$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35a6e306-49b2-3563-8206-cd25a270a416.roa File: 35a6e306-49b2-3563-8206-cd25a270a416.roa (raw, json) Hash identifier: fOBRPZ9P6fvlBe+5DnG/rN94bny1QzskTwichaBU84w= Subject key identifier: 7D:41:F1:B7:5B:7C:74:66:79:70:4D:5E:17:90:5B:AA:6B:FC:9D:BE Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C581FFA318CB644CF15663F4 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35a6e306-49b2-3563-8206-cd25a270a416.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 173.255.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:ff:a3:18:cb:64:4c:f1:56:63:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=097084ab-8566-4f0b-945c-583ff3beb5a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1c:63:25:5a:77:d0:09:72:27:ff:d8:f0:3f: 8c:4e:ca:29:32:7b:92:c9:4a:da:3d:5a:9e:6e:fe: 69:09:5f:fe:09:71:44:64:51:6a:dc:b7:63:01:82: 0b:d8:af:e4:16:21:3c:10:43:57:b2:ec:9c:fc:3a: 38:96:c4:e7:b9:45:62:e9:ab:78:aa:89:05:0e:99: 7e:db:60:2f:a8:83:ec:6c:43:d0:1b:b8:ba:f9:9c: 51:b6:e2:16:39:a1:c0:a3:31:1d:47:26:a3:3c:a7: 27:2b:b8:ca:0d:15:11:33:1b:fb:3c:0c:d2:d3:4c: 2d:88:a3:f9:74:f5:2d:a7:95:5a:11:73:c0:89:74: 27:71:19:f1:66:fa:9f:be:da:40:6c:27:dd:02:97: 15:b5:a3:d9:27:d1:85:be:94:c5:ec:60:6b:7b:3d: 54:a5:29:89:14:e9:7e:c9:65:05:3a:1e:e2:19:94: d4:91:36:fd:06:3c:2d:38:b9:56:02:69:5c:bd:d5: 9d:11:0c:e6:75:a2:ad:21:3a:0c:fa:31:25:2c:75: 92:61:ad:11:b5:9e:03:a6:32:e2:6c:f8:40:42:77: ec:8f:66:e1:38:fc:06:9f:5f:b7:a8:f8:2b:2f:93: 4c:df:55:25:99:fb:ed:94:9d:ff:a8:89:a3:1a:16: b8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:41:F1:B7:5B:7C:74:66:79:70:4D:5E:17:90:5B:AA:6B:FC:9D:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/35a6e306-49b2-3563-8206-cd25a270a416.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 173.255.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:a0:f4:9a:1b:82:c9:a9:0f:cd:60:f2:76:6d:b4:99:f6:a1: fa:c4:22:b1:ed:1c:be:c9:98:09:39:f0:35:93:03:32:6d:4a: c0:da:7d:ec:4f:e6:40:56:69:1b:4c:4f:de:c4:02:cc:9a:88: b9:7c:f7:c4:3a:63:43:cf:a1:61:70:30:ac:37:22:09:77:65: 15:56:c5:b2:d1:f4:48:9b:46:37:93:86:a7:69:e4:2a:70:32: e1:b7:22:21:98:82:3f:77:56:59:d1:83:8e:60:6b:08:6d:29: e3:6c:0e:e7:62:dc:10:ee:cf:cd:0b:db:c9:4b:66:b7:9b:2b: 81:3f:13:63:83:3c:52:17:7c:ea:a6:bc:9f:3d:2a:29:1a:a5: 8d:76:c5:f9:72:ee:4b:29:d3:79:37:3b:68:e6:29:8e:68:e0: ff:8c:e8:ab:f2:31:1d:88:03:bc:b6:65:f4:aa:0e:e1:ae:a9: 71:c9:ea:48:d8:b2:fc:c4:b9:d2:03:0b:d6:9d:cc:e3:1b:b2: 70:46:39:6e:57:b7:38:6d:3e:88:3d:76:28:57:3c:10:55:0f: a8:60:fa:56:57:1b:50:a1:fe:0c:3a:33:4f:ae:44:e0:26:58: cd:01:67:3c:31:bf:a0:7a:d6:0b:8b:04:7a:76:e8:e5:75:45: 24:94:3c:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgf+jGMtkTPFWY/QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MDk3MDg0YWItODU2Ni00ZjBiLTk0NWMtNTgzZmYzYmViNWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBxjJVp30AlyJ//Y8D+MTsopMnuSyUraPVqe bv5pCV/+CXFEZFFq3LdjAYIL2K/kFiE8EENXsuyc/Do4lsTnuUVi6at4qokFDpl+ 22AvqIPsbEPQG7i6+ZxRtuIWOaHAozEdRyajPKcnK7jKDRURMxv7PAzS00wtiKP5 dPUtp5VaEXPAiXQncRnxZvqfvtpAbCfdApcVtaPZJ9GFvpTF7GBrez1UpSmJFOl+ yWUFOh7iGZTUkTb9BjwtOLlWAmlcvdWdEQzmdaKtIToM+jElLHWSYa0RtZ4DpjLi bPhAQnfsj2bhOPwGn1+3qPgrL5NM31UlmfvtlJ3/qImjGha4uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1B8bdbfHRmeXBNXheQW6pr/J2+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzVhNmUzMDYtNDliMi0z NTYzLTgyMDYtY2QyNWEyNzBhNDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArf94MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKg9JobgsmpD81g8nZttJn2ofrEIrHtHL7JmAk58DWTAzJtSsDafexP 5kBWaRtMT97EAsyaiLl898Q6Y0PPoWFwMKw3Igl3ZRVWxbLR9EibRjeThqdp5Cpw MuG3IiGYgj93VlnRg45gawhtKeNsDudi3BDuz80L28lLZrebK4E/E2ODPFIXfOqm vJ89KikapY12xfly7ksp03k3O2jmKY5o4P+M6KvyMR2IA7y2ZfSqDuGuqXHJ6kjY svzEudIDC9adzOMbsnBGOW5XtzhtPog9dihXPBBVD6hg+lZXG1Ch/gw6M0+uROAm WM0BZzwxv6B61guLBHp26OV1RSSUPMM= -----END CERTIFICATE-----Generated at Fri Apr 4 21:49:32 2025 by rpki-client