$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df8e3c23-6c4e-3ef0-af48-d40f1d82684f.roa File: df8e3c23-6c4e-3ef0-af48-d40f1d82684f.roa (raw, json) Hash identifier: 8jGaGybz7tN5MduIXcj5BBBmT2Gvsyl2Cn29e/WZhmI= Subject key identifier: 4C:CA:45:3A:D6:62:0B:2F:88:93:70:E5:58:4A:CB:BA:7D:B4:B0:3D Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C581859945DD62C0701759D0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df8e3c23-6c4e-3ef0-af48-d40f1d82684f.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 173.255.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:85:99:45:dd:62:c0:70:17:59:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=ba60d7ff-70b6-40e1-b288-73a397cff148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9d:26:fd:82:4f:29:bf:b0:a3:d5:92:ef:d1: 4a:f8:41:ba:fe:df:fd:ce:0a:fa:0c:36:1f:eb:ce: 97:7d:2d:65:0d:0f:21:32:da:e7:29:be:5f:47:43: 34:91:43:31:ec:d5:ba:91:f2:cb:4a:bf:29:9a:ed: fa:7a:d4:06:ff:87:15:66:67:df:70:9b:1c:e4:c6: 07:5c:08:42:80:86:16:6e:b7:6a:6a:44:d8:82:2b: cc:1b:72:2d:fc:12:c7:59:fb:61:00:62:a9:a7:90: 25:2d:f9:58:63:6b:a7:a3:a0:12:d3:70:69:32:e1: 72:8f:af:6a:66:d7:0a:18:09:b0:60:c6:04:15:32: 15:58:e8:54:2b:f7:55:10:52:0b:f0:1e:0f:b6:39: 3a:36:9f:12:54:0a:71:61:86:a6:56:1d:19:46:34: b1:ed:05:eb:67:d5:05:13:06:f4:2b:90:3a:1f:fc: 99:32:98:94:f8:51:7f:f6:b7:c1:4d:5a:82:72:bd: 9d:36:89:3d:9e:fc:fd:49:a3:be:48:0f:66:04:b4: 4a:e7:42:df:6b:7f:00:70:ff:bc:41:e4:e6:60:ce: 24:0f:27:b7:0c:06:2f:15:e3:4b:21:a8:85:47:44: d3:b6:f2:1a:10:89:ed:29:89:25:33:e9:4f:10:b8: 49:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:CA:45:3A:D6:62:0B:2F:88:93:70:E5:58:4A:CB:BA:7D:B4:B0:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/df8e3c23-6c4e-3ef0-af48-d40f1d82684f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 173.255.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:54:ea:84:c2:22:b2:ef:05:e0:45:7f:11:c1:12:4b:5a:04: 5d:36:f7:62:aa:9a:ac:1c:bd:64:80:20:79:79:0d:19:06:1d: f9:3b:05:83:b4:95:3c:d8:30:10:b1:16:c2:f9:5f:56:a2:88: 56:ef:8c:cf:3b:df:ec:a6:b0:5f:b4:98:d7:20:0f:2b:bc:0d: f9:2e:92:57:1d:d7:80:e2:53:ac:ec:24:35:7a:01:1f:e7:a0: a7:8b:9c:73:9c:66:e2:e3:c6:da:a3:85:c9:89:9c:4d:c4:c8: c3:1a:28:a3:f1:b0:8c:f1:66:33:b4:c5:f6:c5:9b:4b:42:a0: 93:80:f5:53:f5:ad:7d:25:fd:b3:8b:e1:27:9a:c0:d6:7c:dc: f8:f2:9f:eb:88:ca:88:41:fa:55:a8:8a:1c:42:b9:b8:bc:81: f2:0f:de:73:3e:8d:4f:20:af:48:11:9f:fe:c3:69:48:63:3c: 76:5b:69:60:1d:70:fc:5a:b1:ae:a1:fd:f4:01:64:50:7a:72: 3f:76:3d:3a:6f:9c:e1:85:3c:51:94:91:9b:cf:11:6a:a8:ea: 4f:38:c1:e6:69:dd:83:bf:1e:a8:66:7a:a6:3d:8d:66:e4:92: 96:bc:f3:0f:39:83:ab:5d:4b:d9:ee:b7:b6:f7:65:b4:c5:13: 41:70:b2:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYWZRd1iwHAXWdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YmE2MGQ3ZmYtNzBiNi00MGUxLWIyODgtNzNhMzk3Y2ZmMTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ0m/YJPKb+wo9WS79FK+EG6/t/9zgr6DDYf 686XfS1lDQ8hMtrnKb5fR0M0kUMx7NW6kfLLSr8pmu36etQG/4cVZmffcJsc5MYH XAhCgIYWbrdqakTYgivMG3It/BLHWfthAGKpp5AlLflYY2uno6AS03BpMuFyj69q ZtcKGAmwYMYEFTIVWOhUK/dVEFIL8B4Ptjk6Np8SVApxYYamVh0ZRjSx7QXrZ9UF Ewb0K5A6H/yZMpiU+FF/9rfBTVqCcr2dNok9nvz9SaO+SA9mBLRK50Lfa38AcP+8 QeTmYM4kDye3DAYvFeNLIaiFR0TTtvIaEIntKYklM+lPELhJhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEzKRTrWYgsviJNw5VhKy7p9tLA9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGY4ZTNjMjMtNmM0ZS0z ZWYwLWFmNDgtZDQwZjFkODI2ODRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArf91MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBU6oTCIrLvBeBFfxHBEktaBF0292KqmqwcvWSAIHl5DRkGHfk7BYO0 lTzYMBCxFsL5X1aiiFbvjM873+ymsF+0mNcgDyu8Dfkuklcd14DiU6zsJDV6AR/n oKeLnHOcZuLjxtqjhcmJnE3EyMMaKKPxsIzxZjO0xfbFm0tCoJOA9VP1rX0l/bOL 4SeawNZ83Pjyn+uIyohB+lWoihxCubi8gfIP3nM+jU8gr0gRn/7DaUhjPHZbaWAd cPxasa6h/fQBZFB6cj92PTpvnOGFPFGUkZvPEWqo6k84weZp3YO/HqhmeqY9jWbk kpa88w85g6tdS9nut7b3ZbTFE0Fwssk= -----END CERTIFICATE-----Generated at Fri Apr 4 21:40:24 2025 by rpki-client