$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/cffb2afc-1c5c-3086-b3a6-8048790da8db.roa File: cffb2afc-1c5c-3086-b3a6-8048790da8db.roa (raw, json) Hash identifier: EBpJhhvDMrBHSg44uwb8qwf8kNVG7xyPV9EdqWn3Tak= Subject key identifier: 8F:49:AC:58:CA:EF:41:33:39:7B:03:7F:7A:E6:9A:D7:95:3F:D6:70 Certificate issuer: /CN=174db496-399b-48c7-919e-3e6dfd4a5584 Certificate serial: 010D0C9F43285848D7A652194CBD59CDE3B1C000 Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/cffb2afc-1c5c-3086-b3a6-8048790da8db.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 40934 IP address blocks: 173.243.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:52:19:4c:bd:59:cd:e3:b1:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584 Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=4310bd7d-a5b4-4453-a689-1ad9928e00c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b8:53:45:65:6c:ce:ea:26:f1:ca:f9:45:e9: f3:02:ff:eb:18:7a:8d:b1:59:3c:51:01:ca:df:60: 3c:ee:75:5d:e5:4f:e2:f0:42:94:1f:ad:72:28:3d: c2:11:0b:d5:da:9b:f5:f8:7e:36:98:2a:5c:7f:1d: c7:cb:ad:fb:7f:9d:bf:78:97:bb:e2:05:49:a4:0b: 1d:7e:81:e2:91:3f:8a:16:19:5f:23:e3:70:ce:2e: 48:c6:7f:4e:42:b1:21:ee:fe:14:29:90:28:85:8c: 64:fb:8b:ef:4f:18:e7:de:90:7d:f6:ca:98:a3:79: 7e:92:3f:c3:1b:de:36:be:61:55:84:b8:2c:cd:3a: 53:b6:a9:86:87:2d:58:70:b0:32:74:cc:36:6d:bb: 8a:32:2d:1b:19:80:82:4b:3d:ef:db:25:64:60:43: 44:17:e4:a5:60:39:67:34:fa:a0:ab:07:13:f4:f9: 5e:ec:69:4b:6e:91:c7:08:fd:7b:d8:ee:61:3f:cf: c6:78:e6:c6:9e:b3:e3:54:1b:f0:82:b4:44:0d:a1: 8a:9c:a6:be:a2:92:c8:30:92:da:95:cc:54:72:fd: 2a:00:0f:6f:bc:ae:70:e9:22:51:dd:90:20:87:ee: 87:dc:30:de:99:29:1a:e0:82:dc:be:f7:f7:fb:59: 02:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:49:AC:58:CA:EF:41:33:39:7B:03:7F:7A:E6:9A:D7:95:3F:D6:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/cffb2afc-1c5c-3086-b3a6-8048790da8db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl X509v3 Authority Key Identifier: keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer sbgp-ipAddrBlock: critical IPv4: 173.243.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:70:44:e9:3f:0b:75:7d:c4:0c:9e:eb:81:1f:3a:ee:32:ae: a1:33:94:6e:db:ed:fb:c9:5e:7c:ef:78:95:7d:6f:49:af:7f: c0:89:9f:67:ca:2d:27:d4:d3:bf:b3:de:dd:fe:81:0b:47:8a: f8:dc:89:5a:07:62:b7:1d:3d:4d:66:fd:00:d2:0c:03:3c:e3: 4f:f6:29:c2:92:b3:b2:80:4e:65:c3:bd:91:fc:42:44:c6:ad: 22:94:1b:a1:df:4b:18:67:49:7e:e4:70:2a:2a:ab:04:54:32: fb:ec:b7:4a:a3:86:cf:7f:b5:54:f8:48:6b:bd:7a:b4:5c:92: 15:a4:92:2f:f7:d2:15:a9:94:96:78:6a:6b:13:7e:b0:a4:9d: 5b:c7:80:5d:91:17:74:d9:5f:aa:02:24:6d:a1:a2:8c:0c:a5: 13:57:dd:96:c0:24:e0:a4:ff:43:af:ae:f4:da:27:78:72:87: 18:1b:16:74:be:7c:ed:3a:bc:7d:5f:25:c4:a1:1a:c2:a0:eb: c0:ac:60:18:e6:73:3a:1b:c9:a3:9f:24:d6:01:b2:6c:d8:e4: 5e:14:88:69:b6:9f:58:48:e2:88:76:94:1e:02:31:59:8d:ba: ee:7a:3e:23:75:d4:f6:a0:70:e6:5f:40:19:59:1a:5e:98:62: 98:0e:70:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjXplIZTL1ZzeOxwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc0ZGI0OTYtMzk5Yi00OGM3LTkxOWUtM2U2ZGZkNGE1 NTg0MB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk NDMxMGJkN2QtYTViNC00NDUzLWE2ODktMWFkOTkyOGUwMGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibhTRWVszuom8cr5RenzAv/rGHqNsVk8UQHK 32A87nVd5U/i8EKUH61yKD3CEQvV2pv1+H42mCpcfx3Hy637f52/eJe74gVJpAsd foHikT+KFhlfI+Nwzi5Ixn9OQrEh7v4UKZAohYxk+4vvTxjn3pB99sqYo3l+kj/D G942vmFVhLgszTpTtqmGhy1YcLAydMw2bbuKMi0bGYCCSz3v2yVkYENEF+SlYDln NPqgqwcT9Ple7GlLbpHHCP172O5hP8/GeObGnrPjVBvwgrREDaGKnKa+opLIMJLa lcxUcv0qAA9vvK5w6SJR3ZAgh+6H3DDemSka4ILcvvf3+1kC6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9JrFjK70EzOXsDf3rmmteVP9ZwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRk YjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZkZmQ0YTU1ODQvY2ZmYjJhZmMtMWM1Yy0z MDg2LWIzYTYtODA0ODc5MGRhOGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTc0ZGI0OTYtMzk5Yi00OGM3LTkx OWUtM2U2ZGZkNGE1NTg0LzE3NGRiNDk2LTM5OWItNDhjNy05MTllLTNlNmRmZDRh NTU4NC5jcmwwHwYDVR0jBBgwFoAUnbYvqwyEv+F7kStHMMc1sXqvgNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRkYjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZk ZmQ0YTU1ODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfOBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZwROk/C3V9xAye64EfOu4yrqEzlG7b7fvJXnzveJV9b0mvf8CJn2fK LSfU07+z3t3+gQtHivjciVoHYrcdPU1m/QDSDAM840/2KcKSs7KATmXDvZH8QkTG rSKUG6HfSxhnSX7kcCoqqwRUMvvst0qjhs9/tVT4SGu9erRckhWkki/30hWplJZ4 amsTfrCknVvHgF2RF3TZX6oCJG2hoowMpRNX3ZbAJOCk/0OvrvTaJ3hyhxgbFnS+ fO06vH1fJcShGsKg68CsYBjmczobyaOfJNYBsmzY5F4UiGm2n1hI4oh2lB4CMVmN uu56PiN11PagcOZfQBlZGl6YYpgOcPE= -----END CERTIFICATE-----Generated at Sat Apr 26 19:23:14 2025 by rpki-client