$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/177e1eb6-0ac0-3abc-b175-97318c9b4231.roa File: 177e1eb6-0ac0-3abc-b175-97318c9b4231.roa (raw, json) Hash identifier: K1/ccEt4lTbi6YXk5p5kunQNjhYAoCot4XLg13hSGcU= Subject key identifier: E2:0D:2E:04:BA:79:BD:9F:E1:77:62:16:ED:40:18:6B:FE:2E:D2:D3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784BB224A1774296A24E6B0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/177e1eb6-0ac0-3abc-b175-97318c9b4231.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.17.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:bb:22:4a:17:74:29:6a:24:e6:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=e290fdd7-8ad6-479d-b74e-c27f3ec11e53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1d:cf:0c:b8:13:65:3d:29:a7:49:ac:c0:37: 6e:1c:b9:50:ce:2a:d6:53:86:3a:50:93:c9:e2:ff: fc:7e:12:97:51:28:8b:a4:11:a0:a5:e4:16:04:eb: 7c:1a:96:68:14:8e:6d:6d:a0:03:9a:23:e4:4c:f6: 92:a0:1c:fd:fa:5f:e5:a3:27:4c:4d:e9:7f:03:e9: 1c:3d:78:be:97:ca:2f:ff:11:65:82:ee:10:8c:52: 71:fc:63:a0:1c:92:c2:db:7c:c1:77:66:ba:d2:fe: 81:34:7b:a0:0e:07:ff:42:84:59:60:1e:c2:70:1e: d7:50:6d:67:5e:d6:b0:dc:0b:3d:2c:17:84:b3:a6: 8b:e2:01:cc:e3:e7:47:b2:9f:13:73:81:90:cf:ba: c8:c7:c7:8a:a7:3b:27:ca:af:fc:a8:fb:12:db:96: c1:49:0d:75:39:80:39:ce:88:8f:fb:df:5b:63:2e: 67:4f:1f:17:b8:5d:5c:34:45:19:4f:2d:28:69:f1: 2f:0f:6c:72:74:41:d0:0a:25:ab:6a:2d:b0:fa:b9: 77:21:a8:3d:f8:f6:77:64:a8:f8:ca:ce:22:b4:a1: 14:bd:76:73:57:cc:8f:82:ec:08:c5:ae:31:f1:e5: 86:71:94:7d:0b:b0:6f:f5:6e:01:8a:71:9c:42:7a: 9c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:0D:2E:04:BA:79:BD:9F:E1:77:62:16:ED:40:18:6B:FE:2E:D2:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/177e1eb6-0ac0-3abc-b175-97318c9b4231.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:e3:fa:ad:28:22:06:74:98:6b:0c:92:11:ee:f2:99:66:9e: 56:65:ed:21:85:b6:7f:0d:3b:c6:6a:b6:21:ec:09:4a:59:41: d4:50:5f:47:85:f3:85:69:de:7d:26:bf:75:55:af:a2:7a:6e: 6e:8e:3f:fc:6b:35:fb:e5:63:92:7c:f5:6a:01:26:6b:26:42: f5:f6:5e:7d:4b:06:3d:bf:4e:a2:db:5a:87:d5:95:9c:ad:a1: e2:d9:9e:34:c7:7e:ca:e8:3d:8b:27:e7:81:d2:2d:71:25:b7: ed:eb:94:28:d7:94:d1:e1:58:ab:71:b7:26:df:90:01:39:0f: 50:3e:0c:fa:8e:53:f4:51:9e:3a:2c:c5:9f:1a:6c:46:f7:33: 31:1f:de:70:8e:19:d0:81:e6:e8:55:35:31:88:42:81:e0:c9: b5:c6:8f:43:b1:84:cc:d4:3e:f2:3f:10:70:75:0a:d2:94:45: 89:68:58:61:b3:9f:70:14:bd:04:6e:48:62:31:92:de:b1:fb: 79:f7:fe:d2:0f:80:d6:7f:44:96:d4:4a:15:eb:bb:c5:bd:07: 3b:94:30:8b:9c:c4:82:aa:8b:69:01:66:5b:d8:e6:14:4f:af: 5f:37:7f:23:3a:81:80:ab:32:80:fb:da:52:db:7a:d5:cb:3b: ed:8b:8d:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhLsiShd0KWok5rAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZTI5MGZkZDctOGFkNi00NzlkLWI3NGUtYzI3ZjNlYzExZTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx3PDLgTZT0pp0mswDduHLlQzirWU4Y6UJPJ 4v/8fhKXUSiLpBGgpeQWBOt8GpZoFI5tbaADmiPkTPaSoBz9+l/loydMTel/A+kc PXi+l8ov/xFlgu4QjFJx/GOgHJLC23zBd2a60v6BNHugDgf/QoRZYB7CcB7XUG1n Xtaw3As9LBeEs6aL4gHM4+dHsp8Tc4GQz7rIx8eKpzsnyq/8qPsS25bBSQ11OYA5 zoiP+99bYy5nTx8XuF1cNEUZTy0oafEvD2xydEHQCiWrai2w+rl3Iag9+PZ3ZKj4 ys4itKEUvXZzV8yPguwIxa4x8eWGcZR9C7Bv9W4BinGcQnqclwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOINLgS6eb2f4XdiFu1AGGv+LtLTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTc3ZTFlYjYtMGFjMC0z YWJjLWIxNzUtOTczMThjOWI0MjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArREoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbj+q0oIgZ0mGsMkhHu8plmnlZl7SGFtn8NO8ZqtiHsCUpZQdRQX0eF 84Vp3n0mv3VVr6J6bm6OP/xrNfvlY5J89WoBJmsmQvX2Xn1LBj2/TqLbWofVlZyt oeLZnjTHfsroPYsn54HSLXElt+3rlCjXlNHhWKtxtybfkAE5D1A+DPqOU/RRnjos xZ8abEb3MzEf3nCOGdCB5uhVNTGIQoHgybXGj0OxhMzUPvI/EHB1CtKURYloWGGz n3AUvQRuSGIxkt6x+3n3/tIPgNZ/RJbUShXru8W9BzuUMIucxIKqi2kBZlvY5hRP r183fyM6gYCrMoD72lLbetXLO+2LjZk= -----END CERTIFICATE-----Generated at Sat Apr 26 20:57:44 2025 by rpki-client