$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e8726ef3-197a-3bec-b65b-236f75a3129a.roa File: e8726ef3-197a-3bec-b65b-236f75a3129a.roa (raw, json) Hash identifier: BB3RHiVjFuaJ++HQ2TVB1O7NyPT7VYGTElIxt+Cr7tA= Subject key identifier: 86:08:9A:54:D0:F0:4B:09:02:30:3F:90:E7:90:3A:61:BB:2F:F1:77 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C5822C5065FAE1F92F9B8600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e8726ef3-197a-3bec-b65b-236f75a3129a.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 173.255.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:2c:50:65:fa:e1:f9:2f:9b:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=f94c15b3-22c3-48ce-a621-9f68e520dd7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:94:28:29:0b:cc:36:d8:5e:ef:c5:6d:e8:29: 9b:4f:dd:e5:2b:2e:5c:26:ba:ad:09:40:16:13:bb: 3c:84:4d:54:14:c3:cf:90:10:88:30:d2:a5:e3:df: 99:8c:2a:94:84:40:3c:04:1d:71:38:96:ad:be:9b: cd:d6:f0:74:1f:5b:b9:bb:7b:29:12:fb:38:b3:78: f8:2d:30:95:03:d8:eb:04:0b:a3:1a:a1:70:70:0d: 45:8a:4d:2a:1a:a8:f8:81:60:06:21:da:62:f1:d1: eb:b7:0f:65:f8:a3:63:69:c8:56:67:45:0d:b0:1b: 47:97:b6:b9:57:41:16:cf:67:db:de:28:18:95:dc: 93:59:2d:ba:b4:92:3b:5d:7c:4f:d9:42:70:42:6c: a7:0f:ce:44:fe:40:8f:ab:81:cd:83:86:79:23:1e: c8:4c:34:e5:0f:a4:50:0b:55:41:e8:ee:34:df:a4: a5:d9:44:28:01:b0:33:26:3b:cf:83:23:5c:2a:90: fa:86:ea:b2:b6:bc:43:c7:d0:22:19:26:b4:10:c3: 74:0b:94:dc:8f:9b:03:1d:b9:6c:8a:8f:b1:dc:11: 2b:92:4f:0a:5f:11:12:c1:e5:bb:e3:b9:91:78:28: 3c:3f:12:ec:62:24:86:54:ec:b7:a3:48:43:75:d4: f9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:08:9A:54:D0:F0:4B:09:02:30:3F:90:E7:90:3A:61:BB:2F:F1:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e8726ef3-197a-3bec-b65b-236f75a3129a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 173.255.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:21:02:59:7d:40:29:92:35:45:f6:22:25:74:72:bf:63:4f: 9b:8f:23:c5:91:3e:b8:19:13:4c:3c:dc:92:42:69:dd:d6:db: 19:be:ab:4d:1a:ab:c7:16:67:61:dc:6c:32:f9:29:7e:1b:b1: b1:0f:16:b9:c9:dd:22:d8:84:07:d1:89:52:6c:e6:5b:72:3b: 46:29:73:1c:cf:1f:ec:df:22:9a:9f:74:8e:f2:e9:ce:62:72: 33:34:58:d8:3d:17:e7:10:f1:6d:7e:f0:6a:93:84:50:8d:02: 50:e8:11:f9:0d:8e:87:dd:ae:46:6d:2a:66:0c:83:c1:fb:11: c0:4e:99:6a:e3:67:b3:e3:15:70:9b:4e:b1:50:3f:7d:91:ef: 1c:45:0b:08:04:22:65:cc:7c:73:31:dc:c2:04:4a:cb:71:8f: e9:91:ec:64:5e:71:5e:a8:f3:b8:25:d0:e4:36:51:1b:5a:ff: a7:67:3b:53:00:20:3d:e7:83:77:16:e7:31:ec:bd:a9:b5:ba: d4:cc:d9:81:df:08:6f:1e:9d:0b:86:ba:c1:1b:8b:db:5b:5a: d9:19:f2:77:9c:cf:81:53:20:75:ec:63:03:1a:05:de:46:de: 1c:84:f3:26:8c:88:d4:2a:1c:c7:cd:b7:92:e2:5e:db:9f:de: a9:a8:88:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgixQZfrh+S+bhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk Zjk0YzE1YjMtMjJjMy00OGNlLWE2MjEtOWY2OGU1MjBkZDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJQoKQvMNthe78Vt6CmbT93lKy5cJrqtCUAW E7s8hE1UFMPPkBCIMNKl49+ZjCqUhEA8BB1xOJatvpvN1vB0H1u5u3spEvs4s3j4 LTCVA9jrBAujGqFwcA1Fik0qGqj4gWAGIdpi8dHrtw9l+KNjachWZ0UNsBtHl7a5 V0EWz2fb3igYldyTWS26tJI7XXxP2UJwQmynD85E/kCPq4HNg4Z5Ix7ITDTlD6RQ C1VB6O4036Sl2UQoAbAzJjvPgyNcKpD6huqytrxDx9AiGSa0EMN0C5Tcj5sDHbls io+x3BErkk8KXxESweW747mReCg8PxLsYiSGVOy3o0hDddT5wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYImlTQ8EsJAjA/kOeQOmG7L/F3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZTg3MjZlZjMtMTk3YS0z YmVjLWI2NWItMjM2Zjc1YTMxMjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArf90MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYhAll9QCmSNUX2IiV0cr9jT5uPI8WRPrgZE0w83JJCad3W2xm+q00a q8cWZ2HcbDL5KX4bsbEPFrnJ3SLYhAfRiVJs5ltyO0YpcxzPH+zfIpqfdI7y6c5i cjM0WNg9F+cQ8W1+8GqThFCNAlDoEfkNjofdrkZtKmYMg8H7EcBOmWrjZ7PjFXCb TrFQP32R7xxFCwgEImXMfHMx3MIESstxj+mR7GRecV6o87gl0OQ2URta/6dnO1MA ID3ng3cW5zHsvam1utTM2YHfCG8enQuGusEbi9tbWtkZ8necz4FTIHXsYwMaBd5G 3hyE8yaMiNQqHMfNt5LiXtuf3qmoiC0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:41 2025 by rpki-client