$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/14006d2f-a78b-397f-bf38-add88890ad95.roa File: 14006d2f-a78b-397f-bf38-add88890ad95.roa (raw, json) Hash identifier: 3oAPh01+XAU7ZZNVb5EvZvNEZZmF2LLwrJ8wNMjq/Oc= Subject key identifier: 11:F5:9C:1B:27:C8:F3:33:8F:71:31:45:AF:65:18:BB:C6:66:CD:F7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA065BFA06D0E1567B3800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/14006d2f-a78b-397f-bf38-add88890ad95.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.17.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:06:5b:fa:06:d0:e1:56:7b:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=66b37c81-dbcb-40cf-b5fc-708d573c75ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b3:ff:d9:f2:9d:94:49:6b:33:d7:7a:d2:bd: 32:3a:e8:ee:61:cb:9b:cd:42:69:cc:7f:ce:d2:a2: aa:ca:2d:6f:0d:ac:e7:f9:1e:39:9e:9a:bd:1b:ba: ec:ce:22:a4:8c:be:dc:64:ab:b5:e3:4a:05:33:bf: 0b:62:75:d3:5b:8a:78:c3:94:37:3e:73:67:3f:90: 68:73:2f:de:d5:44:3d:b8:5e:cc:68:ed:e5:80:cd: f4:4a:e1:9e:61:52:94:50:15:6e:53:af:43:d4:47: e9:57:fd:8b:8f:80:27:4c:fa:2c:ea:a0:36:b1:86: 6c:da:29:6b:65:24:13:f7:ef:e4:f7:70:91:1b:44: 2f:0b:55:c5:82:df:7f:b9:d7:13:c2:d6:52:dd:da: 64:7b:9e:cf:db:cf:2d:33:ff:54:ee:23:26:e4:71: 86:4f:17:f2:a9:84:f3:d5:28:8c:31:cb:af:a9:54: 5c:32:8e:ff:e2:a5:ea:32:1e:79:60:04:22:4f:ec: 6a:64:b2:6e:12:89:55:09:4d:4f:d3:61:e4:70:f9: a4:15:89:30:76:be:b5:a5:44:bc:89:dd:73:f4:d6: 42:03:02:d1:54:c1:cf:bd:aa:46:3a:a7:1f:b1:64: ca:80:e0:25:d3:8f:03:4f:e7:01:16:ad:a2:74:ac: 55:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F5:9C:1B:27:C8:F3:33:8F:71:31:45:AF:65:18:BB:C6:66:CD:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/14006d2f-a78b-397f-bf38-add88890ad95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:65:87:f0:c8:5d:55:d6:84:63:69:6c:f1:33:f2:92:45:07: b5:e6:3b:9e:68:57:0f:06:16:7b:7f:18:f7:ac:20:fa:da:e9: 19:b5:29:52:7d:b9:b6:50:bf:18:fe:cc:8d:44:a4:0d:51:f7: 8f:3e:2c:f5:2d:5e:48:52:3b:45:d9:51:69:b7:ac:5e:4e:ba: 5d:ad:fc:0a:bb:11:59:8f:49:82:83:0c:a6:a0:3b:ed:3f:ac: a0:00:82:ad:0f:2d:b6:26:09:34:4d:d9:dd:fc:f2:10:9f:a7: 5b:cb:8a:be:04:ca:4c:e4:9c:33:76:9c:71:65:69:0e:de:37: 46:83:ce:e4:ad:df:96:3e:82:3a:e7:1e:1d:1d:21:2b:b1:b5: 71:b9:8f:3f:0c:e7:1f:b6:16:6b:42:ea:1c:65:d5:9c:fa:76: 3e:fd:46:55:dd:e3:44:6b:89:72:93:3c:c9:20:8d:3e:c7:79: 39:0c:11:f9:28:24:2d:58:f2:38:38:00:2a:b7:b7:db:30:55: a8:f5:5a:c1:a7:dd:db:4f:cc:c9:d5:7d:89:73:51:df:ab:0c: 5b:72:a3:46:99:e4:b2:b1:91:8f:5e:03:6c:87:ab:9a:34:d0: 01:23:4a:33:3d:9a:87:79:4f:39:0f:73:35:25:ef:bf:ae:ee: 28:71:5e:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkugZb+gbQ4VZ7OAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NjZiMzdjODEtZGJjYi00MGNmLWI1ZmMtNzA4ZDU3M2M3NWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7P/2fKdlElrM9d60r0yOujuYcubzUJpzH/O 0qKqyi1vDazn+R45npq9G7rsziKkjL7cZKu140oFM78LYnXTW4p4w5Q3PnNnP5Bo cy/e1UQ9uF7MaO3lgM30SuGeYVKUUBVuU69D1EfpV/2Lj4AnTPos6qA2sYZs2ilr ZSQT9+/k93CRG0QvC1XFgt9/udcTwtZS3dpke57P288tM/9U7iMm5HGGTxfyqYTz 1SiMMcuvqVRcMo7/4qXqMh55YAQiT+xqZLJuEolVCU1P02HkcPmkFYkwdr61pUS8 id1z9NZCAwLRVMHPvapGOqcfsWTKgOAl048DT+cBFq2idKxV1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBH1nBsnyPMzj3ExRa9lGLvGZs33MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTQwMDZkMmYtYTc4Yi0z OTdmLWJmMzgtYWRkODg4OTBhZDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRG9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1lh/DIXVXWhGNpbPEz8pJFB7XmO55oVw8GFnt/GPesIPra6Rm1KVJ9 ubZQvxj+zI1EpA1R948+LPUtXkhSO0XZUWm3rF5Oul2t/Aq7EVmPSYKDDKagO+0/ rKAAgq0PLbYmCTRN2d388hCfp1vLir4EykzknDN2nHFlaQ7eN0aDzuSt35Y+gjrn Hh0dISuxtXG5jz8M5x+2FmtC6hxl1Zz6dj79RlXd40RriXKTPMkgjT7HeTkMEfko JC1Y8jg4ACq3t9swVaj1WsGn3dtPzMnVfYlzUd+rDFtyo0aZ5LKxkY9eA2yHq5o0 0AEjSjM9mod5TzkPczUl77+u7ihxXjk= -----END CERTIFICATE-----Generated at Sun Apr 27 09:15:16 2025 by rpki-client