$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/e8701d46-d019-31ab-beee-5bfc34ed3804.roa File: e8701d46-d019-31ab-beee-5bfc34ed3804.roa (raw, json) Hash identifier: N8E0iZoXl0YZIu7A8LK10xDawhL03GVvGjqnbJZvcKc= Subject key identifier: AC:9E:F6:FC:73:AB:6A:57:E4:EA:2C:75:E3:FF:25:A9:6F:42:B4:94 Certificate issuer: /CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1 Certificate serial: 010D0C9F43285849ED4FCD012915D83357F5E700 Authority key identifier: 34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/e8701d46-d019-31ab-beee-5bfc34ed3804.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 18986 IP address blocks: 173.255.152.0/24 maxlen: 24 173.255.153.0/24 maxlen: 24 173.255.154.0/24 maxlen: 24 173.255.155.0/24 maxlen: 24 173.255.156.0/23 maxlen: 23 173.255.158.0/24 maxlen: 24 173.255.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:cd:01:29:15:d8:33:57:f5:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1 Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=f2cb2a7a-737c-409e-b3e8-b861b88f4ced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dc:26:48:fb:59:a0:3e:26:da:04:90:21:38: 73:ce:23:5c:3f:ad:a4:1a:ab:b8:0f:0c:68:ff:da: 10:79:6d:a4:b8:ee:7e:87:50:02:69:e5:e7:06:26: 88:43:71:c9:e3:d8:2b:fc:2b:a0:e8:18:14:7f:9d: 08:cb:55:7f:50:31:21:44:bd:eb:d5:cb:fd:9d:c3: 95:00:41:f3:e6:70:7a:80:a0:b2:4a:e8:ed:9f:de: 5d:91:e6:ca:94:fa:46:de:e2:12:5d:ae:9e:7e:12: 5c:01:3d:c0:7e:d1:8e:68:ef:b6:a7:40:e4:c3:e5: 39:df:16:a1:a9:b5:c7:5d:8f:77:ae:ee:b1:3f:ca: 3b:a8:b6:49:b1:c5:2d:59:18:5d:62:3a:0e:23:18: 52:26:d4:0d:86:8b:3f:ff:5e:cc:9d:da:da:a1:ca: b9:18:23:dd:56:0a:98:ed:d4:a1:9f:96:90:f2:32: 1f:79:2f:29:a7:ef:66:aa:6b:29:40:eb:cf:d3:51: 52:9c:d1:90:60:18:ef:f9:c6:24:fb:ab:15:e5:e7: 5a:23:a3:d5:af:00:a3:73:ae:8f:b2:dd:12:45:36: 56:62:60:f5:43:a6:de:ad:1b:1a:e5:ff:58:4d:86: 0f:eb:07:6d:1c:54:da:a3:f6:da:19:c9:6b:d6:62: cc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:9E:F6:FC:73:AB:6A:57:E4:EA:2C:75:E3:FF:25:A9:6F:42:B4:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/e8701d46-d019-31ab-beee-5bfc34ed3804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl X509v3 Authority Key Identifier: keyid:34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer sbgp-ipAddrBlock: critical IPv4: 173.255.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:ad:b4:5a:b6:21:1d:58:ba:fe:87:36:2a:2e:10:ae:2a:41: c2:51:40:7b:3b:dd:c0:f7:93:05:69:47:72:7f:69:ca:fa:17: 46:d8:69:d0:a7:cd:21:cc:22:18:38:0d:57:46:fd:da:e8:30: 96:3f:ad:f9:b7:f2:a0:10:0e:00:6f:c3:fa:fe:6c:b5:9a:bc: 05:72:5b:78:0d:f2:fd:a4:57:fb:63:b3:5f:bf:3f:d0:85:01: 96:3b:74:e4:3c:81:7d:e1:90:51:77:b5:80:38:9c:0d:99:3f: 48:7f:1b:6e:53:a1:cd:ce:0b:29:72:25:14:d7:b2:9e:66:5a: ec:55:85:0d:74:6d:db:53:71:69:92:3f:07:6f:61:21:0b:90: af:fd:7f:9d:03:b2:67:fe:1e:e3:a0:1f:46:25:f0:4c:08:9a: 86:5e:c6:6d:0e:c1:a1:a3:f4:60:fe:ea:b5:5c:dd:6d:ef:48: 01:30:12:80:d7:03:a2:44:a0:f9:22:ae:88:7d:0e:29:c8:30: 4a:d8:d3:67:5e:68:e5:f5:b5:9b:62:ec:bc:92:77:1f:c2:39: 13:83:69:0a:c1:c8:0b:20:66:24:69:06:2f:1b:45:a4:d7:61: 0d:5b:3b:4b:31:76:c9:cf:17:7f:c2:14:b1:06:fc:d2:4e:a1: 99:6f:c7:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT80BKRXYM1f15wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVhM2YwODgtMDViNy00NzBhLTlhZjUtNDViZDI1ZWU4 ZmMxMB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk ZjJjYjJhN2EtNzM3Yy00MDllLWIzZTgtYjg2MWI4OGY0Y2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudwmSPtZoD4m2gSQIThzziNcP62kGqu4Dwxo /9oQeW2kuO5+h1ACaeXnBiaIQ3HJ49gr/Cug6BgUf50Iy1V/UDEhRL3r1cv9ncOV AEHz5nB6gKCySujtn95dkebKlPpG3uISXa6efhJcAT3AftGOaO+2p0Dkw+U53xah qbXHXY93ru6xP8o7qLZJscUtWRhdYjoOIxhSJtQNhos//17Mndraocq5GCPdVgqY 7dShn5aQ8jIfeS8pp+9mqmspQOvP01FSnNGQYBjv+cYk+6sV5edaI6PVrwCjc66P st0SRTZWYmD1Q6berRsa5f9YTYYP6wdtHFTao/baGclr1mLMpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKye9vxzq2pX5OosdeP/JalvQrSUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNWEz ZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJkMjVlZThmYzEvZTg3MDFkNDYtZDAxOS0z MWFiLWJlZWUtNWJmYzM0ZWQzODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzVhM2YwODgtMDViNy00NzBhLTlh ZjUtNDViZDI1ZWU4ZmMxLzM1YTNmMDg4LTA1YjctNDcwYS05YWY1LTQ1YmQyNWVl OGZjMS5jcmwwHwYDVR0jBBgwFoAUNK7WIvW+qxwynlURzXYDdVCcFwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNWEzZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJk MjVlZThmYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrf+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+ttFq2IR1Yuv6HNiouEK4qQcJRQHs73cD3kwVpR3J/acr6F0bYadCn zSHMIhg4DVdG/droMJY/rfm38qAQDgBvw/r+bLWavAVyW3gN8v2kV/tjs1+/P9CF AZY7dOQ8gX3hkFF3tYA4nA2ZP0h/G25Toc3OCylyJRTXsp5mWuxVhQ10bdtTcWmS PwdvYSELkK/9f50Dsmf+HuOgH0Yl8EwImoZexm0OwaGj9GD+6rVc3W3vSAEwEoDX A6JEoPkiroh9DinIMErY02deaOX1tZti7LySdx/CORODaQrByAsgZiRpBi8bRaTX YQ1bO0sxdsnPF3/CFLEG/NJOoZlvx80= -----END CERTIFICATE-----Generated at Wed Jul 2 11:04:27 2025 by rpki-client