$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1f3b9091-a135-323b-a009-d0e0da78c8c6.roa File: 1f3b9091-a135-323b-a009-d0e0da78c8c6.roa (raw, json) Hash identifier: 5K69SVtZtZXBMwrDAi8Ktf0bR7k5+rpSGkBGXRQmpFU= Subject key identifier: 6D:17:CB:32:30:92:96:5A:3E:D6:B5:32:83:45:58:25:54:3B:02:75 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA16B01F945DB24FD27B00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1f3b9091-a135-323b-a009-d0e0da78c8c6.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.18.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:16:b0:1f:94:5d:b2:4f:d2:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=a345ef20-b973-4077-8d6b-f97ba1d388f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e1:a3:f1:94:57:bb:75:ab:0c:a6:71:33:23: 18:98:f3:a1:6c:0a:61:f8:48:12:77:11:c8:ff:db: 76:d3:d0:67:3c:bb:4c:49:d4:0f:c9:07:05:7a:1c: e5:86:2c:36:d5:4a:2c:ca:36:01:c7:2f:5b:a9:a6: bd:c4:2d:ce:5d:b2:ec:69:0d:13:2d:b7:9c:e6:05: b7:53:ee:b3:30:b2:f3:6c:d3:16:b3:3e:eb:67:4f: a5:9f:d0:9a:c1:d4:35:83:48:c4:ef:d4:be:83:01: 2e:b1:60:39:25:0b:a7:b0:70:b3:e8:d0:ba:a7:16: f6:ef:81:02:8e:0e:a7:90:29:bd:92:00:02:21:8c: ca:de:b1:24:e2:8f:5a:97:db:c4:e2:f6:4b:c8:cd: 6b:a7:73:94:0b:83:a6:03:2a:3b:9d:ee:b4:9b:06: 81:eb:e1:b6:fa:ba:f5:1b:6c:a4:7a:a1:7d:a1:5b: f2:d7:fa:02:28:c5:f1:d5:36:59:9f:c2:f6:b2:3e: 9b:7e:94:20:0f:15:ec:4e:97:62:45:12:91:44:84: 63:bb:cc:84:5f:de:26:07:dc:b0:53:df:d7:e5:4e: 2e:87:9b:49:56:de:14:27:f0:fa:47:f8:ca:e3:50: 5d:66:a3:ba:e2:ca:44:d1:ef:94:46:3e:50:7a:95: d9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:17:CB:32:30:92:96:5A:3E:D6:B5:32:83:45:58:25:54:3B:02:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1f3b9091-a135-323b-a009-d0e0da78c8c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:89:4e:3a:00:61:92:cd:ff:b8:17:29:b9:63:1d:55:0a:cf: d6:7d:92:09:6c:57:6f:f8:1d:41:c6:97:9e:bb:da:0a:f8:0d: 81:d9:0a:57:63:ed:fd:f5:98:cc:8b:ed:c5:72:af:08:a9:b5: c4:f8:04:aa:80:cb:c3:fe:e8:f3:8b:9a:79:07:b8:08:66:5f: 8f:a3:74:fb:cb:e0:24:1a:0d:7e:09:ab:9d:d8:52:c6:aa:0a: f8:cb:e8:e4:f6:37:b5:ac:37:78:1c:88:34:8f:6b:cd:2f:fe: 5f:2f:58:3f:c2:13:9b:55:a0:cc:c1:35:3c:3d:ae:70:ca:5a: 86:63:7b:45:73:5e:e3:81:7a:95:69:c0:d8:c4:d8:5f:85:79: ec:d1:f3:36:dd:bc:c3:e9:52:34:7e:6b:de:2a:ef:a5:25:ab: 56:bc:69:3c:5e:28:69:6a:1e:19:30:43:ef:21:5e:c7:f2:4f: 41:d8:5c:32:6f:59:04:56:64:a0:42:9a:5c:f4:67:43:2c:fa: 7e:7e:e0:e7:9d:e1:d6:46:86:97:2c:bf:e2:15:ad:de:51:74: a7:7d:a4:22:16:0c:19:a5:e7:3e:21:b9:0e:e5:ea:e7:50:b9: 8b:e4:96:5c:69:21:e4:56:72:21:33:be:02:ed:96:32:93:22: f8:0e:64:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuhawH5Rdsk/SewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YTM0NWVmMjAtYjk3My00MDc3LThkNmItZjk3YmExZDM4OGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouGj8ZRXu3WrDKZxMyMYmPOhbAph+EgSdxHI /9t209BnPLtMSdQPyQcFehzlhiw21UosyjYBxy9bqaa9xC3OXbLsaQ0TLbec5gW3 U+6zMLLzbNMWsz7rZ0+ln9CawdQ1g0jE79S+gwEusWA5JQunsHCz6NC6pxb274EC jg6nkCm9kgACIYzK3rEk4o9al9vE4vZLyM1rp3OUC4OmAyo7ne60mwaB6+G2+rr1 G2ykeqF9oVvy1/oCKMXx1TZZn8L2sj6bfpQgDxXsTpdiRRKRRIRju8yEX94mB9yw U9/X5U4uh5tJVt4UJ/D6R/jK41BdZqO64spE0e+URj5QepXZ3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0XyzIwkpZaPta1MoNFWCVUOwJ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWYzYjkwOTEtYTEzNS0z MjNiLWEwMDktZDBlMGRhNzhjOGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRJdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACJTjoAYZLN/7gXKbljHVUKz9Z9kglsV2/4HUHGl5672gr4DYHZCldj 7f31mMyL7cVyrwiptcT4BKqAy8P+6POLmnkHuAhmX4+jdPvL4CQaDX4Jq53YUsaq CvjL6OT2N7WsN3gciDSPa80v/l8vWD/CE5tVoMzBNTw9rnDKWoZje0VzXuOBepVp wNjE2F+FeezR8zbdvMPpUjR+a94q76Ulq1a8aTxeKGlqHhkwQ+8hXsfyT0HYXDJv WQRWZKBCmlz0Z0Ms+n5+4Oed4dZGhpcsv+IVrd5RdKd9pCIWDBml5z4huQ7l6udQ uYvkllxpIeRWciEzvgLtljKTIvgOZKs= -----END CERTIFICATE-----Generated at Sat Apr 26 20:53:48 2025 by rpki-client