$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0f8bd921-1438-3359-a561-4ea35af7895d.roa File: 0f8bd921-1438-3359-a561-4ea35af7895d.roa (raw, json) Hash identifier: esqGucVcpWQlgQoHPA88cT8ZPBzSKxpr1aTdJB4dnPQ= Subject key identifier: AF:F3:86:6B:C4:AC:C3:93:1D:12:33:AC:3F:C2:FA:83:15:38:CC:5B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F432858499BF5058844D7E1C3A82AEB80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0f8bd921-1438-3359-a561-4ea35af7895d.roa Signing time: Tue 22 Apr 2025 09:37:48 +0000 ROA not before: Tue 22 Apr 2025 09:37:48 +0000 ROA not after: Mon 21 Jul 2025 09:37:48 +0000 asID: 19905 IP address blocks: 173.23.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9b:f5:05:88:44:d7:e1:c3:a8:2a:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 22 09:37:48 2025 GMT Not After : Jul 21 09:37:48 2025 GMT Subject: CN=56cc8bac-bc44-4cc4-be49-a5887e0dbd8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:cd:fc:c5:ff:7c:4b:e1:6f:dc:51:50:c5:ee: 78:b4:b2:fe:ab:e1:a0:b9:6a:80:81:ba:08:eb:d0: fe:26:15:05:d1:de:e6:f2:8e:c1:ff:65:a3:ea:9b: 2f:05:31:6d:60:73:a9:35:3e:82:32:56:17:96:b7: 32:55:64:a8:b1:4b:01:bb:fe:c0:dd:14:bf:58:80: ae:2e:27:55:2e:23:df:cc:b5:5c:fc:38:44:cc:70: a7:04:dc:10:73:fb:fa:91:9b:af:c9:85:50:64:eb: 2b:4e:1d:b0:31:77:0c:14:42:b3:0d:55:f8:e8:e6: 0f:17:e9:af:15:de:95:7d:96:9f:1c:ed:58:84:c9: 4a:e1:1d:24:0d:f0:e1:24:9a:32:79:be:de:d5:34: 88:42:59:c8:79:8d:e4:5a:8b:e8:09:05:38:ac:c3: 5b:3b:9d:7e:ff:09:ff:39:16:62:71:8f:30:77:55: df:4a:87:3a:db:39:d2:4f:76:4c:6a:d6:9b:4e:a6: 48:cb:e7:ff:c0:d1:e6:51:10:ae:12:2a:b7:da:05: 59:14:25:a6:93:58:76:55:db:5d:6e:0d:3e:bc:5b: df:1b:30:d0:27:ff:51:04:01:e7:01:0e:a4:4a:a5: fc:e6:e3:99:28:51:be:d4:32:62:8a:8a:84:4d:ef: 46:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F3:86:6B:C4:AC:C3:93:1D:12:33:AC:3F:C2:FA:83:15:38:CC:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0f8bd921-1438-3359-a561-4ea35af7895d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:d3:c3:2d:fe:0a:3a:e3:09:aa:73:2c:1c:b9:a0:71:d5:c0: c4:a2:53:70:7f:f5:9e:41:08:ef:b3:a1:aa:09:12:3b:2f:15: 35:a8:d0:ef:2f:24:00:c3:0e:1c:8b:e9:ed:44:93:3e:0c:a4: c5:f3:66:3f:ca:2f:be:46:00:8c:3d:44:31:fd:93:e1:5b:6d: 4c:27:d1:3b:46:3a:ac:a5:3f:d4:14:19:04:7f:3f:47:55:c3: ad:81:50:21:d1:6a:58:ad:08:31:0e:49:28:1b:6b:9b:8b:16: bc:16:b4:86:6c:74:cb:2e:93:67:a1:2d:9d:27:33:0c:b1:e8: 8f:ef:11:2e:50:b7:fa:36:e4:89:ee:05:d9:dd:7e:05:8a:d6: 8d:f6:5d:fd:07:c6:1c:12:a7:b7:cd:3a:a6:f7:76:ca:5e:8f: d5:de:a3:53:17:21:82:4f:2d:6c:b8:11:45:5e:53:64:dd:08: 2f:7a:e9:18:66:4a:6c:d7:50:99:33:9c:95:c4:29:7c:ce:04: ef:a6:5a:53:67:52:a1:cd:96:61:9e:c0:eb:15:88:77:be:90: 85:65:90:61:56:23:15:be:70:77:ef:92:53:ed:9f:70:b3:35: 72:60:19:49:b5:f5:7b:24:c3:bb:a3:1c:a4:b4:e6:a6:8e:8f: be:f4:a3:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmb9QWIRNfhw6gq64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMjA5Mzc0OFoXDTI1MDcyMTA5Mzc0OFowLzEtMCsGA1UEAxMk NTZjYzhiYWMtYmM0NC00Y2M0LWJlNDktYTU4ODdlMGRiZDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7c38xf98S+Fv3FFQxe54tLL+q+GguWqAgboI 69D+JhUF0d7m8o7B/2Wj6psvBTFtYHOpNT6CMlYXlrcyVWSosUsBu/7A3RS/WICu LidVLiPfzLVc/DhEzHCnBNwQc/v6kZuvyYVQZOsrTh2wMXcMFEKzDVX46OYPF+mv Fd6VfZafHO1YhMlK4R0kDfDhJJoyeb7e1TSIQlnIeY3kWovoCQU4rMNbO51+/wn/ ORZicY8wd1XfSoc62znST3ZMatabTqZIy+f/wNHmURCuEiq32gVZFCWmk1h2Vdtd bg0+vFvfGzDQJ/9RBAHnAQ6kSqX85uOZKFG+1DJiioqETe9GhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/zhmvErMOTHRIzrD/C+oMVOMxbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGY4YmQ5MjEtMTQzOC0z MzU5LWE1NjEtNGVhMzVhZjc4OTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRePMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPTwy3+CjrjCapzLBy5oHHVwMSiU3B/9Z5BCO+zoaoJEjsvFTWo0O8v JADDDhyL6e1Ekz4MpMXzZj/KL75GAIw9RDH9k+FbbUwn0TtGOqylP9QUGQR/P0dV w62BUCHRalitCDEOSSgba5uLFrwWtIZsdMsuk2ehLZ0nMwyx6I/vES5Qt/o25Inu BdndfgWK1o32Xf0HxhwSp7fNOqb3dspej9Xeo1MXIYJPLWy4EUVeU2TdCC966Rhm SmzXUJkznJXEKXzOBO+mWlNnUqHNlmGewOsViHe+kIVlkGFWIxW+cHfvklPtn3Cz NXJgGUm19Xskw7ujHKS05qaOj770o04= -----END CERTIFICATE-----Generated at Sat Apr 26 14:48:37 2025 by rpki-client