$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0bfdbb61-f255-3ad9-900c-bdfad8c7f765.roa File: 0bfdbb61-f255-3ad9-900c-bdfad8c7f765.roa (raw, json) Hash identifier: qu0U0iOHdZXnQYYFpXMnVVbXmclY5vVffHJBzR+yfaU= Subject key identifier: C9:22:07:B4:AF:32:67:49:EA:8C:17:B7:7A:4A:3A:24:17:76:66:21 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F432858499BF4D5F9C603474954C6D240 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0bfdbb61-f255-3ad9-900c-bdfad8c7f765.roa Signing time: Tue 22 Apr 2025 09:37:26 +0000 ROA not before: Tue 22 Apr 2025 09:37:26 +0000 ROA not after: Mon 21 Jul 2025 09:37:26 +0000 asID: 19905 IP address blocks: 173.16.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9b:f4:d5:f9:c6:03:47:49:54:c6:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 22 09:37:26 2025 GMT Not After : Jul 21 09:37:26 2025 GMT Subject: CN=f40382cc-abce-4d4d-85fe-91d2031908b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a9:31:b0:66:1b:76:73:57:6d:2c:9e:20:cb: 37:bb:26:9f:21:6a:1f:2b:9c:de:85:f8:69:bd:b1: 37:18:bc:31:21:7a:33:06:a8:ff:95:ae:8a:37:72: 61:45:39:14:19:1a:98:40:68:d2:0e:6c:de:e2:d8: ba:18:e5:08:da:e6:43:1e:cf:65:3a:93:fd:89:53: ea:80:af:94:e1:46:dd:19:60:9f:d9:e1:50:1b:78: ba:fe:b5:3e:25:ed:18:15:f4:6e:3e:08:36:28:f9: 89:ab:ca:a7:96:b8:8a:26:d1:37:1b:0b:d2:e1:b1: 01:65:0c:e3:ef:81:7d:f7:0f:d2:88:5c:e5:3a:3d: 7f:50:ec:9a:81:0d:62:1e:36:0d:08:4e:ea:4d:4a: e4:08:2b:63:e6:78:1c:f9:5f:86:00:a9:e0:4c:66: 00:bf:01:43:e6:bb:29:17:3a:6a:41:6a:30:0f:f2: 5e:19:a8:69:f2:ec:3e:95:c1:35:d9:05:e5:3f:2d: 3f:97:75:f2:58:52:20:a4:83:e6:7b:61:a6:3a:2f: 4f:8a:00:97:f3:13:26:50:8c:17:62:95:dd:fe:60: 98:2e:4e:a6:60:e8:d2:04:72:32:ef:6f:4f:fd:48: 06:f4:4b:df:0a:3d:a9:c3:59:3d:c1:34:18:90:93: 64:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:22:07:B4:AF:32:67:49:EA:8C:17:B7:7A:4A:3A:24:17:76:66:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0bfdbb61-f255-3ad9-900c-bdfad8c7f765.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:8e:46:1e:35:de:f6:73:47:46:29:3a:74:31:a1:76:54:87: 86:21:20:49:4b:68:12:86:ad:78:b4:76:74:95:35:11:bc:3e: 27:60:af:d9:bd:13:37:bb:29:45:3a:09:79:80:ed:a7:f5:1c: 98:f3:9b:fd:91:c6:7b:80:76:17:59:f9:79:91:f7:9e:ac:22: bc:73:f8:79:3c:a2:aa:50:42:fb:28:93:97:b7:fe:29:22:3b: 13:f5:60:94:d3:09:70:8b:b3:ad:07:e8:95:c5:ea:61:85:d4: 58:b8:8b:ff:5b:e5:99:98:7b:cc:0a:a5:27:18:a9:88:bf:e6: 32:8f:6a:71:da:52:c2:99:d9:ab:ab:d9:96:c2:cd:94:e5:46: 88:7d:e6:f7:62:ab:8c:91:a6:22:c2:e2:fc:5b:e0:bf:b7:b8: 7f:01:70:1a:25:33:fb:2f:72:44:9e:4c:78:e5:75:1c:70:85: 5d:ca:17:a2:db:9f:a8:10:7b:63:d5:29:e3:ab:69:b6:31:a1: 44:89:06:f8:39:84:b9:81:bc:98:91:98:b1:c3:62:91:3c:8a: 9f:9e:84:62:ae:e4:e0:e8:22:84:18:2b:2d:ce:94:9f:d0:f0: e3:10:63:16:ac:4a:e5:d1:2c:9b:e3:39:29:7c:cb:06:a4:da: 1f:99:e9:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmb9NX5xgNHSVTG0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMjA5MzcyNloXDTI1MDcyMTA5MzcyNlowLzEtMCsGA1UEAxMk ZjQwMzgyY2MtYWJjZS00ZDRkLTg1ZmUtOTFkMjAzMTkwOGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06kxsGYbdnNXbSyeIMs3uyafIWofK5zehfhp vbE3GLwxIXozBqj/la6KN3JhRTkUGRqYQGjSDmze4ti6GOUI2uZDHs9lOpP9iVPq gK+U4UbdGWCf2eFQG3i6/rU+Je0YFfRuPgg2KPmJq8qnlriKJtE3GwvS4bEBZQzj 74F99w/SiFzlOj1/UOyagQ1iHjYNCE7qTUrkCCtj5ngc+V+GAKngTGYAvwFD5rsp FzpqQWowD/JeGahp8uw+lcE12QXlPy0/l3XyWFIgpIPme2GmOi9PigCX8xMmUIwX YpXd/mCYLk6mYOjSBHIy729P/UgG9EvfCj2pw1k9wTQYkJNk4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkiB7SvMmdJ6owXt3pKOiQXdmYhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGJmZGJiNjEtZjI1NS0z YWQ5LTkwMGMtYmRmYWQ4YzdmNzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRAvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiORh413vZzR0YpOnQxoXZUh4YhIElLaBKGrXi0dnSVNRG8Pidgr9m9 Eze7KUU6CXmA7af1HJjzm/2RxnuAdhdZ+XmR956sIrxz+Hk8oqpQQvsok5e3/iki OxP1YJTTCXCLs60H6JXF6mGF1Fi4i/9b5ZmYe8wKpScYqYi/5jKPanHaUsKZ2aur 2ZbCzZTlRoh95vdiq4yRpiLC4vxb4L+3uH8BcBolM/svckSeTHjldRxwhV3KF6Lb n6gQe2PVKeOrabYxoUSJBvg5hLmBvJiRmLHDYpE8ip+ehGKu5ODoIoQYKy3OlJ/Q 8OMQYxasSuXRLJvjOSl8ywak2h+Z6QU= -----END CERTIFICATE-----Generated at Sun Apr 27 07:14:08 2025 by rpki-client