$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/04dd4315-6a9f-3488-9092-fe5794692979.roa File: 04dd4315-6a9f-3488-9092-fe5794692979.roa (raw, json) Hash identifier: /zaholjyWN2jBB9A3giL2nhYwLRY2hBWlq+8JUyu8HA= Subject key identifier: A8:2F:8A:8F:37:53:6C:64:00:58:76:39:AA:AF:AF:63:46:1B:25:30 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285849920B58F005E0E691E5910240 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/04dd4315-6a9f-3488-9092-fe5794692979.roa Signing time: Fri 18 Apr 2025 20:24:42 +0000 ROA not before: Fri 18 Apr 2025 20:24:42 +0000 ROA not after: Thu 17 Jul 2025 20:24:42 +0000 asID: 6079 IP address blocks: 216.170.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:0b:58:f0:05:e0:e6:91:e5:91:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 18 20:24:42 2025 GMT Not After : Jul 17 20:24:42 2025 GMT Subject: CN=908fed13-aa43-4ca0-9ebf-7c20dd215182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:40:b7:0b:a8:4e:b4:d6:2c:04:13:c7:37:8c: 74:c6:5c:b7:e7:59:69:c9:01:5c:29:06:8d:a6:f0: bc:67:bf:83:ae:7d:5b:db:4e:5f:ac:c6:fd:d3:17: 9c:92:5e:72:e7:bd:8a:e1:63:b0:5c:fa:b2:2a:29: e8:61:5d:18:7a:8f:04:41:a9:86:35:c9:47:cd:94: 46:58:d6:ea:37:9f:cc:42:b9:2d:2c:76:59:b2:52: b8:7c:e9:1f:1f:5d:72:4d:d6:63:f9:43:06:aa:9e: 43:18:77:92:0e:bb:f6:1f:2a:bb:e0:70:51:96:b3: f7:fb:af:04:b5:12:a2:29:53:0b:23:b7:14:4f:e9: cb:dd:41:45:8d:41:6a:ff:ff:76:bd:2b:b8:85:bd: b7:a6:42:d1:fd:52:ee:ad:b9:7e:2d:ba:6b:23:dc: 7d:99:d6:7e:e5:10:9f:57:c5:6e:8e:71:3f:ad:53: 6d:8c:bb:ba:e9:a8:26:2a:6b:91:b9:a1:56:00:fd: 12:42:12:7b:96:f6:d1:94:38:0c:da:92:72:b5:26: 2e:a6:19:e4:f2:44:34:58:a0:db:ef:9d:73:eb:41: fa:0e:79:d8:89:02:69:3e:4d:dc:8a:c1:c1:16:6a: 0d:52:f9:9f:5b:f9:9d:bc:7e:82:8f:88:ef:34:59: 3d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2F:8A:8F:37:53:6C:64:00:58:76:39:AA:AF:AF:63:46:1B:25:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/04dd4315-6a9f-3488-9092-fe5794692979.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 216.170.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:aa:c7:ae:73:d2:fa:be:e8:24:4c:70:6d:3b:50:0c:e2:1e: 2d:37:4d:e5:64:21:a6:bf:6e:f6:a5:3d:8d:cf:ab:b2:1a:e3: c5:fd:81:89:83:67:9d:0d:df:b3:d4:f5:e2:86:ee:1f:2b:d5: fb:16:67:10:5d:74:df:0d:8c:1f:9e:ca:78:1e:c9:b3:43:d4: ed:bb:e6:3e:a9:67:dd:5a:1c:ae:97:56:be:70:c0:22:a8:4f: 69:db:e5:a6:89:46:1c:98:03:88:34:70:c3:9d:25:8c:9b:9d: 03:c1:b5:ce:3b:bd:51:7c:50:b2:ba:88:ba:1c:2e:f3:28:14: 87:b2:f1:5d:c8:2f:62:7a:fe:0c:49:19:e0:04:90:79:01:1d: 9a:f4:72:d3:dd:c9:df:e3:7f:64:7f:14:ce:1b:ff:2a:f6:40: 76:2e:78:a7:3f:10:79:f6:bc:0d:b5:7a:f3:01:62:70:26:a0: 7c:16:9b:04:42:9f:ab:13:1a:97:9f:52:12:52:3d:ae:e1:b0: 07:e3:1d:28:8c:8c:36:79:ff:bd:9d:cd:e6:c2:3f:c6:fd:1b: 07:5a:63:e6:2e:a3:3b:6c:ef:0c:e7:b2:f5:68:a7:5a:63:60: ba:4f:68:48:8c:05:42:93:07:ba:a5:37:6a:03:7c:c6:12:8b: d7:6f:69:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSC1jwBeDmkeWRAkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDQxODIwMjQ0MloXDTI1MDcxNzIwMjQ0MlowLzEtMCsGA1UEAxMk OTA4ZmVkMTMtYWE0My00Y2EwLTllYmYtN2MyMGRkMjE1MTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskC3C6hOtNYsBBPHN4x0xly351lpyQFcKQaN pvC8Z7+Drn1b205frMb90xeckl5y572K4WOwXPqyKinoYV0Yeo8EQamGNclHzZRG WNbqN5/MQrktLHZZslK4fOkfH11yTdZj+UMGqp5DGHeSDrv2Hyq74HBRlrP3+68E tRKiKVMLI7cUT+nL3UFFjUFq//92vSu4hb23pkLR/VLurbl+LbprI9x9mdZ+5RCf V8VujnE/rVNtjLu66agmKmuRuaFWAP0SQhJ7lvbRlDgM2pJytSYuphnk8kQ0WKDb 751z60H6DnnYiQJpPk3cisHBFmoNUvmfW/mdvH6Cj4jvNFk99wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgvio83U2xkAFh2Oaqvr2NGGyUwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvMDRkZDQzMTUtNmE5Zi0z NDg4LTkwOTItZmU1Nzk0NjkyOTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Kp6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOqx65z0vq+6CRMcG07UAziHi03TeVkIaa/bvalPY3Pq7Ia48X9gYmD Z50N37PU9eKG7h8r1fsWZxBddN8NjB+eyngeybND1O275j6pZ91aHK6XVr5wwCKo T2nb5aaJRhyYA4g0cMOdJYybnQPBtc47vVF8ULK6iLocLvMoFIey8V3IL2J6/gxJ GeAEkHkBHZr0ctPdyd/jf2R/FM4b/yr2QHYueKc/EHn2vA21evMBYnAmoHwWmwRC n6sTGpefUhJSPa7hsAfjHSiMjDZ5/72dzebCP8b9GwdaY+Yuozts7wznsvVop1pj YLpPaEiMBUKTB7qlN2oDfMYSi9dvaaY= -----END CERTIFICATE-----Generated at Sat Apr 26 20:00:51 2025 by rpki-client