$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2cadc838-e2d5-3829-9597-fac86002cc7b.roa File: 2cadc838-e2d5-3829-9597-fac86002cc7b.roa (raw, json) Hash identifier: 5sjsN62yH6G3aWaaFNn3lN8HgbHbYEk0j2u7T+2zKq0= Subject key identifier: 2C:37:37:E9:5B:C6:E5:14:9F:A9:57:F6:3C:C1:73:3C:B7:E5:78:02 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1CCC5162F07EABCDE242D80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2cadc838-e2d5-3829-9597-fac86002cc7b.roa Signing time: Thu 24 Apr 2025 11:51:33 +0000 ROA not before: Thu 24 Apr 2025 11:51:33 +0000 ROA not after: Wed 23 Jul 2025 11:51:33 +0000 asID: 19905 IP address blocks: 173.16.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:cc:c5:16:2f:07:ea:bc:de:24:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 11:51:33 2025 GMT Not After : Jul 23 11:51:33 2025 GMT Subject: CN=bb9be68f-274d-45ab-9512-2e7670bb6681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4b:b3:2e:14:40:0c:63:58:ef:38:ab:30:ca: ad:32:c1:9b:a3:4f:21:64:c1:0e:c3:2f:ac:d5:8d: 52:37:f2:bd:b4:2e:ce:30:e9:5f:0f:66:12:80:49: e6:8b:63:79:77:1f:37:47:d5:22:eb:df:b8:7a:b1: 05:e5:8a:d3:53:fb:dd:b9:b5:45:3d:75:64:b7:c2: 24:6b:65:26:36:c9:73:13:9e:e6:54:ce:47:10:b8: 52:a4:7d:3e:f7:84:4c:5f:f0:22:ff:1b:87:11:7f: 70:57:83:93:3e:dd:e5:76:dc:d3:2f:9c:0e:e7:11: 42:f7:0b:1c:a1:09:1b:e2:8d:d6:2e:e1:24:7a:cf: 17:60:29:33:33:18:df:ee:af:c4:63:de:d3:cd:59: 6d:de:0e:28:46:71:b6:ac:2c:ba:5f:69:4d:f7:92: 88:4c:a5:2b:b9:88:83:38:4e:40:b4:50:f9:af:54: a1:dd:e7:68:27:40:e5:d0:88:66:54:ae:72:b8:2f: 07:bc:56:1d:92:56:6b:7e:27:45:d1:76:81:23:9b: de:5a:8c:b5:42:f5:2f:17:68:6a:8c:70:8c:2f:3c: 88:b7:54:ce:cf:91:66:2e:70:85:f7:15:07:15:41: bb:54:10:b6:f9:6d:b8:55:b0:b3:03:4a:6a:ac:b0: 21:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:37:37:E9:5B:C6:E5:14:9F:A9:57:F6:3C:C1:73:3C:B7:E5:78:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2cadc838-e2d5-3829-9597-fac86002cc7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:00:2b:e3:0f:f5:a5:b8:ce:e4:f9:75:64:8c:64:3b:38:39: 02:78:a9:76:cb:63:2b:24:0b:1f:b1:ad:17:9c:ae:c7:a6:a0: f3:a8:6b:f7:bc:4c:f3:be:63:4a:0f:e8:b6:ca:c9:20:b5:28: 24:56:29:b0:02:98:14:60:c9:34:28:4a:bb:a7:aa:bf:2f:e0: 5d:b5:10:16:01:c4:26:1e:2e:75:d4:8f:47:a9:9a:ac:64:17: 35:0d:0a:ca:9f:cc:06:dc:1d:6d:8d:43:46:0c:a6:22:ee:62: ff:2a:90:da:1c:c9:32:2b:be:bf:21:66:68:8f:b6:2c:58:f1: 77:40:71:de:80:86:d0:65:50:f5:80:e4:e4:06:a3:96:69:a3: cd:6a:f2:a1:61:3a:8b:ec:1d:34:89:92:6c:c4:1d:49:80:4c: 78:c1:2c:13:78:58:7e:dd:e9:9d:a9:94:54:fd:88:f0:30:27: 43:a4:a4:bf:be:dd:56:cc:43:10:f8:a5:13:96:ab:b7:5c:ae: 5a:5d:0e:bf:c9:44:bd:06:02:3e:db:66:9d:05:71:25:05:3a: 8c:cf:2c:4b:44:33:c9:35:0a:f0:57:ac:25:d3:e2:1e:e8:fe: 16:a0:06:c2:0f:9a:7c:92:3b:f4:d1:ef:71:d7:f5:e4:3f:b7: a0:8e:a2:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhzMUWLwfqvN4kLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDExNTEzM1oXDTI1MDcyMzExNTEzM1owLzEtMCsGA1UEAxMk YmI5YmU2OGYtMjc0ZC00NWFiLTk1MTItMmU3NjcwYmI2NjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUuzLhRADGNY7zirMMqtMsGbo08hZMEOwy+s 1Y1SN/K9tC7OMOlfD2YSgEnmi2N5dx83R9Ui69+4erEF5YrTU/vdubVFPXVkt8Ik a2UmNslzE57mVM5HELhSpH0+94RMX/Ai/xuHEX9wV4OTPt3ldtzTL5wO5xFC9wsc oQkb4o3WLuEkes8XYCkzMxjf7q/EY97TzVlt3g4oRnG2rCy6X2lN95KITKUruYiD OE5AtFD5r1Sh3edoJ0Dl0IhmVK5yuC8HvFYdklZrfidF0XaBI5veWoy1QvUvF2hq jHCMLzyIt1TOz5FmLnCF9xUHFUG7VBC2+W24VbCzA0pqrLAhRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCw3N+lbxuUUn6lX9jzBczy35XgCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmNhZGM4MzgtZTJkNS0z ODI5LTk1OTctZmFjODYwMDJjYzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMAK+MP9aW4zuT5dWSMZDs4OQJ4qXbLYyskCx+xrRecrsemoPOoa/e8 TPO+Y0oP6LbKySC1KCRWKbACmBRgyTQoSrunqr8v4F21EBYBxCYeLnXUj0epmqxk FzUNCsqfzAbcHW2NQ0YMpiLuYv8qkNocyTIrvr8hZmiPtixY8XdAcd6AhtBlUPWA 5OQGo5Zpo81q8qFhOovsHTSJkmzEHUmATHjBLBN4WH7d6Z2plFT9iPAwJ0OkpL++ 3VbMQxD4pROWq7dcrlpdDr/JRL0GAj7bZp0FcSUFOozPLEtEM8k1CvBXrCXT4h7o /hagBsIPmnySO/TR73HX9eQ/t6COono= -----END CERTIFICATE-----Generated at Sat Apr 26 12:56:38 2025 by rpki-client