$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/55d00b1b-4858-3b97-9246-fb8cc71e7245.roa File: 55d00b1b-4858-3b97-9246-fb8cc71e7245.roa (raw, json) Hash identifier: oN+lKxSwpEkd+o+cvZn3jDm0BkCkgjViwXByZg2+qkU= Subject key identifier: F7:D3:55:D8:E8:02:AF:1F:9B:73:2C:A6:F1:47:BC:4E:0C:71:83:6F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1CD2FC768236D82A7F30480 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/55d00b1b-4858-3b97-9246-fb8cc71e7245.roa Signing time: Thu 24 Apr 2025 11:52:24 +0000 ROA not before: Thu 24 Apr 2025 11:52:24 +0000 ROA not after: Wed 23 Jul 2025 11:52:24 +0000 asID: 19905 IP address blocks: 173.24.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:cd:2f:c7:68:23:6d:82:a7:f3:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 11:52:24 2025 GMT Not After : Jul 23 11:52:24 2025 GMT Subject: CN=b197d9e3-3f9d-4368-8ba4-25e74aee5548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:37:d9:f5:c5:74:c5:97:1d:ba:b8:34:08:70: b1:04:71:1b:01:23:7d:51:5b:eb:65:b0:bb:5a:7d: 87:fe:dc:9e:68:00:c5:d8:1a:20:09:08:ff:cf:8a: a5:72:19:c0:c3:78:86:07:71:4e:c1:21:3b:47:b7: 5d:f5:3a:53:90:ef:62:b2:04:81:09:24:80:45:c3: 0d:de:22:12:ee:7b:ce:fe:3a:0b:54:b8:af:32:1b: 6d:ef:79:6b:75:70:b6:83:ce:b4:f4:77:bb:a9:8e: e7:d3:30:bd:9e:2e:41:7f:6e:82:26:c7:e2:a4:f3: 63:3c:ef:bf:60:51:87:b0:11:cf:1b:74:ed:8b:91: b2:62:f9:a2:64:7d:54:f1:7c:09:8b:fd:9f:35:b8: 71:d8:20:b8:9b:2d:44:8c:e1:83:fe:9d:40:6d:44: 8b:ad:97:3e:ac:7b:92:92:a4:fc:a3:b5:9f:bf:c6: a8:c9:d8:72:57:2b:bb:3b:0c:bf:7c:bb:4d:65:10: 2f:af:10:67:ff:b9:a9:04:71:05:72:52:7f:d0:5d: 0f:41:df:47:75:93:ff:9d:45:03:5e:02:c7:ce:d3: 9d:5f:4b:3c:8e:bf:7a:b1:66:4b:ee:26:93:0f:42: c8:5d:01:42:69:22:e2:d3:49:cc:32:7b:77:3f:28: a4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D3:55:D8:E8:02:AF:1F:9B:73:2C:A6:F1:47:BC:4E:0C:71:83:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/55d00b1b-4858-3b97-9246-fb8cc71e7245.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:1f:b8:b3:3c:50:53:8a:58:06:b0:3d:db:51:0d:7d:29:9a: d3:9b:1b:13:cf:a8:71:8e:47:42:14:44:66:30:e7:aa:6c:54: 2b:71:5b:fb:cb:18:52:f6:2e:3d:bb:40:89:cf:e5:c9:51:17: d9:cd:b7:a2:dd:d7:b1:8a:2f:7d:74:b0:a1:fb:7e:3a:dd:9f: b0:27:a4:4b:73:b0:31:29:47:8e:be:9c:bf:c6:30:cc:27:2a: a6:52:f8:f8:0c:8c:da:fd:bf:af:9d:1d:8f:3c:e9:c3:e3:a3: 94:83:a0:a9:41:d4:12:72:dc:3d:58:9e:87:51:d2:e1:a8:db: ff:de:5a:4d:3e:03:8f:5d:6d:5a:fd:a2:1e:94:02:64:84:7b: dd:e2:85:1c:e2:a5:5b:53:ce:ff:15:1e:99:6e:8c:6a:08:15: f4:75:75:bf:87:f7:2c:33:37:51:9b:ab:ea:69:a0:69:f3:0c: b7:8a:7d:3d:d6:01:19:7a:d9:de:b6:0d:b2:1c:33:ab:b1:56: a6:65:cf:5f:06:c4:39:91:d5:7b:0f:41:36:88:a6:5d:2e:82: bc:4f:77:b1:34:9d:3d:47:96:bc:47:94:a5:b5:bb:9f:6d:4a: 2d:93:46:10:a7:88:c1:f2:02:0b:2a:a1:69:d5:45:74:ce:77: be:82:1a:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhzS/HaCNtgqfzBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDExNTIyNFoXDTI1MDcyMzExNTIyNFowLzEtMCsGA1UEAxMk YjE5N2Q5ZTMtM2Y5ZC00MzY4LThiYTQtMjVlNzRhZWU1NTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDfZ9cV0xZcdurg0CHCxBHEbASN9UVvrZbC7 Wn2H/tyeaADF2BogCQj/z4qlchnAw3iGB3FOwSE7R7dd9TpTkO9isgSBCSSARcMN 3iIS7nvO/joLVLivMhtt73lrdXC2g8609He7qY7n0zC9ni5Bf26CJsfipPNjPO+/ YFGHsBHPG3Tti5GyYvmiZH1U8XwJi/2fNbhx2CC4my1EjOGD/p1AbUSLrZc+rHuS kqT8o7Wfv8aoydhyVyu7Owy/fLtNZRAvrxBn/7mpBHEFclJ/0F0PQd9HdZP/nUUD XgLHztOdX0s8jr96sWZL7iaTD0LIXQFCaSLi00nMMnt3PyikSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfTVdjoAq8fm3MspvFHvE4McYNvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTVkMDBiMWItNDg1OC0z Yjk3LTkyNDYtZmI4Y2M3MWU3MjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRj0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIfuLM8UFOKWAawPdtRDX0pmtObGxPPqHGOR0IURGYw56psVCtxW/vL GFL2Lj27QInP5clRF9nNt6Ld17GKL310sKH7fjrdn7AnpEtzsDEpR46+nL/GMMwn KqZS+PgMjNr9v6+dHY886cPjo5SDoKlB1BJy3D1YnodR0uGo2//eWk0+A49dbVr9 oh6UAmSEe93ihRzipVtTzv8VHplujGoIFfR1db+H9ywzN1Gbq+ppoGnzDLeKfT3W ARl62d62DbIcM6uxVqZlz18GxDmR1XsPQTaIpl0ugrxPd7E0nT1HlrxHlKW1u59t Si2TRhCniMHyAgsqoWnVRXTOd76CGgA= -----END CERTIFICATE-----Generated at Sat Apr 26 12:20:19 2025 by rpki-client