$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f5f18c9-7717-34ec-bb18-69b15bf1223d.roa File: 2f5f18c9-7717-34ec-bb18-69b15bf1223d.roa (raw, json) Hash identifier: Gmdu4B4nsnPHAduxa7PLrYKowIIdz13JsTMLE+vArYw= Subject key identifier: 41:2E:D1:77:13:7B:7F:F4:1D:F7:D9:87:64:AB:9C:A2:52:1D:70:DF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF57638159F75910DAC9C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f5f18c9-7717-34ec-bb18-69b15bf1223d.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.19.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:57:63:81:59:f7:59:10:da:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=7a5aa3c0-bb62-459f-8aad-d6d3e0e48af0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8b:ff:bd:cc:58:89:91:db:91:a3:af:93:15: 46:51:b5:81:89:4d:f4:3c:1a:41:37:8c:3c:5e:7b: 8b:f8:cd:49:3d:97:f8:14:55:22:cd:a7:72:e2:39: 6b:cd:eb:99:c0:b9:bd:a5:08:da:63:a0:f4:8b:a4: 50:f8:69:88:9c:70:05:32:90:14:2e:60:53:1a:88: 54:c0:3e:ea:64:32:61:dc:96:85:c2:eb:a7:66:fd: 7e:15:86:80:bd:7f:86:b5:2f:e7:9b:c1:8c:a5:9f: be:e7:1b:54:8b:0a:e0:47:18:ee:87:2e:6d:00:d1: ab:aa:d3:44:03:26:b8:76:61:f6:22:61:fa:09:0c: 61:92:e2:91:5e:09:24:96:c1:f0:2b:9f:04:b3:78: 9b:28:75:37:f5:96:16:2c:06:3e:43:53:c2:15:88: 09:80:3a:76:97:6e:bd:43:e5:bb:ed:9d:1e:9b:36: 60:ab:6c:70:ad:51:e5:86:3a:3e:46:70:12:a8:4f: 2f:04:6e:41:dd:ce:c3:5f:da:92:ce:1c:3f:3d:ac: 76:61:85:e4:da:86:00:74:71:d1:86:7e:1d:53:eb: 64:0b:f5:41:9f:90:69:1f:0a:53:c0:f2:de:21:2e: d2:61:7b:47:aa:72:b0:f2:02:f8:e1:b5:95:fb:d8: 0e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:2E:D1:77:13:7B:7F:F4:1D:F7:D9:87:64:AB:9C:A2:52:1D:70:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2f5f18c9-7717-34ec-bb18-69b15bf1223d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:1f:30:0f:73:79:c6:58:f7:fb:10:d6:06:59:1e:be:db:30: bd:e4:db:27:fb:c1:06:31:9a:36:bc:a1:1f:bf:92:00:91:a3: 1d:d8:52:29:10:83:9b:bb:c7:9f:47:e1:d7:17:67:e1:e4:35: a9:43:8b:f0:44:1f:2b:05:4e:6b:09:99:80:ff:0b:b2:0e:5f: eb:d6:73:d9:4c:61:ab:5a:f0:d3:8c:a2:be:0b:4b:53:ab:4f: a4:c5:49:83:83:d3:dc:21:a7:5e:46:02:76:a5:8d:f8:64:f4: ae:fd:d8:04:c8:cd:3b:2f:85:75:2d:00:32:24:5a:95:e3:59: 97:37:71:82:0c:d0:66:77:7e:32:1c:16:4a:b0:a2:b6:f5:4d: c5:b1:61:45:7a:21:8e:c3:37:09:1f:a9:50:54:98:f2:c8:64: b5:c0:db:62:83:01:47:89:19:73:91:d3:6c:e2:ee:bc:c6:de: 8d:cc:b5:a4:8b:f5:9a:ba:6f:3c:23:74:0d:a6:2d:de:1e:b2: 2a:81:1a:e9:b4:9d:57:c5:0a:c7:aa:51:b2:de:c4:a4:15:7c: 4a:ca:6c:12:1f:2d:1d:16:65:55:a7:70:65:6d:5f:97:3f:7f: c9:8f:2c:f5:3b:ff:af:d6:8e:c9:9b:83:63:44:a2:d1:62:33: 7d:1c:0b:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh71djgVn3WRDaycAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk N2E1YWEzYzAtYmI2Mi00NTlmLThhYWQtZDZkM2UwZTQ4YWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIv/vcxYiZHbkaOvkxVGUbWBiU30PBpBN4w8 XnuL+M1JPZf4FFUizady4jlrzeuZwLm9pQjaY6D0i6RQ+GmInHAFMpAULmBTGohU wD7qZDJh3JaFwuunZv1+FYaAvX+GtS/nm8GMpZ++5xtUiwrgRxjuhy5tANGrqtNE Aya4dmH2ImH6CQxhkuKRXgkklsHwK58Es3ibKHU39ZYWLAY+Q1PCFYgJgDp2l269 Q+W77Z0emzZgq2xwrVHlhjo+RnASqE8vBG5B3c7DX9qSzhw/Pax2YYXk2oYAdHHR hn4dU+tkC/VBn5BpHwpTwPLeIS7SYXtHqnKw8gL44bWV+9gO+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEu0XcTe3/0HffZh2SrnKJSHXDfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmY1ZjE4YzktNzcxNy0z NGVjLWJiMTgtNjliMTViZjEyMjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRN+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIfMA9zecZY9/sQ1gZZHr7bML3k2yf7wQYxmja8oR+/kgCRox3YUikQ g5u7x59H4dcXZ+HkNalDi/BEHysFTmsJmYD/C7IOX+vWc9lMYata8NOMor4LS1Or T6TFSYOD09whp15GAnaljfhk9K792ATIzTsvhXUtADIkWpXjWZc3cYIM0GZ3fjIc Fkqworb1TcWxYUV6IY7DNwkfqVBUmPLIZLXA22KDAUeJGXOR02zi7rzG3o3MtaSL 9Zq6bzwjdA2mLd4esiqBGum0nVfFCseqUbLexKQVfErKbBIfLR0WZVWncGVtX5c/ f8mPLPU7/6/Wjsmbg2NEotFiM30cC90= -----END CERTIFICATE-----Generated at Sat Apr 26 23:55:17 2025 by rpki-client