$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4dce1a3d-3868-3955-980a-db5f2fc13635.roa File: 4dce1a3d-3868-3955-980a-db5f2fc13635.roa (raw, json) Hash identifier: Gm2zP/1eUxzcMmM3lC8fhL23dfB6vJI0y1wn0S5Nzh0= Subject key identifier: A1:8F:05:2A:14:89:62:50:F5:1A:F1:92:01:9F:FB:72:F2:8A:80:36 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784A906CCD8445F859794C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4dce1a3d-3868-3955-980a-db5f2fc13635.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.24.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:a9:06:cc:d8:44:5f:85:97:94:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=7d27eaa8-6ecf-44f2-8701-052b6f202ff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a1:19:7f:a3:52:85:db:dc:d5:15:e4:47:97: 0d:11:35:c7:41:26:55:c6:13:8a:f4:2e:5f:52:c2: 6b:9d:0d:b3:ed:3f:4b:eb:df:6a:7e:91:b9:d9:5e: 89:fc:d9:e8:10:2f:66:d0:22:4d:9d:91:15:52:8e: a0:01:a5:68:6e:1f:1f:d9:c2:cf:0f:a0:34:8e:bf: ca:87:a5:49:86:0c:d6:6f:e7:4f:04:93:71:78:b2: 6c:1b:d8:6d:c0:c1:78:5a:0a:4e:ef:e5:b8:6e:5e: 1d:df:53:d6:30:23:7f:2a:ed:2f:e8:ce:ea:60:ff: 20:a9:04:1a:06:c8:a6:a2:21:4f:a0:dd:6f:91:60: 18:32:2a:9b:6c:eb:ea:18:76:18:f7:15:c9:13:62: a3:74:34:61:19:e3:c0:e7:0d:95:14:f6:59:b0:e1: 8c:2a:77:9a:14:35:cb:9e:fe:b8:45:ef:a6:60:8e: 82:37:71:8f:c3:23:f3:52:a6:f8:76:c0:51:2e:f9: 67:1c:df:1a:9f:9a:6d:b3:a0:4d:5d:2b:fc:cf:44: dc:4e:22:87:fa:af:59:1d:e4:fa:0d:2a:79:e3:82: c3:31:57:af:67:90:5b:39:eb:e3:28:c3:3e:62:63: 9f:0a:1e:cc:5e:83:d3:7f:ed:81:94:bb:e7:03:f2: 86:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:8F:05:2A:14:89:62:50:F5:1A:F1:92:01:9F:FB:72:F2:8A:80:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4dce1a3d-3868-3955-980a-db5f2fc13635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:c3:98:80:c8:a0:eb:34:06:db:98:14:58:d6:e9:56:73:e5: 49:ba:fa:6e:84:37:50:24:a0:bb:10:ec:99:fa:08:ec:38:19: 07:3c:98:33:42:bb:51:43:0b:99:1c:32:a3:34:1e:67:e5:30: 05:ed:af:e2:88:b3:ed:7d:2e:a2:19:2a:6f:35:65:56:4c:fb: f3:a8:82:b3:59:e9:1b:47:f6:c7:be:2f:96:45:0e:49:27:96: 69:f3:58:a0:23:70:4a:41:e0:ad:92:9c:3d:56:d4:ce:d2:30: eb:34:d1:c2:ca:72:fd:49:21:9c:52:b0:50:12:80:88:08:89: fd:1a:dd:0e:15:2d:3d:f9:0c:f7:b2:ee:8c:5b:47:11:5e:c4: 96:f4:6c:01:99:71:d4:f7:0e:15:49:59:b3:08:bf:48:65:d1: 99:b5:61:bc:e8:13:58:de:20:b1:3a:37:0c:2e:77:f9:4b:52: ef:73:85:38:51:52:e6:aa:3f:d6:57:ec:f5:1b:bf:b1:18:48: d5:ad:ce:06:ff:b5:c6:56:ce:ad:07:b2:7e:bf:7e:e5:9c:86: d0:77:50:92:cb:22:63:f2:0b:8c:8f:c4:37:a7:4f:61:0a:6f: 61:9c:d6:9d:fa:de:48:18:cf:42:32:00:cf:24:63:3a:15:dc: ac:a0:ae:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhKkGzNhEX4WXlMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk N2QyN2VhYTgtNmVjZi00NGYyLTg3MDEtMDUyYjZmMjAyZmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6EZf6NShdvc1RXkR5cNETXHQSZVxhOK9C5f UsJrnQ2z7T9L699qfpG52V6J/NnoEC9m0CJNnZEVUo6gAaVobh8f2cLPD6A0jr/K h6VJhgzWb+dPBJNxeLJsG9htwMF4WgpO7+W4bl4d31PWMCN/Ku0v6M7qYP8gqQQa BsimoiFPoN1vkWAYMiqbbOvqGHYY9xXJE2KjdDRhGePA5w2VFPZZsOGMKneaFDXL nv64Re+mYI6CN3GPwyPzUqb4dsBRLvlnHN8an5pts6BNXSv8z0TcTiKH+q9ZHeT6 DSp544LDMVevZ5BbOevjKMM+YmOfCh7MXoPTf+2BlLvnA/KGDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGPBSoUiWJQ9RrxkgGf+3LyioA2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGRjZTFhM2QtMzg2OC0z OTU1LTk4MGEtZGI1ZjJmYzEzNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRhSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/DmIDIoOs0BtuYFFjW6VZz5Um6+m6EN1AkoLsQ7Jn6COw4GQc8mDNC u1FDC5kcMqM0HmflMAXtr+KIs+19LqIZKm81ZVZM+/OogrNZ6RtH9se+L5ZFDkkn lmnzWKAjcEpB4K2SnD1W1M7SMOs00cLKcv1JIZxSsFASgIgIif0a3Q4VLT35DPey 7oxbRxFexJb0bAGZcdT3DhVJWbMIv0hl0Zm1YbzoE1jeILE6Nwwud/lLUu9zhThR UuaqP9ZX7PUbv7EYSNWtzgb/tcZWzq0Hsn6/fuWchtB3UJLLImPyC4yPxDenT2EK b2Gc1p363kgYz0IyAM8kYzoV3Kygrpw= -----END CERTIFICATE-----Generated at Sat Apr 26 20:58:24 2025 by rpki-client