ae:21:85:7a:93:6b:b3:40:37:68:08:e3:48: 00:41:08:68:82:30:b3:7e:2a:6f:29:9d:62:c2:9f:dc:3c:fe: 48:4a:c3:1c:13:10:e2:98:09:ca:ad:6b:79:4d:66:93:88:ac: a0:9f:3a:e8:c2:ff:e5:60:fe:25:78:c5:d2:7a:42:39:af:6d: 45:4a:20:13:7f:c8:87:9f:cd:d2:d7:24:a3:1f:62:a9:95:ba: 63:57:d1:26:62:8a:92:f8:c8:cb:ab:6d:a2:ad:8d:85:52:4b: 55:12:a1:af:f0:92:3b:89:f0:6c:26:0d:04:c6:50:17:5b:da: 14:d3:03:28:4e:37:c2:ac:15:3c:0e:0d:d9:f7:a2:e5:81:d6: 3c:6d:5c:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh/tdyjAhQNzqIqGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDExMDE0MDA1MVoXDTI1MDQxMDEzMDA1MVowLzEtMCsGA1UEAxMk MGUwZGQ3NmYtYzY4My00MzEzLWI0MTQtZjFlNGNkNjZkYjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTQ57ViOJbgYEKpQb//ZCLIyvhzaNC28MIJ6 9ZEsU3ebBxCEwsYcEbh6ue0n9wqofm8URNb2M2M114uq+fgg9iW0/C2EdFQyOGq2 IOaZ2NPGdGnYz97Gn/lfK4To7iMpsH7Ioox8wezNZ3+R4F89h7noM3ItAo/rB/1f 0sbpIDftNjhVI7XUiqUb5G6b0uZCmp8mzYgRQZtPMHlY1kPK6rXEdJq/gEGaekI7 udPoPflAJtsiW3KGPkVAvEbineuPTaJsUDfVd/B5Swi55fi8rgJadTlkJI8Cu3G9 UX5U4te6vD04gX2agfAbzONRJuVoCcbQWZztbdZLbfSLVBg3cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRcmk2tkmtKY4z/FZcqkKpv6VQ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMWE2MWE2MDUtZmY3OS0z MDI0LThkMmQtZjhlZjkyMDM5YjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Kp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkXFphCYpthH/pnsp634+dSl+jMcCU7Y3JyEbDfxVlIGTM9fgr/vV0I ScucYmPpApkRi0nqJfRji8ts1Bfmqga/qjPccJnbQSroO2CD+MWYUs/ypIaZ/NNR Yr2bqHK6VGSrT/DuPDQzV8135yx322DnriGFepNrs0A3aAjjSABBCGiCMLN+Km8p nWLCn9w8/khKwxwTEOKYCcqta3lNZpOIrKCfOujC/+Vg/iV4xdJ6QjmvbUVKIBN/ yIefzdLXJKMfYqmVumNX0SZiipL4yMurbaKtjYVSS1USoa/wkjuJ8GwmDQTGUBdb 2hTTAyhON8KsFTwODdn3ouWB1jxtXCE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:40 2025 by rpki-client