$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1af58f65-539a-35e4-8e11-237912be598c.roa File: 1af58f65-539a-35e4-8e11-237912be598c.roa (raw, json) Hash identifier: /ew1aRlAmkZz/yZKTSRF/y/EcrbkuBVoirV/mgFcHbk= Subject key identifier: 65:89:26:61:69:CC:97:12:E3:06:E3:59:1D:59:47:92:22:92:7E:5B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA32AA5F13DF15DF0B7380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1af58f65-539a-35e4-8e11-237912be598c.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.18.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:32:aa:5f:13:df:15:df:0b:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=bb4f5c40-746b-4f40-bae3-aea4a2e34c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5e:5c:2a:1b:de:11:5a:42:2e:77:c8:f7:b1: 87:d5:78:48:82:26:f6:28:8b:08:7f:73:1b:09:04: 26:8b:65:77:ae:69:43:14:17:75:2a:0d:fe:ff:7d: a4:21:fa:17:fe:fa:d8:c0:f9:a5:45:9b:b1:34:05: f4:d0:f2:89:d2:51:0c:e0:2b:07:e0:3c:75:a5:15: 5d:47:d0:4d:fb:f9:8e:e8:3d:2d:a0:1b:ee:de:20: a4:b0:8c:45:05:06:ae:b4:77:ea:84:28:14:18:08: 3d:8a:67:f2:a7:29:56:12:93:60:36:a9:a1:86:99: 99:e8:06:4e:44:47:40:92:02:6e:f9:d9:32:b3:7a: 0e:5d:03:e1:6e:dd:db:0a:c8:85:1f:6a:17:3e:30: 63:7f:73:f4:fd:00:03:25:57:0d:06:70:0e:e8:1a: 29:3a:af:e2:23:b0:65:69:bc:f1:3e:a6:7c:ac:2d: 44:28:12:25:66:5a:71:ee:c0:9e:d8:63:24:e5:3f: 92:6b:dc:f8:ab:dd:ab:7a:68:8d:79:4f:d2:ca:e9: 01:44:68:19:57:e8:40:48:ba:5e:a0:4f:7a:d5:b0: a4:72:05:98:f2:ab:bf:f5:38:a4:91:66:34:be:bf: 13:d1:9d:27:b1:c4:c7:11:f6:81:3d:37:f0:09:cc: 68:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:89:26:61:69:CC:97:12:E3:06:E3:59:1D:59:47:92:22:92:7E:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1af58f65-539a-35e4-8e11-237912be598c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:1b:54:f5:4c:5e:7d:57:59:5e:f1:c0:88:6c:1b:31:ca:e4: b4:02:88:98:11:6d:35:7b:97:dd:f1:e4:31:f9:a2:0b:85:c0: 71:ad:dd:a4:8a:86:88:d2:5c:70:02:c6:42:66:e6:98:a8:de: b7:bd:2a:87:98:30:f7:b2:81:27:26:7d:92:c4:e6:99:f2:dc: 7a:af:10:06:b1:a3:f6:05:75:2a:ad:b9:8c:40:cb:1f:50:d3: 16:86:0c:fa:94:8a:e6:95:d1:3d:6d:05:57:df:19:b8:95:4c: 73:b8:cf:de:a7:ba:39:45:86:ef:27:3f:4d:7a:2a:53:d9:12: 41:ec:28:0d:1f:bf:37:28:86:35:ba:8b:a8:b5:aa:92:dc:35: 25:75:1d:c8:b8:60:a2:89:f0:c3:b1:8e:7f:f0:d3:42:c1:01: f7:b8:25:1c:a1:71:db:b9:d3:a7:88:07:25:56:6e:18:5b:db: d5:bc:b2:71:5d:ac:48:37:e2:58:36:b4:93:92:eb:cc:08:6b: 0e:c5:0f:7f:75:d9:42:4e:d6:d1:f8:b5:fb:2c:0a:92:01:d8: ea:c1:30:8e:fd:8e:f2:ad:ea:a3:e1:25:a8:33:ce:2b:b8:26: 05:28:26:a0:ed:5c:fb:a9:17:99:96:35:43:d9:0e:74:2f:45: ae:92:f7:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkujKqXxPfFd8Lc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YmI0ZjVjNDAtNzQ2Yi00ZjQwLWJhZTMtYWVhNGEyZTM0YzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV5cKhveEVpCLnfI97GH1XhIgib2KIsIf3Mb CQQmi2V3rmlDFBd1Kg3+/32kIfoX/vrYwPmlRZuxNAX00PKJ0lEM4CsH4Dx1pRVd R9BN+/mO6D0toBvu3iCksIxFBQautHfqhCgUGAg9imfypylWEpNgNqmhhpmZ6AZO REdAkgJu+dkys3oOXQPhbt3bCsiFH2oXPjBjf3P0/QADJVcNBnAO6BopOq/iI7Bl abzxPqZ8rC1EKBIlZlpx7sCe2GMk5T+Sa9z4q92remiNeU/SyukBRGgZV+hASLpe oE961bCkcgWY8qu/9TikkWY0vr8T0Z0nscTHEfaBPTfwCcxorQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWJJmFpzJcS4wbjWR1ZR5Iikn5bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWFmNThmNjUtNTM5YS0z NWU0LThlMTEtMjM3OTEyYmU1OThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRKYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsbVPVMXn1XWV7xwIhsGzHK5LQCiJgRbTV7l93x5DH5oguFwHGt3aSK hojSXHACxkJm5pio3re9KoeYMPeygScmfZLE5pny3HqvEAaxo/YFdSqtuYxAyx9Q 0xaGDPqUiuaV0T1tBVffGbiVTHO4z96nujlFhu8nP016KlPZEkHsKA0fvzcohjW6 i6i1qpLcNSV1Hci4YKKJ8MOxjn/w00LBAfe4JRyhcdu506eIByVWbhhb29W8snFd rEg34lg2tJOS68wIaw7FD3912UJO1tH4tfssCpIB2OrBMI79jvKt6qPhJagzziu4 JgUoJqDtXPupF5mWNUPZDnQvRa6S92U= -----END CERTIFICATE-----Generated at Sun Apr 27 05:39:56 2025 by rpki-client