$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/035d4b4b-ea9f-3e41-904d-4b49d3a9ddc0.roa File: 035d4b4b-ea9f-3e41-904d-4b49d3a9ddc0.roa (raw, json) Hash identifier: +RCmX1pqhCJ3fqr+6he7hEGhbXfRORs8wvDoHbXS4KI= Subject key identifier: 44:23:34:61:ED:A6:F3:2A:7A:72:E2:5D:19:B6:BF:89:76:66:6F:E9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF4FF297E88F67A35A2A00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/035d4b4b-ea9f-3e41-904d-4b49d3a9ddc0.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.26.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:4f:f2:97:e8:8f:67:a3:5a:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=d8fcfcfa-4bd1-4850-bae6-f5396fe6744f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a1:14:97:6e:97:cc:18:0d:e5:6a:cb:d9:90: 05:6a:7e:73:b1:b6:cb:78:ad:4f:25:9c:db:e9:81: ee:58:47:99:54:07:2f:9a:69:2f:7b:da:ad:4a:83: 63:8d:28:68:9a:c8:b7:9d:7f:95:33:e2:25:cc:c4: 43:80:c6:25:8f:d3:35:1a:04:1c:0b:10:8e:46:5e: dc:f7:80:99:2d:4d:97:58:40:9d:8e:5e:30:fc:4e: ce:e2:83:34:f9:5d:56:55:c8:fb:79:d9:7f:ba:ff: 72:35:8b:82:aa:33:56:ee:be:21:b8:7a:aa:ff:15: d5:02:97:09:5b:73:d4:ba:50:a1:46:1d:90:a0:ca: 19:c1:66:a6:03:6f:74:25:5c:31:9b:e4:f0:56:f1: 64:b5:df:1d:2e:2a:fe:19:7a:f9:10:94:c5:e2:25: e3:4b:b1:f6:19:93:9e:a9:1e:6d:68:cc:b1:2d:a5: 43:93:1f:f7:a7:95:70:d8:5c:c6:e4:28:2b:d3:3d: 94:93:88:a1:3b:aa:b1:e7:1d:fa:3f:c6:54:dc:87: 4c:86:50:1f:ed:ee:31:64:5b:fb:92:f1:8a:9c:76: e9:36:b4:2f:40:b6:46:4e:98:89:14:8e:11:67:4b: df:a9:24:92:57:67:3f:28:98:e1:94:7a:26:b3:e3: 8a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:23:34:61:ED:A6:F3:2A:7A:72:E2:5D:19:B6:BF:89:76:66:6F:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/035d4b4b-ea9f-3e41-904d-4b49d3a9ddc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.26.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:6a:b6:0d:e1:8b:d2:0d:00:43:aa:6c:6b:a2:ed:72:af:38: d0:8e:76:f3:c4:be:fe:d1:0f:48:be:1e:f4:fc:bf:45:5c:3b: a4:26:24:25:9e:86:5c:43:38:33:60:76:3e:81:be:78:d2:e1: 72:64:23:35:88:f8:eb:85:35:25:00:55:d5:75:f2:64:1a:63: 9f:5d:96:3d:e9:aa:e5:2e:7c:cc:55:d6:3c:9e:05:91:40:ef: 92:64:ef:63:18:87:6f:5d:10:fc:2b:11:0a:cc:17:b5:5f:b3: c0:cb:29:78:61:b5:86:37:ce:9d:22:72:b2:fa:47:69:04:c3: 99:5e:d7:f6:7b:ed:7e:4a:22:30:80:b5:78:f0:80:0c:43:84: 21:1a:81:a0:4a:8d:9f:ec:c5:8c:b6:31:4d:a9:ac:62:18:c4: 67:5c:76:ee:47:cf:3d:15:16:0c:1d:91:e2:b0:5e:93:5d:6e: db:26:ff:e3:fa:67:eb:98:c5:f9:e8:ec:a4:a6:ac:40:a1:eb: 3e:07:f4:a7:e5:44:84:45:ab:0e:a9:18:b5:e8:7e:4e:72:3f: 24:5e:28:47:89:ea:fc:7f:d9:90:79:31:f9:68:bc:15:22:46: 12:56:0b:bf:dd:17:96:71:40:8e:91:14:5c:67:74:e7:6f:e4: 52:dd:c3:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh70/yl+iPZ6NaKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk ZDhmY2ZjZmEtNGJkMS00ODUwLWJhZTYtZjUzOTZmZTY3NDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKEUl26XzBgN5WrL2ZAFan5zsbbLeK1PJZzb 6YHuWEeZVAcvmmkve9qtSoNjjShomsi3nX+VM+IlzMRDgMYlj9M1GgQcCxCORl7c 94CZLU2XWECdjl4w/E7O4oM0+V1WVcj7edl/uv9yNYuCqjNW7r4huHqq/xXVApcJ W3PUulChRh2QoMoZwWamA290JVwxm+TwVvFktd8dLir+GXr5EJTF4iXjS7H2GZOe qR5taMyxLaVDkx/3p5Vw2FzG5Cgr0z2Uk4ihO6qx5x36P8ZU3IdMhlAf7e4xZFv7 kvGKnHbpNrQvQLZGTpiJFI4RZ0vfqSSSV2c/KJjhlHoms+OKbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQjNGHtpvMqenLiXRm2v4l2Zm/pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDM1ZDRiNGItZWE5Zi0z ZTQxLTkwNGQtNGI0OWQzYTlkZGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhqtg3hi9INAEOqbGui7XKvONCOdvPEvv7RD0i+HvT8v0VcO6QmJCWe hlxDODNgdj6BvnjS4XJkIzWI+OuFNSUAVdV18mQaY59dlj3pquUufMxV1jyeBZFA 75Jk72MYh29dEPwrEQrMF7Vfs8DLKXhhtYY3zp0icrL6R2kEw5le1/Z77X5KIjCA tXjwgAxDhCEagaBKjZ/sxYy2MU2prGIYxGdcdu5Hzz0VFgwdkeKwXpNdbtsm/+P6 Z+uYxfno7KSmrECh6z4H9KflRIRFqw6pGLXofk5yPyReKEeJ6vx/2ZB5MflovBUi RhJWC7/dF5ZxQI6RFFxndOdv5FLdwyM= -----END CERTIFICATE-----Generated at Sat Apr 26 23:40:04 2025 by rpki-client