$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4c82115-0175-3beb-ae0d-cf0dd24a4d08.roa File: a4c82115-0175-3beb-ae0d-cf0dd24a4d08.roa (raw, json) Hash identifier: VkT1kgwuYMwYIIPfsCpykUxCdSTI9ufDOawYc6oIM8k= Subject key identifier: FC:D5:5F:DD:7E:9C:36:21:50:22:5B:6C:79:70:AB:07:F0:58:28:17 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C58225688E0B9CC254576E18 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4c82115-0175-3beb-ae0d-cf0dd24a4d08.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 173.255.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:25:68:8e:0b:9c:c2:54:57:6e:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=19137f73-5f07-4b3d-92a9-68ce5d418ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:97:3c:dd:52:94:6d:e3:ef:b0:8a:11:60:f1: 69:60:aa:0f:2c:bb:86:5f:74:5c:c2:2a:af:aa:ca: 84:b7:dd:1c:71:1d:44:a1:89:82:c3:54:2f:c1:fe: c9:4c:ce:40:69:d1:b1:b9:62:aa:00:58:c7:d8:63: a2:7d:22:7e:77:d1:d6:66:44:4d:28:37:cd:c4:71: 22:d5:4c:2c:19:90:3a:fd:6c:8f:b1:de:de:17:99: bc:f7:5f:65:ca:4f:6e:c7:ea:e5:f7:09:6e:fc:9f: e8:a4:7c:1b:3b:85:06:28:9a:49:fe:e2:29:8b:a3: e3:4d:92:86:39:68:22:08:8a:ff:92:d0:29:1f:3e: 16:fc:e5:49:22:46:ec:c9:63:b3:6d:a8:73:85:0f: 83:12:f1:99:b0:38:a0:70:5d:14:92:d0:63:e2:e2: 37:bb:90:91:bc:f1:3a:ae:2a:48:19:d0:da:ab:86: a3:04:f2:06:58:91:3e:0d:43:a3:79:75:a7:67:bd: c6:89:ba:d3:7a:3f:26:c0:d8:14:47:3f:54:08:62: 66:69:c8:fc:73:cc:a6:5d:2c:33:d8:86:79:b9:8c: 3a:5d:f7:7a:a9:be:dc:c8:cb:54:c1:07:58:02:25: dc:b2:03:78:a2:47:bb:d6:36:bc:57:db:dd:00:89: 84:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D5:5F:DD:7E:9C:36:21:50:22:5B:6C:79:70:AB:07:F0:58:28:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a4c82115-0175-3beb-ae0d-cf0dd24a4d08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 173.255.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:c4:2f:58:ce:51:15:86:1a:55:df:7b:a0:a3:ae:56:fb:aa: 8d:40:5a:60:73:92:d5:b3:2b:e3:66:a4:76:89:0f:48:44:37: 6a:e8:6e:75:32:ba:8b:04:2e:62:eb:03:24:08:d8:ce:27:dc: e7:c9:0f:b1:db:f9:0b:d9:28:96:9e:bf:6f:e6:df:61:8e:89: f0:31:b1:30:6b:8e:a5:70:b4:41:55:b3:59:4d:e6:ae:1b:22: c4:32:aa:4a:f2:87:2b:02:b1:2c:73:e6:56:ab:81:6a:b4:7f: 40:54:ca:ba:49:9d:8b:25:f8:a7:27:dc:45:ba:07:37:a6:2f: 46:dd:ae:79:7f:de:0e:06:b5:99:62:31:4d:e6:b2:a8:96:96: de:c8:b2:5c:2a:be:1f:cb:df:c0:f2:8b:f5:da:1f:2f:16:33: b7:b0:ba:7d:47:0f:57:23:58:54:62:b8:db:0b:e5:01:c2:b1: 7f:25:81:7c:b7:92:a7:04:8c:b9:5c:70:37:2a:ee:b5:02:8d: d3:46:06:17:19:a6:50:1b:f9:73:18:8a:51:ab:27:4f:fa:b2: ec:8a:35:79:ef:9d:f5:c9:37:e0:e3:3a:92:01:72:9d:5d:fb: 16:83:66:20:e0:64:35:f7:a5:0e:71:6c:f4:80:da:6f:86:3f: e4:d3:f4:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgiVojgucwlRXbhgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MTkxMzdmNzMtNWYwNy00YjNkLTkyYTktNjhjZTVkNDE4YWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Jc83VKUbePvsIoRYPFpYKoPLLuGX3Rcwiqv qsqEt90ccR1EoYmCw1Qvwf7JTM5AadGxuWKqAFjH2GOifSJ+d9HWZkRNKDfNxHEi 1UwsGZA6/WyPsd7eF5m8919lyk9ux+rl9wlu/J/opHwbO4UGKJpJ/uIpi6PjTZKG OWgiCIr/ktApHz4W/OVJIkbsyWOzbahzhQ+DEvGZsDigcF0UktBj4uI3u5CRvPE6 ripIGdDaq4ajBPIGWJE+DUOjeXWnZ73GibrTej8mwNgURz9UCGJmacj8c8ymXSwz 2IZ5uYw6Xfd6qb7cyMtUwQdYAiXcsgN4oke71ja8V9vdAImETwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzVX91+nDYhUCJbbHlwqwfwWCgXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTRjODIxMTUtMDE3NS0z YmViLWFlMGQtY2YwZGQyNGE0ZDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArf9+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjEL1jOURWGGlXfe6Cjrlb7qo1AWmBzktWzK+NmpHaJD0hEN2robnUy uosELmLrAyQI2M4n3OfJD7Hb+QvZKJaev2/m32GOifAxsTBrjqVwtEFVs1lN5q4b IsQyqkryhysCsSxz5largWq0f0BUyrpJnYsl+Kcn3EW6BzemL0bdrnl/3g4GtZli MU3msqiWlt7Islwqvh/L38Dyi/XaHy8WM7ewun1HD1cjWFRiuNsL5QHCsX8lgXy3 kqcEjLlccDcq7rUCjdNGBhcZplAb+XMYilGrJ0/6suyKNXnvnfXJN+DjOpIBcp1d +xaDZiDgZDX3pQ5xbPSA2m+GP+TT9Kg= -----END CERTIFICATE-----Generated at Fri Apr 4 18:07:52 2025 by rpki-client