$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2752ef36-549d-3c59-b2da-60b1c8b1f2e0.roa File: 2752ef36-549d-3c59-b2da-60b1c8b1f2e0.roa (raw, json) Hash identifier: kb+ZAAlIN1XxMkqSJRgM872Awej1aVrjFpLGEJsifoo= Subject key identifier: 15:1D:1B:B5:69:EF:44:8E:20:F8:AD:9A:FB:9E:08:6E:17:46:62:4C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1CD9AF9196178EE0DD86C40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2752ef36-549d-3c59-b2da-60b1c8b1f2e0.roa Signing time: Thu 24 Apr 2025 11:53:14 +0000 ROA not before: Thu 24 Apr 2025 11:53:14 +0000 ROA not after: Wed 23 Jul 2025 11:53:14 +0000 asID: 19905 IP address blocks: 173.19.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:cd:9a:f9:19:61:78:ee:0d:d8:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 11:53:14 2025 GMT Not After : Jul 23 11:53:14 2025 GMT Subject: CN=82e172cb-fcd9-4c2d-8241-0626b8c6027b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:75:ec:08:ea:c0:c0:a7:23:1b:bf:5f:de:a7: 3d:e0:84:41:cc:5e:e1:2e:48:67:c5:ac:8c:25:03: c1:a5:c9:82:3f:ed:b6:e0:ab:5a:24:20:62:f9:e5: 9d:a2:18:6b:dd:33:a1:d2:11:52:09:a5:28:8b:56: 58:0c:83:b2:c6:f2:44:25:81:7e:d3:38:b9:5d:a8: c7:58:89:30:2e:04:85:77:69:37:bc:3e:36:5e:11: 3d:bf:ba:e6:bf:24:c1:d8:d7:e3:cd:8d:f2:4a:78: 0b:49:35:0d:df:76:a8:16:9a:a0:ec:cf:b8:9f:cd: 6b:d3:fe:c6:47:ff:11:a1:ce:8b:81:f0:ff:dc:16: c2:a2:9b:25:f9:79:b1:43:36:f7:db:e1:e1:f2:b2: 71:07:d0:4b:0f:54:8e:3c:4e:de:76:75:bf:87:30: 05:42:19:d0:fe:c7:a7:3a:0d:9f:ac:e1:1b:d1:c5: 35:d2:ca:3e:75:2a:69:0c:6b:36:8d:a5:f7:40:2e: da:c2:86:de:3d:ce:c5:f8:d4:19:0f:b4:b7:a6:3c: 5d:36:a4:a5:cc:d2:83:71:5f:c2:0d:08:52:1a:e1: 05:98:37:3b:5d:fe:f1:fe:6a:01:5a:98:b7:b5:1a: 45:3f:43:5d:63:60:26:7b:d0:c7:f6:4b:d0:e3:3d: 4a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1D:1B:B5:69:EF:44:8E:20:F8:AD:9A:FB:9E:08:6E:17:46:62:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2752ef36-549d-3c59-b2da-60b1c8b1f2e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:ab:39:90:0b:83:e6:84:9f:79:03:80:4b:77:77:ab:e5:cb: 4c:35:2b:f3:01:77:48:e0:b9:0f:4a:9f:54:4c:39:7c:9e:d6: c8:5a:bf:5c:b4:f1:b7:02:cc:35:22:87:28:2f:6b:dc:1d:23: 8c:47:8a:b0:ad:dd:fe:16:fe:87:a5:1e:a7:df:4b:22:7d:c4: 52:3f:2d:c0:32:6b:c7:8d:58:e4:71:81:cd:fe:47:0a:d6:b7: b2:d7:4c:0b:7d:fc:fa:7e:68:0f:c8:63:9d:73:ec:05:b2:78: 7d:c4:3e:88:12:b9:b1:da:82:85:f8:6f:6b:77:9b:7c:c7:4d: 55:a0:b8:b3:c2:c7:23:4a:27:8f:fb:cd:06:51:22:4c:96:6d: 5a:e2:ca:2d:1e:a9:98:c5:cf:1d:3f:62:a5:e1:5f:35:1f:40: 85:94:1d:7e:63:59:db:47:8d:03:84:55:43:cd:b3:6a:53:d9: 76:08:9c:18:c1:85:d1:bc:d8:22:2c:3b:3f:ce:f2:21:46:ea: bd:50:0b:43:10:c1:0d:af:db:73:b0:da:d4:5c:23:4f:e4:2d: 45:0f:33:73:d0:03:26:e4:ac:b9:29:e7:5b:0a:8a:97:ac:eb: c6:d3:bd:a3:05:cf:bf:38:aa:06:28:dc:af:72:d3:db:00:dc: 39:98:33:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhzZr5GWF47g3YbEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDExNTMxNFoXDTI1MDcyMzExNTMxNFowLzEtMCsGA1UEAxMk ODJlMTcyY2ItZmNkOS00YzJkLTgyNDEtMDYyNmI4YzYwMjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXXsCOrAwKcjG79f3qc94IRBzF7hLkhnxayM JQPBpcmCP+224KtaJCBi+eWdohhr3TOh0hFSCaUoi1ZYDIOyxvJEJYF+0zi5XajH WIkwLgSFd2k3vD42XhE9v7rmvyTB2NfjzY3ySngLSTUN33aoFpqg7M+4n81r0/7G R/8Roc6LgfD/3BbCopsl+XmxQzb32+Hh8rJxB9BLD1SOPE7ednW/hzAFQhnQ/sen Og2frOEb0cU10so+dSppDGs2jaX3QC7awobePc7F+NQZD7S3pjxdNqSlzNKDcV/C DQhSGuEFmDc7Xf7x/moBWpi3tRpFP0NdY2Ame9DH9kvQ4z1KzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUdG7Vp70SOIPitmvueCG4XRmJMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjc1MmVmMzYtNTQ5ZC0z YzU5LWIyZGEtNjBiMWM4YjFmMmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRNZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKrOZALg+aEn3kDgEt3d6vly0w1K/MBd0jguQ9Kn1RMOXye1shav1y0 8bcCzDUihygva9wdI4xHirCt3f4W/oelHqffSyJ9xFI/LcAya8eNWORxgc3+RwrW t7LXTAt9/Pp+aA/IY51z7AWyeH3EPogSubHagoX4b2t3m3zHTVWguLPCxyNKJ4/7 zQZRIkyWbVriyi0eqZjFzx0/YqXhXzUfQIWUHX5jWdtHjQOEVUPNs2pT2XYInBjB hdG82CIsOz/O8iFG6r1QC0MQwQ2v23Ow2tRcI0/kLUUPM3PQAybkrLkp51sKipes 68bTvaMFz784qgYo3K9y09sA3DmYM4o= -----END CERTIFICATE-----Generated at Sat Apr 26 12:20:15 2025 by rpki-client