$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7138e2f4-9345-3437-9a0d-1d456e6da082.roa File: 7138e2f4-9345-3437-9a0d-1d456e6da082.roa (raw, json) Hash identifier: p4CNgEk8dC/VQA6mnuzz9zkMQG2ySTW2ER13QjXVb+Y= Subject key identifier: D4:A6:84:83:9B:C2:83:77:2F:8B:DA:40:70:64:EA:B9:BD:5F:62:0C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A61F31FA49821D2D945E7100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7138e2f4-9345-3437-9a0d-1d456e6da082.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 30036 IP address blocks: 173.19.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:31:fa:49:82:1d:2d:94:5e:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=8f60d2e3-f175-473c-92af-2705598bfa96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:18:10:cf:01:f8:88:6d:a3:5c:c4:57:a4:b5: 9f:7d:6f:4b:c5:4d:7f:f2:33:a9:3f:bc:9b:57:e2: 01:57:e9:76:97:24:ba:95:dc:49:9e:4c:c0:ce:bc: 55:cc:69:f4:b6:8e:be:1a:d9:6c:29:25:54:91:52: 9d:63:c8:63:b6:df:f7:9a:ed:8b:ba:5e:48:49:e3: 91:c4:93:55:cb:de:c3:1b:85:a8:c6:fa:2e:29:1b: 9c:fc:78:cb:2e:19:7e:0e:55:5c:1a:74:6a:66:37: a2:11:48:92:17:c6:b6:d2:29:b3:f3:d7:69:04:5b: d4:e3:ae:d6:57:3e:7d:80:fd:40:bb:a6:e8:ae:be: 26:5a:87:e4:e9:d5:11:9e:8a:66:11:84:ea:26:b7: 85:64:17:13:bb:8b:70:d9:41:22:f7:1c:e3:a3:c3: 20:e4:85:52:e4:be:c1:c4:86:1d:90:0a:60:ba:88: 7a:95:77:f5:1b:4e:e6:9e:5d:74:75:69:b2:b0:dd: be:09:f7:85:d5:a6:8c:6e:af:48:df:a5:b7:a3:b8: c5:5b:44:bb:8c:cf:b1:7f:f8:e6:8d:56:8f:55:dd: 4e:79:f9:1d:a3:c9:ba:fb:04:83:ce:b4:cb:3a:d0: c4:ef:ab:dc:2a:cb:ff:37:9e:25:1f:2d:d0:cb:3c: 55:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A6:84:83:9B:C2:83:77:2F:8B:DA:40:70:64:EA:B9:BD:5F:62:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7138e2f4-9345-3437-9a0d-1d456e6da082.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:df:da:41:fc:08:9b:e1:56:b8:ae:e5:3b:75:f0:c1:eb:8f: a1:c8:31:3e:57:d6:f4:a7:f5:66:90:ec:fd:99:6a:bd:ee:40: 27:ce:5f:9e:4d:d2:59:84:4b:0e:90:2b:d8:c9:ec:b7:d3:8c: c6:a3:d9:9e:a7:77:5d:f7:96:11:48:3b:77:41:e5:ee:5f:42: 9a:de:97:bd:b4:48:28:37:c1:07:8f:29:74:c5:b9:68:6f:b7: dd:0b:d5:b7:52:f5:5b:9c:f9:cb:de:d6:98:3f:8f:0b:41:35: 05:49:ac:19:6d:c4:cf:63:46:20:04:3f:83:aa:b1:38:15:8f: f5:ae:9b:7e:fb:4c:48:ae:64:6c:78:1e:fa:74:97:69:08:8d: 02:d4:a1:a0:dc:5a:63:11:a8:e5:e2:d5:b8:42:2d:ec:ca:40: d1:eb:63:25:b5:2e:9c:ea:63:8c:d9:a6:5f:9a:a4:bd:27:d3: 38:16:17:f1:d8:fa:86:ba:a3:64:c1:23:5e:9b:4f:7e:d1:a0: 27:54:5a:e8:22:60:dc:a6:10:b0:81:2d:31:17:e3:c5:0e:b9: 4d:ac:f0:4a:95:0d:46:6a:b4:5e:5e:c9:e6:aa:4c:4d:77:d3: ca:2c:61:e3:fa:d4:91:ba:c1:38:25:cd:b5:1a:6b:a8:43:be: 9a:79:0c:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHzH6SYIdLZRecQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk OGY2MGQyZTMtZjE3NS00NzNjLTkyYWYtMjcwNTU5OGJmYTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxgQzwH4iG2jXMRXpLWffW9LxU1/8jOpP7yb V+IBV+l2lyS6ldxJnkzAzrxVzGn0to6+GtlsKSVUkVKdY8hjtt/3mu2Lul5ISeOR xJNVy97DG4WoxvouKRuc/HjLLhl+DlVcGnRqZjeiEUiSF8a20imz89dpBFvU467W Vz59gP1Au6borr4mWofk6dURnopmEYTqJreFZBcTu4tw2UEi9xzjo8Mg5IVS5L7B xIYdkApguoh6lXf1G07mnl10dWmysN2+CfeF1aaMbq9I36W3o7jFW0S7jM+xf/jm jVaPVd1Oefkdo8m6+wSDzrTLOtDE76vcKsv/N54lHy3QyzxVPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSmhIObwoN3L4vaQHBk6rm9X2IMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzEzOGUyZjQtOTM0NS0z NDM3LTlhMGQtMWQ0NTZlNmRhMDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArROrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbf2kH8CJvhVriu5Tt18MHrj6HIMT5X1vSn9WaQ7P2Zar3uQCfOX55N 0lmESw6QK9jJ7LfTjMaj2Z6nd133lhFIO3dB5e5fQprel720SCg3wQePKXTFuWhv t90L1bdS9Vuc+cve1pg/jwtBNQVJrBltxM9jRiAEP4OqsTgVj/Wum377TEiuZGx4 Hvp0l2kIjQLUoaDcWmMRqOXi1bhCLezKQNHrYyW1LpzqY4zZpl+apL0n0zgWF/HY +oa6o2TBI16bT37RoCdUWugiYNymELCBLTEX48UOuU2s8EqVDUZqtF5eyeaqTE13 08osYeP61JG6wTglzbUaa6hDvpp5DO4= -----END CERTIFICATE-----Generated at Sun Apr 27 01:27:40 2025 by rpki-client