$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5236f021-9f03-33c5-9dc4-f70d68bd434c.roa File: 5236f021-9f03-33c5-9dc4-f70d68bd434c.roa (raw, json) Hash identifier: R2Q0qISMzMg/B/L1mM7o7pbj6zdUchFRwvBz8HF8kIw= Subject key identifier: 13:64:C5:ED:15:B8:53:BB:BF:7D:98:09:98:E1:F3:89:6D:3D:2A:93 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784BB9DE3664458BBF8B4B0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5236f021-9f03-33c5-9dc4-f70d68bd434c.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.19.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:bb:9d:e3:66:44:58:bb:f8:b4:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=1f22d03d-46c2-476f-b770-19198da73f1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:67:41:ca:04:4b:66:0d:e2:cb:e0:20:c5:f0: 94:bb:b5:08:14:ea:9f:f2:9f:74:8b:cd:f3:1b:b0: cf:bc:54:0d:df:41:09:be:bf:e9:a5:37:5c:20:52: c4:b5:21:f8:a4:48:e2:53:18:64:51:a1:46:8e:f5: 10:f5:72:cc:a9:b2:a9:81:44:99:35:11:64:55:70: e2:ca:92:da:62:a8:cb:51:cf:6e:52:50:09:88:e1: 6d:03:d5:89:5b:4d:f7:61:3a:d1:95:0d:93:67:4f: 22:56:34:61:d4:aa:34:aa:77:08:5e:e1:a2:59:7a: 93:d8:48:44:3f:25:4d:cc:ba:67:50:c9:68:f7:8c: 51:e6:21:3c:ab:30:63:d6:e2:0f:4c:88:eb:fd:3c: 34:76:71:58:e3:52:cf:41:cc:0b:68:2b:95:6f:4f: f3:36:3a:10:58:e7:57:aa:c2:58:7d:f0:f2:1f:36: 23:5f:4c:f7:46:e6:b6:77:86:d1:ea:5a:df:63:ae: 56:c4:04:c6:c4:54:bd:3f:91:c3:b8:ba:ae:c9:ea: d7:74:1c:8f:87:cf:9a:a6:15:4e:1a:60:2f:e0:0f: 7e:5b:0c:2d:9d:2b:7a:9b:c9:59:25:e8:9e:e1:7a: 6f:94:81:e8:b2:18:08:10:2e:96:26:2a:04:3e:84: 27:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:64:C5:ED:15:B8:53:BB:BF:7D:98:09:98:E1:F3:89:6D:3D:2A:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5236f021-9f03-33c5-9dc4-f70d68bd434c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:3c:d0:51:9f:65:7f:b3:57:0e:6c:44:07:5d:3e:ab:f9:b7: 56:09:fc:97:6f:89:10:64:78:de:5a:ac:a4:a6:b3:f3:68:77: 01:76:24:dc:a7:83:13:62:0d:a6:0e:c9:5e:0b:1b:bc:4b:6b: 3c:bd:ec:ce:52:35:9a:2f:42:b9:a9:c9:2a:5b:e8:6b:84:fd: ef:4e:31:a8:33:1a:4d:cb:ac:ed:7b:76:d6:48:e7:9f:01:48: 90:6d:70:a1:d0:de:0e:a3:e7:96:6c:cb:c2:80:46:f2:7f:66: bc:bc:1e:1c:b7:75:ff:f4:75:e2:be:e4:51:f7:e4:8e:e5:11: 54:ef:fc:14:35:95:ff:8a:dd:b7:7b:b2:ba:e4:11:5d:e8:83: d4:07:9c:ac:95:25:02:4b:c1:e8:26:96:2c:9c:2b:b5:fb:2d: 22:20:e4:bb:65:b5:29:1f:1a:49:dc:2b:14:bf:20:9e:74:92: 61:6e:15:72:ce:ad:06:4e:2e:61:ca:10:6e:7a:0e:2c:d1:47: cc:9b:5b:34:4e:20:e9:02:0d:56:67:a7:59:07:3f:12:5e:57: b5:3b:a1:48:9b:0f:b4:9a:8c:a0:2a:26:a3:55:be:4d:d3:e2: 29:d0:08:58:97:ff:aa:20:ec:e9:81:7a:6b:66:6b:66:58:ad: 77:89:6f:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhLud42ZEWLv4tLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MWYyMmQwM2QtNDZjMi00NzZmLWI3NzAtMTkxOThkYTczZjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGdBygRLZg3iy+AgxfCUu7UIFOqf8p90i83z G7DPvFQN30EJvr/ppTdcIFLEtSH4pEjiUxhkUaFGjvUQ9XLMqbKpgUSZNRFkVXDi ypLaYqjLUc9uUlAJiOFtA9WJW033YTrRlQ2TZ08iVjRh1Ko0qncIXuGiWXqT2EhE PyVNzLpnUMlo94xR5iE8qzBj1uIPTIjr/Tw0dnFY41LPQcwLaCuVb0/zNjoQWOdX qsJYffDyHzYjX0z3Rua2d4bR6lrfY65WxATGxFS9P5HDuLquyerXdByPh8+aphVO GmAv4A9+WwwtnSt6m8lZJeie4XpvlIHoshgIEC6WJioEPoQn6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNkxe0VuFO7v32YCZjh84ltPSqTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTIzNmYwMjEtOWYwMy0z M2M1LTlkYzQtZjcwZDY4YmQ0MzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRO9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGc80FGfZX+zVw5sRAddPqv5t1YJ/JdviRBkeN5arKSms/NodwF2JNyn gxNiDaYOyV4LG7xLazy97M5SNZovQrmpySpb6GuE/e9OMagzGk3LrO17dtZI558B SJBtcKHQ3g6j55Zsy8KARvJ/Zry8Hhy3df/0deK+5FH35I7lEVTv/BQ1lf+K3bd7 srrkEV3og9QHnKyVJQJLwegmliycK7X7LSIg5LtltSkfGkncKxS/IJ50kmFuFXLO rQZOLmHKEG56DizRR8ybWzROIOkCDVZnp1kHPxJeV7U7oUibD7SajKAqJqNVvk3T 4inQCFiX/6og7OmBemtma2ZYrXeJb3I= -----END CERTIFICATE-----Generated at Sat Apr 26 20:49:00 2025 by rpki-client