$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1710914b-c25c-3692-ad92-7cc11587e8ef.roa File: 1710914b-c25c-3692-ad92-7cc11587e8ef.roa (raw, json) Hash identifier: L3i9f7P6UkC8GKFKPhNfVJshr7nY56b0J1oJFvIKAnY= Subject key identifier: 6C:6B:36:0C:54:54:FB:B6:93:F5:30:CD:7E:9B:5A:E1:20:7C:89:25 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849762ADCE7FD2EDC42C419D140 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1710914b-c25c-3692-ad92-7cc11587e8ef.roa Signing time: Tue 08 Apr 2025 20:45:34 +0000 ROA not before: Tue 08 Apr 2025 20:45:34 +0000 ROA not after: Mon 07 Jul 2025 20:45:34 +0000 asID: 19905 IP address blocks: 173.24.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:76:2a:dc:e7:fd:2e:dc:42:c4:19:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 8 20:45:34 2025 GMT Not After : Jul 7 20:45:34 2025 GMT Subject: CN=2ae12d4c-2b9f-426f-9cbf-30da26d9b210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:85:95:81:a3:78:b9:fb:27:61:9e:3e:1f:19: 65:81:09:54:ca:25:3b:4a:86:3f:2e:da:e0:0a:53: 2f:99:f3:67:b8:9e:e6:03:e3:60:03:db:98:0c:89: 87:14:19:df:1a:06:b3:89:23:09:d0:0d:b7:f7:12: 8a:60:91:26:61:30:92:0f:7d:09:67:fc:bf:f0:fc: a5:ea:18:6a:16:0c:f1:3b:51:98:a1:a6:0f:3a:02: 81:32:83:e3:b9:55:5b:f9:78:18:af:82:d9:89:78: f8:e9:a7:e8:b6:e0:85:c5:7f:86:8e:a4:ad:b0:47: 5a:5d:8f:5b:bd:af:2a:24:81:b1:4b:60:14:ed:79: 6c:51:89:eb:ad:5d:6d:de:81:70:56:87:95:67:f4: c9:37:6a:37:cf:8b:d2:e4:42:3a:75:dc:dd:0e:62: 01:80:a6:05:d6:45:32:9b:7c:25:49:a9:f6:0c:2e: eb:a0:8d:7b:b2:a6:fe:f7:26:35:11:c3:6d:4c:31: 4e:83:09:c4:63:ee:35:7f:b2:6a:6a:e1:56:4a:e3: 5e:1d:17:a6:58:f3:7e:99:79:c1:4e:45:d3:11:50: 0c:9c:0c:1f:33:57:90:ac:78:6e:84:f3:3a:8c:46: 26:da:2c:e0:82:a7:d8:a6:89:8a:ce:5b:68:71:37: 50:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:6B:36:0C:54:54:FB:B6:93:F5:30:CD:7E:9B:5A:E1:20:7C:89:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1710914b-c25c-3692-ad92-7cc11587e8ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:17:67:25:85:36:97:6e:96:bf:1c:5e:9b:8a:49:10:c5:fc: c2:2f:f4:7c:21:8f:ab:2a:f6:75:16:fe:e2:38:35:8d:48:dc: 3d:73:7e:bd:ba:b7:78:30:8f:c4:6c:da:56:01:b5:44:f9:cd: be:ec:f8:dd:13:07:20:ee:da:ed:7f:17:5a:f8:14:6c:23:8a: 12:a5:41:6b:11:69:7f:e0:22:60:c1:bc:f7:37:17:dc:35:45: a0:88:f9:0c:b7:27:fa:83:e4:66:8d:a1:0b:4c:d0:be:fd:ff: 79:6f:78:8b:a1:bb:41:48:c0:e2:d3:64:31:ff:7c:2d:e3:c0: f9:d8:1f:f3:16:72:ed:e3:da:ea:b9:44:4e:04:a1:50:ce:72: 83:6b:c2:c3:5a:d8:fd:24:e5:ce:42:9e:9a:e4:c1:6c:49:f5: cb:53:75:0c:c5:66:8a:93:58:1e:aa:5a:f7:41:08:b6:5b:9e: 3c:99:af:65:66:0d:57:23:89:6f:e8:7f:f7:00:4b:41:04:31: 36:66:81:40:d2:27:15:1b:46:1e:b3:bb:39:bf:98:3f:d1:5f: 4c:ba:e0:d3:62:14:b8:f2:76:9a:40:42:aa:f4:77:40:20:3a: 7c:90:a4:86:24:7b:70:b8:4f:4f:c2:b2:a1:fd:4d:5b:c3:40: cc:73:be:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl2Ktzn/S7cQsQZ0UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQwODIwNDUzNFoXDTI1MDcwNzIwNDUzNFowLzEtMCsGA1UEAxMk MmFlMTJkNGMtMmI5Zi00MjZmLTljYmYtMzBkYTI2ZDliMjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoWVgaN4ufsnYZ4+HxllgQlUyiU7SoY/Ltrg ClMvmfNnuJ7mA+NgA9uYDImHFBnfGgaziSMJ0A239xKKYJEmYTCSD30JZ/y/8Pyl 6hhqFgzxO1GYoaYPOgKBMoPjuVVb+XgYr4LZiXj46afotuCFxX+GjqStsEdaXY9b va8qJIGxS2AU7XlsUYnrrV1t3oFwVoeVZ/TJN2o3z4vS5EI6ddzdDmIBgKYF1kUy m3wlSan2DC7roI17sqb+9yY1EcNtTDFOgwnEY+41f7JqauFWSuNeHRemWPN+mXnB TkXTEVAMnAwfM1eQrHhuhPM6jEYm2izggqfYpomKzltocTdQrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxrNgxUVPu2k/UwzX6bWuEgfIklMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTcxMDkxNGItYzI1Yy0z NjkyLWFkOTItN2NjMTE1ODdlOGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRgIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMXZyWFNpdulr8cXpuKSRDF/MIv9Hwhj6sq9nUW/uI4NY1I3D1zfr26 t3gwj8Rs2lYBtUT5zb7s+N0TByDu2u1/F1r4FGwjihKlQWsRaX/gImDBvPc3F9w1 RaCI+Qy3J/qD5GaNoQtM0L79/3lveIuhu0FIwOLTZDH/fC3jwPnYH/MWcu3j2uq5 RE4EoVDOcoNrwsNa2P0k5c5CnprkwWxJ9ctTdQzFZoqTWB6qWvdBCLZbnjyZr2Vm DVcjiW/of/cAS0EEMTZmgUDSJxUbRh6zuzm/mD/RX0y64NNiFLjydppAQqr0d0Ag OnyQpIYke3C4T0/CsqH9TVvDQMxzvvc= -----END CERTIFICATE-----Generated at Sat Apr 26 12:19:24 2025 by rpki-client