$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24a1ae96-cdf5-3825-a65e-684da2950667.roa File: 24a1ae96-cdf5-3825-a65e-684da2950667.roa (raw, json) Hash identifier: jNZM9gZRMeZJEseM2Fef4r2sBIkezdvAx5bPy2lIWE4= Subject key identifier: 5E:15:91:7A:9D:85:FE:78:22:07:5D:E2:31:06:4E:12:67:03:8A:94 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F432858499BF4DF23F6AB0056AF55CC00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24a1ae96-cdf5-3825-a65e-684da2950667.roa Signing time: Tue 22 Apr 2025 09:37:30 +0000 ROA not before: Tue 22 Apr 2025 09:37:30 +0000 ROA not after: Mon 21 Jul 2025 09:37:30 +0000 asID: 19905 IP address blocks: 173.17.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9b:f4:df:23:f6:ab:00:56:af:55:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 22 09:37:30 2025 GMT Not After : Jul 21 09:37:30 2025 GMT Subject: CN=3a51bb1a-8e0b-4e3f-af03-17803268ef7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:db:65:f0:05:0c:da:31:81:dc:a3:36:b0:c6: ed:87:dd:37:09:8c:69:88:33:68:e3:b7:00:cd:20: 20:23:bc:0d:23:4e:f6:2c:48:11:74:2f:d3:6c:fe: b7:2e:23:47:ab:0f:be:74:df:19:2b:0c:c8:05:eb: 67:91:e4:f5:7c:74:52:bf:0c:43:7a:c1:59:5d:a0: 50:37:05:41:81:27:d8:96:0c:ca:d1:f7:f9:b8:3f: 62:43:d8:ed:7e:bd:7c:3d:fe:41:17:39:84:3f:51: 76:b6:f0:8b:a2:88:cb:f2:70:08:ba:f6:d8:e9:9b: 7f:46:d3:30:1f:63:5c:91:25:52:8b:34:12:a1:b4: 3e:f4:7d:fa:9d:cf:47:c3:59:e4:eb:ed:b8:d7:4e: 58:25:85:d8:cc:9d:e3:c8:52:1b:4e:c2:66:5f:ba: 42:39:24:6d:1f:20:8e:e1:ed:19:3f:59:89:7a:b7: 6e:57:1c:3b:7f:64:70:2d:75:38:15:08:31:ae:02: 78:2e:7c:ad:e0:6f:90:26:9f:fd:83:1e:b7:ec:a7: b7:8b:86:cd:b5:b8:b6:06:fa:6b:06:d7:13:32:8c: 72:0f:c1:08:da:71:45:a2:44:4c:21:dc:e0:24:93: e3:a0:b4:b3:b7:1d:b2:df:fe:bf:58:8c:96:81:95: 20:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:15:91:7A:9D:85:FE:78:22:07:5D:E2:31:06:4E:12:67:03:8A:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24a1ae96-cdf5-3825-a65e-684da2950667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:d5:a6:45:c8:1e:24:8e:22:bc:fe:be:91:24:f4:13:cf:ad: 93:88:00:2d:c2:4b:91:84:b1:37:5a:c6:30:19:f2:28:3b:2b: c2:fb:23:9b:1c:f6:13:10:e5:eb:b4:28:ca:87:4d:d3:0a:a5: c5:4d:00:0d:8b:29:2a:77:08:66:a9:ba:60:37:92:79:f4:f7: c1:b8:f5:24:c7:1f:40:87:48:82:dd:6d:95:7f:e8:23:62:1e: 0f:88:29:25:bb:d9:f5:e3:78:34:02:de:11:08:67:6b:aa:1d: 45:b5:74:eb:9e:b0:86:0d:3e:dd:c1:ec:13:1b:46:da:61:ef: 30:71:34:d3:10:3a:ad:16:41:43:71:98:bd:3a:89:19:64:b4: 69:6c:0f:05:9c:6a:c2:91:10:0a:71:58:16:fe:72:0b:08:d2: 00:49:08:c4:66:c7:c2:6d:af:6f:88:02:6d:d9:61:7a:bb:79: ba:cb:e5:65:e2:09:4e:d5:19:59:9f:7b:9a:74:e2:a4:fb:77: da:34:9c:e7:9a:66:a1:1b:8d:3a:21:4d:99:04:ef:59:bf:68: fa:ae:08:ba:59:33:45:49:05:03:8a:36:6b:4c:50:1c:80:ef: ac:da:cf:f0:3d:7a:04:74:98:5d:32:33:37:dc:0e:3f:91:a8: 74:7c:2c:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmb9N8j9qsAVq9VzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMjA5MzczMFoXDTI1MDcyMTA5MzczMFowLzEtMCsGA1UEAxMk M2E1MWJiMWEtOGUwYi00ZTNmLWFmMDMtMTc4MDMyNjhlZjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxttl8AUM2jGB3KM2sMbth903CYxpiDNo47cA zSAgI7wNI072LEgRdC/TbP63LiNHqw++dN8ZKwzIBetnkeT1fHRSvwxDesFZXaBQ NwVBgSfYlgzK0ff5uD9iQ9jtfr18Pf5BFzmEP1F2tvCLoojL8nAIuvbY6Zt/RtMw H2NckSVSizQSobQ+9H36nc9Hw1nk6+24105YJYXYzJ3jyFIbTsJmX7pCOSRtHyCO 4e0ZP1mJerduVxw7f2RwLXU4FQgxrgJ4Lnyt4G+QJp/9gx637Ke3i4bNtbi2Bvpr BtcTMoxyD8EI2nFFokRMIdzgJJPjoLSztx2y3/6/WIyWgZUgmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4VkXqdhf54Igdd4jEGThJnA4qUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjRhMWFlOTYtY2RmNS0z ODI1LWE2NWUtNjg0ZGEyOTUwNjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfVpkXIHiSOIrz+vpEk9BPPrZOIAC3CS5GEsTdaxjAZ8ig7K8L7I5sc 9hMQ5eu0KMqHTdMKpcVNAA2LKSp3CGapumA3knn098G49STHH0CHSILdbZV/6CNi Hg+IKSW72fXjeDQC3hEIZ2uqHUW1dOuesIYNPt3B7BMbRtph7zBxNNMQOq0WQUNx mL06iRlktGlsDwWcasKREApxWBb+cgsI0gBJCMRmx8Jtr2+IAm3ZYXq7ebrL5WXi CU7VGVmfe5p04qT7d9o0nOeaZqEbjTohTZkE71m/aPquCLpZM0VJBQOKNmtMUByA 76zaz/A9egR0mF0yMzfcDj+RqHR8LIY= -----END CERTIFICATE-----Generated at Sat Apr 26 19:10:43 2025 by rpki-client