$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f4be265-254f-3134-9fd7-db5733c3efcc.roa File: 3f4be265-254f-3134-9fd7-db5733c3efcc.roa (raw, json) Hash identifier: F2oXJNrh0iVcYzd+yn0LDo4AuY9fXo4q29hDLRED3As= Subject key identifier: 25:BB:DF:73:ED:23:2C:EE:42:7D:98:5F:E7:97:2C:D3:E5:58:9B:C5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F432858491941761981E9B6E0130EB020 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f4be265-254f-3134-9fd7-db5733c3efcc.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 30036 IP address blocks: 170.52.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:76:19:81:e9:b6:e0:13:0e:b0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=6e3fecbb-bea5-4a7c-9b8e-2041ed7aef5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:46:46:0a:d8:54:bd:08:63:d3:27:3d:08:56: 24:cf:11:ef:01:6d:88:a3:5e:fb:ea:9b:dd:9e:3c: a7:a8:5a:cc:4d:96:f6:6b:16:01:21:50:ae:c0:b0: e9:b4:c9:6a:d8:9d:70:24:f8:2a:90:07:b9:f4:a6: 43:0a:90:1a:b9:92:da:5c:4d:e4:76:18:f9:a0:67: ef:29:8f:b9:03:f8:eb:a3:00:0b:7d:55:ce:fe:64: e7:6d:76:58:3c:c8:3f:3d:6c:89:84:9e:76:32:9a: 63:35:5d:28:ab:df:ad:6f:fb:79:8f:4b:86:d1:09: 55:f1:9a:44:ea:57:84:dc:79:dc:b6:5b:30:9a:15: 06:67:2d:12:ec:a9:ee:b2:c2:38:fb:bb:bb:c5:72: a4:42:bc:f1:4c:6d:d1:ce:1a:56:17:cd:60:4f:5f: 5d:ca:1d:6d:85:66:77:4d:b6:fb:fc:e6:0a:75:ef: ed:4f:8e:22:82:a0:6d:c5:15:cd:7f:53:55:c5:e5: 2a:77:a6:22:ca:3d:9d:69:72:8c:43:62:bf:f2:31: c2:7c:2a:da:37:fb:eb:d9:15:64:53:f5:90:ee:dc: 46:65:59:c7:72:13:07:c3:44:19:bc:15:50:40:22: 7e:a7:75:5e:6e:f5:b5:8c:ca:d9:f2:49:ec:76:af: 7a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:BB:DF:73:ED:23:2C:EE:42:7D:98:5F:E7:97:2C:D3:E5:58:9B:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f4be265-254f-3134-9fd7-db5733c3efcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 170.52.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:e4:61:fe:8a:9c:78:9a:75:09:22:4d:df:d0:cf:4d:be:3d: ac:50:97:0b:35:46:33:19:4f:76:db:2c:88:be:3b:27:ad:bc: c7:2f:2f:49:d8:da:1c:79:03:1b:85:af:d7:e9:c9:8e:20:d7: ce:3e:f5:43:e9:fd:64:b7:35:99:e4:0e:fb:5d:63:6c:59:c9: 93:e4:73:21:0b:a2:b7:d0:29:af:b0:c5:ca:d8:de:3b:33:7a: f7:aa:90:02:62:38:fa:d8:55:bb:1a:45:b7:af:5f:b2:74:a8: 4a:d9:be:c0:fb:c0:bb:94:dd:41:b1:59:7f:2d:93:0b:63:64: a4:58:f0:05:bf:62:ec:af:1a:12:3d:a9:b2:62:ad:01:35:db: 95:71:61:c2:fa:be:39:35:27:19:79:90:82:f9:5e:f7:22:80: 13:87:7e:47:6a:a8:d2:8b:cc:82:56:d5:e7:70:c0:44:9d:6e: da:c6:c9:60:62:ba:9e:a5:87:1c:a7:43:26:fe:cb:25:e7:5c: 1c:4c:d1:6f:b7:6a:12:99:51:2f:7b:a7:8e:b2:1b:e9:82:01: ca:61:fa:df:17:2a:4c:b0:8a:45:c7:e2:79:1f:ec:f5:37:d9: 77:09:f2:81:f4:b4:a2:c9:a4:40:51:cd:91:29:b0:20:89:d7: 14:37:15:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZQXYZgem24BMOsCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk NmUzZmVjYmItYmVhNS00YTdjLTliOGUtMjA0MWVkN2FlZjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kZGCthUvQhj0yc9CFYkzxHvAW2Io1776pvd njynqFrMTZb2axYBIVCuwLDptMlq2J1wJPgqkAe59KZDCpAauZLaXE3kdhj5oGfv KY+5A/jrowALfVXO/mTnbXZYPMg/PWyJhJ52MppjNV0oq9+tb/t5j0uG0QlV8ZpE 6leE3HnctlswmhUGZy0S7KnussI4+7u7xXKkQrzxTG3RzhpWF81gT19dyh1thWZ3 Tbb7/OYKde/tT44igqBtxRXNf1NVxeUqd6Yiyj2daXKMQ2K/8jHCfCraN/vr2RVk U/WQ7txGZVnHchMHw0QZvBVQQCJ+p3VebvW1jMrZ8knsdq96GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCW733PtIyzuQn2YX+eXLNPlWJvFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2Y0YmUyNjUtMjU0Zi0z MTM0LTlmZDctZGI1NzMzYzNlZmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqjQLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHkYf6KnHiadQkiTd/Qz02+PaxQlws1RjMZT3bbLIi+OyetvMcvL0nY 2hx5AxuFr9fpyY4g184+9UPp/WS3NZnkDvtdY2xZyZPkcyELorfQKa+wxcrY3jsz eveqkAJiOPrYVbsaRbevX7J0qErZvsD7wLuU3UGxWX8tkwtjZKRY8AW/YuyvGhI9 qbJirQE125VxYcL6vjk1Jxl5kIL5XvcigBOHfkdqqNKLzIJW1edwwESdbtrGyWBi up6lhxynQyb+yyXnXBxM0W+3ahKZUS97p46yG+mCAcph+t8XKkywikXH4nkf7PU3 2XcJ8oH0tKLJpEBRzZEpsCCJ1xQ3Fc8= -----END CERTIFICATE-----Generated at Sun Apr 27 09:15:49 2025 by rpki-client