$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4c50864b-4423-32ac-ba9f-eb4cfb821f24.roa File: 4c50864b-4423-32ac-ba9f-eb4cfb821f24.roa (raw, json) Hash identifier: aZsAjSOFkDjM/rsQX6cP7n4Q9SbGPRIQD8M5SFU6sy8= Subject key identifier: 1B:C3:2B:FA:E2:C4:D5:51:90:EA:1A:6B:57:96:FC:5F:6D:D9:7B:A2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784AC31CB8AA336F1349E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4c50864b-4423-32ac-ba9f-eb4cfb821f24.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.16.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ac:31:cb:8a:a3:36:f1:34:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=3de79b60-47fb-4228-85e7-ef46dfb2879b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b0:9c:5a:a6:21:38:fc:00:1a:12:93:b2:ae: 30:5c:de:7e:b1:f0:29:5a:da:07:23:4a:07:e5:93: 02:b9:2f:7d:5c:5e:d7:b6:5d:67:1c:b2:9e:1f:9d: 3f:38:7c:84:a5:3e:51:5d:92:59:64:70:89:47:47: 51:4f:a1:d2:fb:ad:20:92:1b:5f:8c:14:a9:77:e3: d3:9a:5b:0f:b0:72:51:69:a7:6d:1c:56:02:2e:20: f0:00:c9:e4:aa:da:79:b3:3a:6d:05:24:5a:8f:13: 87:4a:5d:e8:7a:77:e6:0a:76:35:4f:ae:b9:0e:34: 5e:7f:f2:38:eb:47:aa:64:f8:b9:6b:d1:89:89:14: 8a:a7:43:d9:c7:20:77:5d:d1:31:74:dc:aa:4a:83: 08:fe:7d:a6:e8:f9:ad:0d:15:48:55:6d:01:ee:96: 73:14:43:17:00:eb:eb:e5:aa:ff:67:e9:02:9f:42: 31:97:4a:bd:7e:a9:42:a6:0d:1e:e0:9e:03:99:e5: 8d:d6:06:d5:0e:5e:97:4b:1d:66:1d:4a:c1:ba:3f: e0:f0:2f:c1:13:3b:16:be:7c:11:22:b3:25:c2:85: cc:c4:f4:ba:d2:20:3f:c6:ea:d5:15:9b:9f:b8:73: fb:84:fd:f4:02:94:ef:9b:fe:cc:46:c7:fb:74:a8: a9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C3:2B:FA:E2:C4:D5:51:90:EA:1A:6B:57:96:FC:5F:6D:D9:7B:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4c50864b-4423-32ac-ba9f-eb4cfb821f24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:b5:3b:d2:f2:88:75:23:d8:21:8c:fa:1a:c0:78:83:ac:97: 2f:3c:91:f7:4a:55:59:ab:e4:29:72:e5:07:8f:2b:df:c7:8f: b5:96:47:8c:32:49:89:d8:c8:f0:49:63:9e:e0:4c:f5:93:9b: 8e:6d:54:69:e9:1e:7f:15:5b:42:94:3c:1c:e5:b9:b1:7a:ed: 62:c8:e6:c6:02:ee:67:fa:58:c1:fe:06:e3:48:09:e1:38:69: 95:95:e5:bb:87:a2:58:af:04:12:cd:06:59:61:b6:db:72:c6: f1:54:2e:f0:61:e2:01:bf:16:59:90:cf:53:be:0d:98:a8:e2: 45:e4:54:27:8c:46:39:44:ec:fb:46:e8:74:24:b6:0e:93:7b: ab:cd:77:c1:5f:3d:bd:c5:88:db:c7:3b:37:ba:08:09:f1:57: 6e:72:d7:ab:25:a9:44:b9:77:90:df:bf:69:10:bf:57:3b:27: 49:13:3e:84:20:84:90:1c:a1:a1:eb:49:6e:fa:67:36:d0:e9: ed:52:6f:b4:29:d7:32:5d:e1:ad:a7:0a:94:c3:16:12:4b:42: d0:e1:05:9e:a2:b8:d4:7b:1a:b2:be:da:47:99:59:89:44:c2: df:d0:e4:20:bc:09:c4:85:d5:d7:f1:31:10:bf:60:0f:d8:4b: 96:09:ad:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhKwxy4qjNvE0noAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk M2RlNzliNjAtNDdmYi00MjI4LTg1ZTctZWY0NmRmYjI4NzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07CcWqYhOPwAGhKTsq4wXN5+sfApWtoHI0oH 5ZMCuS99XF7Xtl1nHLKeH50/OHyEpT5RXZJZZHCJR0dRT6HS+60gkhtfjBSpd+PT mlsPsHJRaadtHFYCLiDwAMnkqtp5szptBSRajxOHSl3oenfmCnY1T665DjRef/I4 60eqZPi5a9GJiRSKp0PZxyB3XdExdNyqSoMI/n2m6PmtDRVIVW0B7pZzFEMXAOvr 5ar/Z+kCn0Ixl0q9fqlCpg0e4J4DmeWN1gbVDl6XSx1mHUrBuj/g8C/BEzsWvnwR IrMlwoXMxPS60iA/xurVFZufuHP7hP30ApTvm/7MRsf7dKipkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvDK/rixNVRkOoaa1eW/F9t2XuiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGM1MDg2NGItNDQyMy0z MmFjLWJhOWYtZWI0Y2ZiODIxZjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRAsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACm1O9LyiHUj2CGM+hrAeIOsly88kfdKVVmr5Cly5QePK9/Hj7WWR4wy SYnYyPBJY57gTPWTm45tVGnpHn8VW0KUPBzlubF67WLI5sYC7mf6WMH+BuNICeE4 aZWV5buHolivBBLNBllhtttyxvFULvBh4gG/FlmQz1O+DZio4kXkVCeMRjlE7PtG 6HQktg6Te6vNd8FfPb3FiNvHOze6CAnxV25y16slqUS5d5Dfv2kQv1c7J0kTPoQg hJAcoaHrSW76ZzbQ6e1Sb7Qp1zJd4a2nCpTDFhJLQtDhBZ6iuNR7GrK+2keZWYlE wt/Q5CC8CcSF1dfxMRC/YA/YS5YJrco= -----END CERTIFICATE-----Generated at Tue Apr 29 16:39:49 2025 by rpki-client