$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5e721fe5-4c34-3ddd-a53e-09283376c288.roa File: 5e721fe5-4c34-3ddd-a53e-09283376c288.roa (raw, json) Hash identifier: 4SnDESfpBek5JqVm6pCIng0tgXLdZdAvKxveL2RiOP8= Subject key identifier: 2E:38:1D:B3:2A:5C:7B:86:BD:4B:46:20:C0:47:03:80:9E:0E:7B:58 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784BB83DCCA30B15DD320C7 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5e721fe5-4c34-3ddd-a53e-09283376c288.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.19.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:bb:83:dc:ca:30:b1:5d:d3:20:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=1c1e57a8-162b-4657-9a6d-dc3aded2055a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c9:fb:24:3d:f3:a5:15:00:37:c4:e5:cf:3f: 73:9c:e7:61:59:dc:3b:52:80:d9:ee:1b:52:52:a0: 19:f4:f6:3c:98:3f:1e:35:9b:74:c7:73:b8:a4:43: 22:6e:3a:d1:f6:d2:62:60:21:05:01:bf:c9:99:26: 94:cf:57:a5:b9:55:9e:bb:0a:75:c1:43:8e:44:45: 27:35:f1:da:10:3b:da:2f:1f:c7:db:ed:17:ab:a5: 8c:5f:06:61:c8:61:f7:23:c2:8b:6a:2f:20:79:f5: 0a:50:c3:d1:f0:0d:5f:1d:31:4b:91:79:ac:ea:dc: 17:be:cc:60:08:e8:bf:ae:b3:1a:02:88:f0:ed:86: 18:bb:33:e9:e7:86:fd:06:74:b9:9b:f8:6c:97:88: ed:d2:92:be:e1:b0:cb:74:db:2b:af:07:03:4c:75: d5:7f:62:9b:4e:a5:b2:c2:88:26:5d:3c:13:4a:0a: c2:21:7b:5c:f8:56:2a:5a:6b:fa:63:cc:70:87:4d: 51:76:45:0b:69:6f:c6:82:86:5c:3e:b5:53:a6:fe: f2:12:aa:44:d5:ad:b5:20:bf:cd:bf:e0:81:94:d6: 03:69:34:10:c4:5d:d7:49:21:14:37:c3:11:ae:43: 55:bf:32:a1:1c:93:b4:88:e7:24:71:a2:0e:33:1e: 5c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:38:1D:B3:2A:5C:7B:86:BD:4B:46:20:C0:47:03:80:9E:0E:7B:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5e721fe5-4c34-3ddd-a53e-09283376c288.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:d5:2e:f4:bc:4b:7d:ad:9c:c8:6d:20:07:99:66:c5:14:5d: 94:6f:72:be:25:b7:73:14:cf:bc:4c:ad:79:f6:ad:e4:d3:b6: bb:c8:e6:17:56:ec:b6:f1:84:da:a4:1f:d4:25:35:68:a9:6a: 12:47:50:64:13:eb:e7:10:f3:10:7e:59:dc:7e:48:d7:4a:6c: 7b:bb:1a:9b:e1:9d:15:03:bb:24:ac:c3:ce:45:7f:49:8b:1e: 55:88:bf:2e:6a:12:39:2c:b6:5d:83:52:08:d8:cc:ac:2a:61: a7:a2:06:a0:f0:52:2e:4f:46:40:f6:28:9b:1b:f9:2f:d3:5a: cc:8e:5f:39:24:04:0f:d2:47:6b:2a:10:4b:4f:68:9e:b6:6a: f0:0c:cd:ad:f3:0b:17:72:6a:b5:e4:77:3a:04:9e:a2:dc:63: 64:29:3f:1c:0f:34:ba:92:5a:75:51:43:0b:32:4c:30:41:0b: 9c:91:9b:8d:0a:fb:3d:d5:a3:e4:89:69:0c:aa:52:b2:f5:ba: f3:22:86:e3:01:42:15:98:7d:03:7c:b8:84:10:ce:54:3d:0a: 40:0e:9b:e1:2c:6a:8b:5e:6c:3d:96:a1:ae:c0:13:67:88:59: b5:70:8e:4f:e6:01:e9:32:40:59:cb:fd:31:c9:15:50:8f:c1: 74:23:d1:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhLuD3MowsV3TIMcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MWMxZTU3YTgtMTYyYi00NjU3LTlhNmQtZGMzYWRlZDIwNTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28n7JD3zpRUAN8Tlzz9znOdhWdw7UoDZ7htS UqAZ9PY8mD8eNZt0x3O4pEMibjrR9tJiYCEFAb/JmSaUz1eluVWeuwp1wUOOREUn NfHaEDvaLx/H2+0Xq6WMXwZhyGH3I8KLai8gefUKUMPR8A1fHTFLkXms6twXvsxg COi/rrMaAojw7YYYuzPp54b9BnS5m/hsl4jt0pK+4bDLdNsrrwcDTHXVf2KbTqWy wogmXTwTSgrCIXtc+FYqWmv6Y8xwh01RdkULaW/GgoZcPrVTpv7yEqpE1a21IL/N v+CBlNYDaTQQxF3XSSEUN8MRrkNVvzKhHJO0iOckcaIOMx5ccwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC44HbMqXHuGvUtGIMBHA4CeDntYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWU3MjFmZTUtNGMzNC0z ZGRkLWE1M2UtMDkyODMzNzZjMjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArROEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLVLvS8S32tnMhtIAeZZsUUXZRvcr4lt3MUz7xMrXn2reTTtrvI5hdW 7LbxhNqkH9QlNWipahJHUGQT6+cQ8xB+Wdx+SNdKbHu7GpvhnRUDuySsw85Ff0mL HlWIvy5qEjkstl2DUgjYzKwqYaeiBqDwUi5PRkD2KJsb+S/TWsyOXzkkBA/SR2sq EEtPaJ62avAMza3zCxdyarXkdzoEnqLcY2QpPxwPNLqSWnVRQwsyTDBBC5yRm40K +z3Vo+SJaQyqUrL1uvMihuMBQhWYfQN8uIQQzlQ9CkAOm+EsaotebD2Woa7AE2eI WbVwjk/mAekyQFnL/THJFVCPwXQj0Sw= -----END CERTIFICATE-----Generated at Sat Apr 26 20:53:55 2025 by rpki-client