$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5f598f5f-22cf-3556-beb2-2ef0fd20b5c4.roa File: 5f598f5f-22cf-3556-beb2-2ef0fd20b5c4.roa (raw, json) Hash identifier: VN0Ka6UyppuBkGcobHSRAcWXKX1vxa9h53eAY6pJz9k= Subject key identifier: 2B:2B:DF:36:48:E2:52:7E:6B:DA:2F:1C:9D:99:E6:4C:B6:33:9B:81 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784A25E6B7B52D536D3E5C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5f598f5f-22cf-3556-beb2-2ef0fd20b5c4.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.19.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:a2:5e:6b:7b:52:d5:36:d3:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=040d3bdc-8b6e-4a19-a98e-4e84daf5acb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1d:e2:61:6c:47:f3:30:f4:28:c2:78:e4:7a: c9:96:66:e2:6b:b5:93:97:e6:cb:a6:7f:cd:f8:ca: 27:8b:d4:08:5b:dd:93:c7:79:51:03:69:02:ef:44: e6:fd:85:b3:48:f9:93:c9:05:be:d0:3e:f9:7e:67: d2:df:a6:0e:72:56:c6:1b:69:46:ed:84:15:5c:53: 8d:8c:b2:76:29:00:bb:13:32:00:79:39:6e:d0:96: de:11:23:a5:e3:98:e8:a9:b9:18:95:0e:86:89:57: df:a7:79:bc:db:a3:b3:ae:ef:5f:78:93:9e:16:fa: 99:28:db:3a:c6:df:93:2b:22:46:f3:e9:a6:0d:6d: 43:93:b4:83:90:67:72:5c:e9:62:3d:c6:91:c7:2b: 91:37:01:47:e1:7f:77:63:c2:da:f7:57:e6:3c:8a: 7e:0f:4f:0e:a9:58:d0:9f:fa:38:00:57:85:83:e7: 27:e5:9a:5f:8c:05:93:da:b4:e5:be:61:be:4d:67: 37:e1:11:bf:83:bc:04:25:b5:3a:9f:ea:8b:7e:3a: 37:47:2b:e1:3f:5a:90:0f:22:6c:67:9e:02:cf:28: 42:ae:0b:18:54:66:31:6a:0d:f5:bf:73:de:8f:72: 75:f3:0b:ac:85:2b:e9:8b:41:c8:98:18:ad:b9:6b: 1f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:2B:DF:36:48:E2:52:7E:6B:DA:2F:1C:9D:99:E6:4C:B6:33:9B:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5f598f5f-22cf-3556-beb2-2ef0fd20b5c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:bb:49:07:06:3e:3e:c8:88:04:c3:38:4f:5c:a5:72:f4:5a: 71:c4:4d:10:37:2f:97:3a:2b:3f:70:a7:3a:17:48:f0:b1:0a: bd:67:8b:4d:d7:2d:14:fc:4c:8d:d8:ac:bb:a1:a3:ee:b2:33: 85:2d:c6:ac:28:ec:4c:8a:49:74:ef:ca:a8:93:fd:ab:58:2b: 7f:07:50:cc:9d:f8:2b:b5:56:55:f0:cc:80:1e:27:f3:a5:f4: 5c:8a:79:36:25:ab:cc:30:35:59:06:f8:c1:df:35:61:2c:17: f5:6a:f4:43:2a:0c:81:49:12:2d:e9:db:22:b7:e2:2c:a2:59: 6a:fe:31:bb:70:a3:4e:02:b7:24:0e:b6:60:97:81:8a:c9:58: 1a:1b:44:86:63:be:7b:31:d9:77:c1:c1:9b:68:0a:eb:43:12: af:ea:d1:1c:da:20:a7:15:29:35:76:3f:8a:e9:1f:55:04:75: b3:f0:99:96:3f:84:1e:a2:aa:6e:e3:1e:63:4e:d3:c1:5d:a9: 0e:3a:b5:da:9e:80:64:4e:de:59:a6:76:41:2e:a6:e0:d2:c9: a3:69:2e:02:0a:7c:54:e0:22:eb:9f:49:5d:99:d2:f3:d7:f3: ed:05:94:79:83:eb:35:94:7d:cf:13:0f:53:3e:56:24:9d:1f: 8e:0c:6d:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhKJea3tS1TbT5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MDQwZDNiZGMtOGI2ZS00YTE5LWE5OGUtNGU4NGRhZjVhY2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx3iYWxH8zD0KMJ45HrJlmbia7WTl+bLpn/N +Moni9QIW92Tx3lRA2kC70Tm/YWzSPmTyQW+0D75fmfS36YOclbGG2lG7YQVXFON jLJ2KQC7EzIAeTlu0JbeESOl45joqbkYlQ6GiVffp3m826Ozru9feJOeFvqZKNs6 xt+TKyJG8+mmDW1Dk7SDkGdyXOliPcaRxyuRNwFH4X93Y8La91fmPIp+D08OqVjQ n/o4AFeFg+cn5ZpfjAWT2rTlvmG+TWc34RG/g7wEJbU6n+qLfjo3RyvhP1qQDyJs Z54CzyhCrgsYVGYxag31v3Pej3J18wushSvpi0HImBituWsfxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsr3zZI4lJ+a9ovHJ2Z5ky2M5uBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWY1OThmNWYtMjJjZi0z NTU2LWJlYjItMmVmMGZkMjBiNWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrROIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABC7SQcGPj7IiATDOE9cpXL0WnHETRA3L5c6Kz9wpzoXSPCxCr1ni03X LRT8TI3YrLuho+6yM4Utxqwo7EyKSXTvyqiT/atYK38HUMyd+Cu1VlXwzIAeJ/Ol 9FyKeTYlq8wwNVkG+MHfNWEsF/Vq9EMqDIFJEi3p2yK34iyiWWr+Mbtwo04CtyQO tmCXgYrJWBobRIZjvnsx2XfBwZtoCutDEq/q0RzaIKcVKTV2P4rpH1UEdbPwmZY/ hB6iqm7jHmNO08FdqQ46tdqegGRO3lmmdkEupuDSyaNpLgIKfFTgIuufSV2Z0vPX 8+0FlHmD6zWUfc8TD1M+ViSdH44MbYQ= -----END CERTIFICATE-----Generated at Sun Apr 27 01:00:04 2025 by rpki-client