$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11db554e-b982-3d8a-9cf2-17d247b56546.roa File: 11db554e-b982-3d8a-9cf2-17d247b56546.roa (raw, json) Hash identifier: Qj/zCjCgNmTghxtwWH7HcaV4ZJd6p7jS75B06puidFM= Subject key identifier: 85:CE:A0:F8:90:84:AC:EB:8C:4E:B1:B4:AD:68:C3:52:AC:00:F8:A8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA2D2407CEA3E88F540900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11db554e-b982-3d8a-9cf2-17d247b56546.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.17.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:2d:24:07:ce:a3:e8:8f:54:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=52060878-0a7c-47de-b8b1-2ecbaacba3d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:49:fe:88:5e:ce:26:5d:15:dc:a1:f1:7e:d2: 5c:0b:6f:b7:ce:6b:65:17:29:29:04:2c:57:78:e8: df:b9:d0:e7:cd:0d:59:41:53:0e:47:28:a4:fb:ce: d1:9b:e8:c8:31:62:b3:88:2d:5f:5f:8c:19:d9:20: c7:9b:24:4a:44:56:f3:f8:54:d0:f4:b5:32:82:6d: d6:46:d5:d6:3e:d1:31:ca:9b:bd:62:81:ec:e7:f0: 05:bf:83:c2:c3:8d:71:48:ca:42:28:b6:80:12:7b: bb:44:f7:71:6b:04:6f:19:a8:d7:59:07:9c:48:36: d3:ff:8e:04:d3:ff:56:31:53:e2:5d:54:76:09:89: 68:62:2d:d1:c9:69:28:32:cb:58:aa:78:d8:11:58: 8d:3e:6a:e6:a6:4d:b8:a1:ca:c9:0e:f0:f7:29:02: 30:31:26:0a:02:0d:e5:51:ab:5d:60:1c:bc:37:19: d8:70:26:f8:11:89:2b:04:48:1a:eb:09:1b:2d:71: e5:0b:17:d5:f1:3f:9a:46:6a:3b:44:f2:1b:ec:c2: 56:c2:f6:0c:e9:84:4f:59:46:81:74:8e:b3:cd:e8: 19:e6:7b:25:bf:5d:44:6d:0f:10:eb:2c:06:ec:6f: 6e:00:55:32:ca:3c:ff:5d:c3:05:a2:d8:33:61:88: 16:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:CE:A0:F8:90:84:AC:EB:8C:4E:B1:B4:AD:68:C3:52:AC:00:F8:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11db554e-b982-3d8a-9cf2-17d247b56546.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:46:b1:26:74:03:b2:16:a0:17:c2:4f:7c:b6:ab:18:19:be: a9:89:af:6c:15:c7:ab:10:e8:65:b0:a1:19:56:46:40:de:62: a0:c9:44:db:3f:d6:2b:57:af:46:ba:ef:de:ca:3e:d9:56:94: 96:51:00:13:16:8b:c5:e6:77:23:c8:a4:16:71:7a:29:47:96: ec:38:37:6e:81:74:40:3a:75:67:79:64:e2:d5:d5:b3:66:a8: a9:12:7c:57:96:97:2e:65:c5:9e:35:49:d6:ff:19:f9:c2:07: 7c:e8:bc:93:f6:87:49:db:86:5e:8b:b5:6a:09:e3:40:29:b6: 21:00:52:a3:c9:f1:b9:a1:b7:d8:fc:7e:c1:12:f6:5e:92:33: 48:68:92:b3:e4:cf:2d:95:83:26:dd:a2:0e:53:e9:d3:dd:d5: 76:28:06:5f:39:aa:16:7a:17:b8:73:43:8b:c5:de:99:32:72: 1c:78:38:1c:ab:76:28:62:37:35:bc:bb:8d:73:cb:61:f8:f6: e1:d9:98:fd:30:fd:2d:93:18:04:41:e2:d5:26:77:32:02:4d: 33:02:90:2b:7b:21:52:a9:33:88:9d:03:96:f3:5b:b4:40:a0: d8:c3:38:03:49:82:0e:1f:4a:e8:45:ba:b4:38:2a:66:5d:35: c6:f1:d1:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkui0kB86j6I9UCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTIwNjA4NzgtMGE3Yy00N2RlLWI4YjEtMmVjYmFhY2JhM2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkn+iF7OJl0V3KHxftJcC2+3zmtlFykpBCxX eOjfudDnzQ1ZQVMORyik+87Rm+jIMWKziC1fX4wZ2SDHmyRKRFbz+FTQ9LUygm3W RtXWPtExypu9YoHs5/AFv4PCw41xSMpCKLaAEnu7RPdxawRvGajXWQecSDbT/44E 0/9WMVPiXVR2CYloYi3RyWkoMstYqnjYEViNPmrmpk24ocrJDvD3KQIwMSYKAg3l UatdYBy8NxnYcCb4EYkrBEga6wkbLXHlCxfV8T+aRmo7RPIb7MJWwvYM6YRPWUaB dI6zzegZ5nslv11EbQ8Q6ywG7G9uAFUyyjz/XcMFotgzYYgWkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXOoPiQhKzrjE6xtK1ow1KsAPioMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTFkYjU1NGUtYjk4Mi0z ZDhhLTljZjItMTdkMjQ3YjU2NTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRF8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBGsSZ0A7IWoBfCT3y2qxgZvqmJr2wVx6sQ6GWwoRlWRkDeYqDJRNs/ 1itXr0a6797KPtlWlJZRABMWi8XmdyPIpBZxeilHluw4N26BdEA6dWd5ZOLV1bNm qKkSfFeWly5lxZ41Sdb/GfnCB3zovJP2h0nbhl6LtWoJ40AptiEAUqPJ8bmht9j8 fsES9l6SM0hokrPkzy2Vgybdog5T6dPd1XYoBl85qhZ6F7hzQ4vF3pkychx4OByr dihiNzW8u41zy2H49uHZmP0w/S2TGARB4tUmdzICTTMCkCt7IVKpM4idA5bzW7RA oNjDOANJgg4fSuhFurQ4KmZdNcbx0Qc= -----END CERTIFICATE-----Generated at Sat Apr 26 20:56:14 2025 by rpki-client