$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/56c41846-f222-3135-8e9a-d2b109d17f2b.roa File: 56c41846-f222-3135-8e9a-d2b109d17f2b.roa (raw, json) Hash identifier: 1VWnnL+h6A9SsFJBJeH2XzKpYQTuMBQmh6g+x3n30Lw= Subject key identifier: D5:65:9F:B4:15:AB:24:3E:22:99:88:7D:6C:53:F8:59:71:35:3E:AB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA445B934FBB28997B2138 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/56c41846-f222-3135-8e9a-d2b109d17f2b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.23.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:44:5b:93:4f:bb:28:99:7b:21:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=60f77b5d-ad9c-4464-8f8a-21017edd3783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:df:35:c6:70:f7:ec:8d:9b:a5:4a:a5:53:4e: 06:fb:cf:82:84:f6:d6:37:b7:89:e3:4d:70:0d:f6: f8:53:f9:5f:60:94:a4:fb:f9:5f:c5:f0:13:b7:68: 78:2a:c4:be:c7:f8:30:e8:e3:4f:f1:4b:39:96:17: b2:67:9b:be:68:96:48:e4:7a:11:d8:08:82:1a:9a: da:f1:62:1d:6a:7b:08:cd:c3:ac:3c:01:74:21:31: c3:53:ab:e2:dd:b9:fe:bd:e0:44:d2:84:d7:79:d7: d2:b9:de:b7:d0:be:9c:1e:1c:cf:ae:d7:a4:99:ff: cc:57:ba:98:1e:99:7e:69:b7:b3:dd:ae:03:49:6e: 47:0a:22:62:7f:d6:b0:00:51:96:9b:51:f2:38:2a: 11:f2:6f:9a:9b:e1:88:4b:39:b7:aa:bf:35:93:24: e2:98:1e:d4:6b:19:19:f1:1f:fc:f0:d5:a4:85:b3: 04:9f:7a:b2:dd:42:2c:81:63:69:ba:30:8a:05:b3: 26:0e:25:35:78:71:7f:6e:b3:24:16:9d:40:30:06: 67:a1:6f:66:ad:89:19:db:52:3d:ad:cd:3c:7b:39: fc:19:01:65:ea:66:3a:dd:e0:97:85:28:6e:f5:77: 0c:9c:e3:80:85:1a:3a:af:b8:14:a9:74:3e:a8:fc: 2e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:65:9F:B4:15:AB:24:3E:22:99:88:7D:6C:53:F8:59:71:35:3E:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/56c41846-f222-3135-8e9a-d2b109d17f2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:8f:05:1a:2f:c7:9d:8a:9a:f1:78:0a:19:4c:7a:cf:e8:71: de:32:40:47:d8:09:3a:d8:31:09:7c:f5:36:8d:59:9b:92:64: d9:92:ec:07:ed:10:8f:62:1a:bd:0f:5e:65:d7:58:50:1f:3a: 14:ed:0d:ec:27:e6:51:35:63:33:c4:40:ae:8a:7d:8c:bc:13: a8:45:69:34:ac:fb:89:28:c0:d2:ed:da:0c:17:83:e5:57:bc: 3d:c0:12:eb:6b:9b:3a:b8:54:2c:57:06:95:0a:4f:cf:7d:f4: 2c:f1:dd:0f:5c:ff:3e:64:a9:47:5f:ad:71:8b:0a:b1:34:1a: 70:53:7c:5e:0a:e3:67:e5:2f:1d:60:e1:cf:af:61:81:a7:1e: 51:57:31:cb:98:0c:5c:8e:09:4a:a0:b6:10:89:09:7d:16:ef: 3e:2f:4b:99:2d:a4:88:91:17:f4:38:e8:21:14:99:22:18:16: b6:11:d5:43:2c:37:24:da:49:f3:fb:e4:6a:ef:7c:52:df:64: 7a:81:7a:9c:bb:93:41:c6:ae:06:2a:0f:49:36:08:f9:48:90: 79:cc:a1:72:85:94:1d:1d:8b:7b:de:5d:19:2e:2d:7c:47:94: 25:a1:29:25:31:c0:d4:99:51:77:eb:10:7f:b8:65:8d:75:c5: e9:c9:b6:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkukRbk0+7KJl7ITgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NjBmNzdiNWQtYWQ5Yy00NDY0LThmOGEtMjEwMTdlZGQzNzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd81xnD37I2bpUqlU04G+8+ChPbWN7eJ401w Dfb4U/lfYJSk+/lfxfATt2h4KsS+x/gw6ONP8Us5lheyZ5u+aJZI5HoR2AiCGpra 8WIdansIzcOsPAF0ITHDU6vi3bn+veBE0oTXedfSud630L6cHhzPrtekmf/MV7qY Hpl+abez3a4DSW5HCiJif9awAFGWm1HyOCoR8m+am+GISzm3qr81kyTimB7UaxkZ 8R/88NWkhbMEn3qy3UIsgWNpujCKBbMmDiU1eHF/brMkFp1AMAZnoW9mrYkZ21I9 rc08ezn8GQFl6mY63eCXhShu9XcMnOOAhRo6r7gUqXQ+qPwu2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVln7QVqyQ+IpmIfWxT+FlxNT6rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTZjNDE4NDYtZjIyMi0z MTM1LThlOWEtZDJiMTA5ZDE3ZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRfIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACPBRovx52KmvF4ChlMes/ocd4yQEfYCTrYMQl89TaNWZuSZNmS7Aft EI9iGr0PXmXXWFAfOhTtDewn5lE1YzPEQK6KfYy8E6hFaTSs+4kowNLt2gwXg+VX vD3AEutrmzq4VCxXBpUKT8999Czx3Q9c/z5kqUdfrXGLCrE0GnBTfF4K42flLx1g 4c+vYYGnHlFXMcuYDFyOCUqgthCJCX0W7z4vS5ktpIiRF/Q46CEUmSIYFrYR1UMs NyTaSfP75GrvfFLfZHqBepy7k0HGrgYqD0k2CPlIkHnMoXKFlB0di3veXRkuLXxH lCWhKSUxwNSZUXfrEH+4ZY11xenJtiQ= -----END CERTIFICATE-----Generated at Sun Apr 27 01:08:28 2025 by rpki-client