$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f92c434-efd9-3a70-96d3-95f8d0c53235.roa File: 3f92c434-efd9-3a70-96d3-95f8d0c53235.roa (raw, json) Hash identifier: bIzKLdZ09haEYrDFMzF+ui4OEZH8gdFR7CYcGLJ0Gu0= Subject key identifier: B5:B7:55:90:45:76:46:A8:05:06:E5:D0:3E:17:49:91:F2:1D:C7:56 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF56772591F25E9C7453E0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f92c434-efd9-3a70-96d3-95f8d0c53235.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.17.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:56:77:25:91:f2:5e:9c:74:53:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=936fe2aa-53d5-47af-a485-477ec0616660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:aa:f7:d8:88:5f:c8:50:2e:d2:c5:b1:8b:76: a9:80:fb:2e:7e:73:dc:40:b9:9c:71:16:86:49:df: e6:07:f0:2f:99:be:e4:4c:cc:15:55:57:b3:3f:d8: 3a:c4:33:13:fe:9b:29:9d:de:71:a8:7d:2c:09:34: 73:ba:fb:dc:d0:5c:3c:e2:bd:46:a7:70:6b:8b:00: 7f:30:1f:7c:01:e0:9b:64:0a:db:1d:98:39:cb:ce: 5d:c3:fd:91:53:0f:1b:01:6c:ac:fd:c0:67:75:5d: 11:d8:92:90:36:4c:51:24:ca:ca:94:3e:70:5c:78: a5:5b:4b:21:eb:a7:1c:d2:5f:96:f7:90:e5:21:fa: 4f:9c:3f:86:40:59:5b:79:b3:12:4e:94:ac:fe:da: da:af:81:16:28:08:d8:fe:25:ae:8c:88:23:0d:7b: 82:70:a8:18:0a:46:28:cd:51:e6:25:f1:e1:2e:44: cb:90:8d:96:0c:ee:bf:e4:6d:99:15:81:76:a5:e4: 00:f3:cd:23:6e:5e:49:42:58:42:2e:78:d2:dc:88: 1d:5e:9e:bb:98:81:63:bb:f3:a7:cf:8b:ed:8d:79: d8:6c:92:ad:e5:29:dd:ff:f4:61:79:07:7e:3d:75: 58:a4:c1:92:85:87:ec:44:bb:00:c6:34:e0:2f:c4: ae:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B7:55:90:45:76:46:A8:05:06:E5:D0:3E:17:49:91:F2:1D:C7:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f92c434-efd9-3a70-96d3-95f8d0c53235.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:e9:81:ca:6b:05:86:d3:ca:69:4a:f2:e8:14:bb:9c:95:d0: a3:e7:d3:8a:83:e3:ac:18:df:5b:9b:51:4c:90:88:72:f6:51: 67:8e:9c:96:1f:e8:f8:bb:7b:33:8a:a1:a3:a4:78:03:59:00: d9:8c:29:cc:c8:f3:52:0b:6e:28:a9:85:c2:6d:21:42:f9:0e: 3e:93:8a:49:02:01:dd:24:c0:3d:0e:2f:b3:03:71:b6:58:1a: f3:5c:a5:ca:1a:29:48:de:45:f9:95:27:02:8b:b8:0e:bb:f5: da:a0:b6:9f:0f:fa:be:d8:b6:b8:b9:6d:16:ab:2b:f1:78:2c: 1b:7d:9e:4f:09:ba:38:ab:f8:1b:4c:bc:42:65:17:9d:01:a3: 2f:bb:f3:45:a7:50:9d:7e:67:e7:b0:b7:f5:3c:87:07:5d:0d: 2d:12:21:3a:a1:ac:93:3c:74:6d:1b:71:4a:59:9b:96:39:6c: 76:e7:40:70:46:e7:df:5a:6c:c7:e8:77:43:8d:ec:de:b3:92: ac:a8:bb:2c:fc:c3:3f:92:be:16:d8:95:f7:ce:7c:48:97:50: f3:47:40:ee:5a:05:fc:da:6e:ab:da:69:3c:97:63:00:b5:45: e2:51:d7:e5:fb:3b:6d:52:8d:39:72:e4:c7:73:ed:dc:61:0c: 53:6e:99:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh71Z3JZHyXpx0U+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk OTM2ZmUyYWEtNTNkNS00N2FmLWE0ODUtNDc3ZWMwNjE2NjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlar32IhfyFAu0sWxi3apgPsufnPcQLmccRaG Sd/mB/Avmb7kTMwVVVezP9g6xDMT/pspnd5xqH0sCTRzuvvc0Fw84r1Gp3BriwB/ MB98AeCbZArbHZg5y85dw/2RUw8bAWys/cBndV0R2JKQNkxRJMrKlD5wXHilW0sh 66cc0l+W95DlIfpPnD+GQFlbebMSTpSs/trar4EWKAjY/iWujIgjDXuCcKgYCkYo zVHmJfHhLkTLkI2WDO6/5G2ZFYF2peQA880jbl5JQlhCLnjS3IgdXp67mIFju/On z4vtjXnYbJKt5Snd//RheQd+PXVYpMGShYfsRLsAxjTgL8SuKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLW3VZBFdkaoBQbl0D4XSZHyHcdWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2Y5MmM0MzQtZWZkOS0z YTcwLTk2ZDMtOTVmOGQwYzUzMjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRFsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/pgcprBYbTymlK8ugUu5yV0KPn04qD46wY31ubUUyQiHL2UWeOnJYf 6Pi7ezOKoaOkeANZANmMKczI81ILbiiphcJtIUL5Dj6TikkCAd0kwD0OL7MDcbZY GvNcpcoaKUjeRfmVJwKLuA679dqgtp8P+r7Ytri5bRarK/F4LBt9nk8Jujir+BtM vEJlF50Boy+780WnUJ1+Z+ewt/U8hwddDS0SITqhrJM8dG0bcUpZm5Y5bHbnQHBG 599abMfod0ON7N6zkqyouyz8wz+SvhbYlffOfEiXUPNHQO5aBfzabqvaaTyXYwC1 ReJR1+X7O21SjTly5Mdz7dxhDFNumSI= -----END CERTIFICATE-----Generated at Sun Apr 27 11:52:09 2025 by rpki-client