$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04d967c9-40ae-30f9-b400-3da52cc0cb9b.roa File: 04d967c9-40ae-30f9-b400-3da52cc0cb9b.roa (raw, json) Hash identifier: JOlutB7ZmdwsqpHddSIQH3nsQGta9D5UlJfBfQMEBaM= Subject key identifier: A9:65:EF:B8:F1:85:BC:03:C1:54:7F:AE:3B:1B:A2:9B:97:32:84:A9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784B9E0D9260DF5C089AD80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04d967c9-40ae-30f9-b400-3da52cc0cb9b.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.19.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:b9:e0:d9:26:0d:f5:c0:89:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=52cfb75d-7503-4ade-8f96-762451d6ae53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:26:8a:1f:e8:90:8b:18:32:7b:46:c4:a3:dd: c0:57:f5:ab:8e:6b:49:fa:b9:be:e3:00:fd:6e:28: e9:47:e3:7b:21:e2:40:88:f2:89:94:0e:be:05:fe: 66:6d:4c:e0:db:04:74:8e:91:32:d1:ae:3e:68:29: ac:b7:c8:0a:e6:22:89:f2:26:96:d5:d3:5a:d4:92: 58:ec:c3:32:9c:a2:88:ec:62:8d:6b:3c:65:29:30: b5:88:05:85:e2:17:48:4f:67:63:d5:1f:f3:90:7b: 1c:b5:e0:c8:16:52:35:54:64:37:c1:a8:6a:7f:40: 0c:27:f8:60:fa:83:f2:61:84:4c:3a:7a:52:17:5d: 92:d6:a1:db:01:d1:7b:1d:7b:29:40:3a:3f:a4:15: 59:3e:5a:3a:79:d2:d6:7a:26:22:0e:81:b5:a4:16: 77:91:71:c3:76:dd:f7:cf:7a:9f:a4:89:aa:30:02: d5:6d:46:d3:b3:3b:26:75:71:dd:c0:18:1f:2b:ca: a9:2c:6d:cb:93:0e:31:e5:9b:f3:95:39:c5:72:f5: cd:f7:d7:77:59:12:d9:02:a6:50:85:ee:07:ab:bb: 30:7d:02:b8:72:54:9d:fa:7b:fe:ca:dc:b3:78:a9: 6f:38:5f:18:e1:e7:4c:38:0b:4d:f7:22:e9:70:db: f6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:65:EF:B8:F1:85:BC:03:C1:54:7F:AE:3B:1B:A2:9B:97:32:84:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04d967c9-40ae-30f9-b400-3da52cc0cb9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:5f:57:c0:39:ab:16:94:bf:13:80:3d:ed:04:c8:4d:a8:35: 5a:a0:50:af:ef:70:c6:85:24:76:f4:8c:ad:1b:48:06:06:61: 37:00:28:f0:f1:40:f9:ef:48:a1:a3:23:bb:6e:80:c1:59:7c: 90:23:ac:95:12:9c:9e:2f:74:ee:bc:21:73:1c:87:af:0b:ae: 76:c2:40:77:42:16:90:59:53:73:af:b6:b6:a9:90:1e:94:66: 4b:c4:f5:16:be:e7:e7:d3:14:99:ed:8f:74:32:99:a4:ec:dc: fd:a4:18:fd:90:e7:a6:a6:33:02:4c:60:65:5a:60:e0:81:c9: 76:91:3c:4c:d4:4c:43:19:16:5a:33:cd:03:7d:b5:ff:0c:72: 23:f1:12:8c:3a:e1:c4:98:6a:e1:c9:86:02:5e:47:90:ee:f1: 2e:ed:05:51:b3:a8:65:33:ee:55:3c:26:f4:4d:f2:57:7c:55: e4:a7:68:45:ed:5d:ab:aa:08:87:f7:20:9f:1b:ea:8c:29:f7: 98:7d:18:5e:b8:d6:26:6f:ba:ec:fa:eb:c8:ec:ad:0a:6a:e0: d1:7a:c6:87:93:3f:7b:fc:6a:ef:00:53:c0:db:38:36:f5:89: 7d:30:d7:6b:95:39:94:ce:0e:7e:7a:56:ec:36:87:ff:3d:52: c8:05:74:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhLng2SYN9cCJrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NTJjZmI3NWQtNzUwMy00YWRlLThmOTYtNzYyNDUxZDZhZTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCaKH+iQixgye0bEo93AV/WrjmtJ+rm+4wD9 bijpR+N7IeJAiPKJlA6+Bf5mbUzg2wR0jpEy0a4+aCmst8gK5iKJ8iaW1dNa1JJY 7MMynKKI7GKNazxlKTC1iAWF4hdIT2dj1R/zkHscteDIFlI1VGQ3wahqf0AMJ/hg +oPyYYRMOnpSF12S1qHbAdF7HXspQDo/pBVZPlo6edLWeiYiDoG1pBZ3kXHDdt33 z3qfpImqMALVbUbTszsmdXHdwBgfK8qpLG3Lkw4x5ZvzlTnFcvXN99d3WRLZAqZQ he4Hq7swfQK4clSd+nv+ytyzeKlvOF8Y4edMOAtN9yLpcNv2/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKll77jxhbwDwVR/rjsbopuXMoSpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDRkOTY3YzktNDBhZS0z MGY5LWI0MDAtM2RhNTJjYzBjYjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRNqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxfV8A5qxaUvxOAPe0EyE2oNVqgUK/vcMaFJHb0jK0bSAYGYTcAKPDx QPnvSKGjI7tugMFZfJAjrJUSnJ4vdO68IXMch68LrnbCQHdCFpBZU3OvtrapkB6U ZkvE9Ra+5+fTFJntj3QymaTs3P2kGP2Q56amMwJMYGVaYOCByXaRPEzUTEMZFloz zQN9tf8MciPxEow64cSYauHJhgJeR5Du8S7tBVGzqGUz7lU8JvRN8ld8VeSnaEXt XauqCIf3IJ8b6owp95h9GF641iZvuuz668jsrQpq4NF6xoeTP3v8au8AU8DbODb1 iX0w12uVOZTODn56Vuw2h/89UsgFdCE= -----END CERTIFICATE-----Generated at Sat Apr 26 20:53:08 2025 by rpki-client