$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a1b9c77-7843-3213-937f-45d64b26f06b.roa File: 4a1b9c77-7843-3213-937f-45d64b26f06b.roa (raw, json) Hash identifier: XRa7KhpelbqK9tWRyiN6e6MTQoPShdxtSdmeIdYeJ4c= Subject key identifier: 4E:49:3D:CD:04:16:E6:1B:FC:3B:F7:18:A5:9F:37:C6:B8:20:72:F5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF4E8D53E1280BA4C94F00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a1b9c77-7843-3213-937f-45d64b26f06b.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.19.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:4e:8d:53:e1:28:0b:a4:c9:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=8a8528fe-2b5b-4551-a8c2-acae0bc33484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:4b:00:3a:a0:a8:b4:f1:d9:bf:35:9b:a8:5b: f6:4e:74:40:78:ac:6c:a6:66:0c:cb:83:09:44:87: 2b:64:0f:74:03:6c:5c:cf:d1:08:1e:36:fc:a8:67: 41:8a:ba:35:a9:d9:cf:5a:77:53:ef:ea:f8:d4:0c: 92:9f:ff:6c:63:93:f2:32:26:e8:15:bd:b9:92:53: e0:70:af:42:42:22:91:d5:60:01:d7:b0:a3:0f:12: 3b:60:05:d0:5c:5f:32:5a:28:ef:4a:7b:ae:75:42: e1:e6:f4:7c:1a:91:51:73:63:44:cf:38:be:59:f1: 50:dc:76:00:ea:a8:31:5d:72:8d:1f:e8:29:e2:8b: 72:00:73:e0:a0:70:c0:9b:57:7c:7c:4f:a8:cd:b9: 6a:7a:ce:d0:f3:83:6f:59:b4:cc:77:b9:08:6a:28: 32:9e:6e:c3:91:f3:fb:33:cf:48:da:2f:d8:47:cc: a5:df:dd:ff:86:19:80:a9:a5:ea:3f:b3:d7:0b:1a: a5:1a:02:fe:c6:5c:d7:3d:e2:46:69:3b:0c:a7:54: 6f:36:c2:2d:d7:bc:87:c1:69:71:be:4e:73:b3:9d: 99:25:d2:9f:83:4c:a9:c6:b5:a2:38:5f:9f:60:32: fc:e5:2c:d9:3a:2a:73:4f:fd:d6:a9:30:34:0e:0f: 6a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:49:3D:CD:04:16:E6:1B:FC:3B:F7:18:A5:9F:37:C6:B8:20:72:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a1b9c77-7843-3213-937f-45d64b26f06b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:56:9c:f9:6f:10:85:f9:57:2b:b7:45:71:e2:59:f5:66:07: 3c:88:f1:56:66:37:23:8d:9e:09:f3:ae:ed:2b:97:c6:8f:d6: af:f4:5e:72:1a:15:91:cc:5f:e1:68:f4:01:96:80:32:5b:80: 76:11:f6:f2:44:e0:b6:ee:6e:7f:76:47:87:b2:91:32:6a:9a: 2d:e8:1d:b5:08:e7:e5:91:2c:31:0e:04:ed:16:de:8f:24:4e: a4:47:a1:1b:73:a3:eb:83:e3:92:64:1f:74:1b:e3:47:de:56: db:4c:19:d2:0e:0c:b4:4d:5c:e7:ad:c9:52:ed:4e:f6:76:2e: 3d:90:71:48:1b:94:84:1c:5c:a0:b6:2e:0a:7c:17:c2:3c:51: 71:b0:d9:9c:ad:f4:89:31:0f:8d:ba:1d:b6:d6:76:56:8b:59: a3:bd:59:1f:10:1c:41:87:e2:b4:5a:98:bd:ec:a4:bf:4d:88: 01:bf:9b:16:28:74:3a:3d:f6:0f:17:78:73:0c:ee:65:ac:8c: c2:82:a1:5e:72:d7:e4:d5:c6:ac:6e:fc:d0:89:51:35:48:18: d7:0d:cf:a0:cf:a3:a4:7e:07:97:c7:de:19:45:a9:da:a1:f7: 68:46:90:54:3f:c8:a2:48:21:e2:2c:e9:ae:58:b2:f2:5b:5e: 8f:f6:07:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh706NU+EoC6TJTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk OGE4NTI4ZmUtMmI1Yi00NTUxLWE4YzItYWNhZTBiYzMzNDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEsAOqCotPHZvzWbqFv2TnRAeKxspmYMy4MJ RIcrZA90A2xcz9EIHjb8qGdBiro1qdnPWndT7+r41AySn/9sY5PyMiboFb25klPg cK9CQiKR1WAB17CjDxI7YAXQXF8yWijvSnuudULh5vR8GpFRc2NEzzi+WfFQ3HYA 6qgxXXKNH+gp4otyAHPgoHDAm1d8fE+ozblqes7Q84NvWbTMd7kIaigynm7DkfP7 M89I2i/YR8yl393/hhmAqaXqP7PXCxqlGgL+xlzXPeJGaTsMp1RvNsIt17yHwWlx vk5zs52ZJdKfg0ypxrWiOF+fYDL85SzZOipzT/3WqTA0Dg9qmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5JPc0EFuYb/Dv3GKWfN8a4IHL1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGExYjljNzctNzg0My0z MjEzLTkzN2YtNDVkNjRiMjZmMDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrROwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBWnPlvEIX5Vyu3RXHiWfVmBzyI8VZmNyONngnzru0rl8aP1q/0XnIa FZHMX+Fo9AGWgDJbgHYR9vJE4Lbubn92R4eykTJqmi3oHbUI5+WRLDEOBO0W3o8k TqRHoRtzo+uD45JkH3Qb40feVttMGdIODLRNXOetyVLtTvZ2Lj2QcUgblIQcXKC2 Lgp8F8I8UXGw2Zyt9IkxD426HbbWdlaLWaO9WR8QHEGH4rRamL3spL9NiAG/mxYo dDo99g8XeHMM7mWsjMKCoV5y1+TVxqxu/NCJUTVIGNcNz6DPo6R+B5fH3hlFqdqh 92hGkFQ/yKJIIeIs6a5YsvJbXo/2Bw8= -----END CERTIFICATE-----Generated at Sat Apr 26 20:57:09 2025 by rpki-client