$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71572da6-3cac-325e-aeb2-22a3d049e737.roa File: 71572da6-3cac-325e-aeb2-22a3d049e737.roa (raw, json) Hash identifier: 2byo+/oUoozCeaE6sqhote61sI7yYkoTWN0wAM0/yh0= Subject key identifier: 07:87:4B:79:38:59:10:D6:17:D0:6C:2C:E5:6B:AE:19:64:1F:03:81 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA2F25E9EBC694C92A2C40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71572da6-3cac-325e-aeb2-22a3d049e737.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.23.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:2f:25:e9:eb:c6:94:c9:2a:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=5b2c221b-cf09-4c75-9759-6767399c4b0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:fa:40:68:d0:34:90:dd:84:ee:1a:13:ed:75: a9:94:f6:5d:80:58:c7:87:0c:c1:18:a2:02:87:39: 9f:03:9e:89:66:b9:2c:9f:78:78:65:a1:40:45:dc: 39:dd:2a:61:ca:d3:56:7e:11:d0:0a:ea:5b:64:cc: cc:36:26:27:b6:6b:cc:95:27:d6:a8:71:fa:52:a1: 6a:3d:68:57:52:d9:33:21:5e:39:52:6f:dc:4c:a2: e5:4b:2e:e0:24:88:4d:32:89:0e:6c:4d:bf:c3:63: bc:8e:63:e6:21:a6:54:59:71:e1:c3:f0:6e:2c:77: f0:a3:7b:e7:19:d9:b9:73:2e:ea:c1:39:38:67:35: 47:0c:14:9b:59:e6:b1:f1:eb:53:f3:14:5e:e9:11: 72:1f:fd:c3:5c:cc:6c:59:79:f9:e1:b1:46:c3:6f: 65:0e:88:f4:fb:f4:a2:a1:60:d6:70:59:14:68:f3: db:56:0a:44:0e:ba:18:53:a3:c3:72:3a:83:fc:b5: 3a:07:db:9c:7c:06:7a:52:fc:40:81:a4:af:01:d8: 06:32:48:64:3d:f9:d7:4b:bd:5f:fb:fb:f8:74:05: d7:85:1c:08:d6:b7:fc:eb:b0:01:17:52:45:bf:5c: 14:a9:07:08:58:e7:19:af:1c:16:4d:af:8d:7d:4e: d5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:87:4B:79:38:59:10:D6:17:D0:6C:2C:E5:6B:AE:19:64:1F:03:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/71572da6-3cac-325e-aeb2-22a3d049e737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:c1:0c:04:1e:6b:a3:6b:72:b9:59:28:e8:6b:41:0e:82:f4: a6:77:0d:11:99:1e:fa:b0:0c:02:c2:39:51:16:8d:a0:94:74: 5a:f3:94:61:18:06:d8:34:fd:83:b4:aa:5a:30:03:21:f1:c7: a6:23:ed:9d:b8:3b:06:d2:a3:81:cc:57:56:73:21:20:ba:0e: 4a:97:54:96:01:60:14:2a:92:05:7e:93:a9:5f:a9:47:d9:14: 46:b6:c1:86:ea:35:7e:67:21:f3:ac:7e:1b:d7:d2:9a:78:fb: 6c:29:3f:2a:b0:81:da:ff:56:4e:95:0a:fe:df:31:db:ea:45: a6:25:23:71:6c:af:0b:3b:c6:8f:6f:4e:bf:af:86:61:ee:50: 30:2b:b9:3d:e8:5d:1a:7d:d5:06:f8:7f:4c:a5:cb:ff:3c:f6: e7:69:05:07:3f:5d:32:38:8d:71:a8:1a:ef:c6:b7:c1:22:8a: 3e:ab:f3:9f:6c:51:db:7a:35:71:b4:4a:a6:08:16:17:a9:31: 85:ff:3f:fa:80:b6:ed:e1:fa:01:bb:2d:44:b6:f1:cb:af:5c: 65:a2:d0:af:d2:c3:c5:81:82:df:87:3a:19:37:ce:82:d8:ee: 99:d9:53:fb:cf:05:e4:00:9f:cf:77:a2:a2:9f:06:1f:2f:19: 59:c8:b6:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkui8l6evGlMkqLEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NWIyYzIyMWItY2YwOS00Yzc1LTk3NTktNjc2NzM5OWM0YjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7fpAaNA0kN2E7hoT7XWplPZdgFjHhwzBGKIC hzmfA56JZrksn3h4ZaFARdw53SphytNWfhHQCupbZMzMNiYntmvMlSfWqHH6UqFq PWhXUtkzIV45Um/cTKLlSy7gJIhNMokObE2/w2O8jmPmIaZUWXHhw/BuLHfwo3vn Gdm5cy7qwTk4ZzVHDBSbWeax8etT8xRe6RFyH/3DXMxsWXn54bFGw29lDoj0+/Si oWDWcFkUaPPbVgpEDroYU6PDcjqD/LU6B9ucfAZ6UvxAgaSvAdgGMkhkPfnXS71f +/v4dAXXhRwI1rf867ABF1JFv1wUqQcIWOcZrxwWTa+NfU7VtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAeHS3k4WRDWF9BsLOVrrhlkHwOBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzE1NzJkYTYtM2NhYy0z MjVlLWFlYjItMjJhM2QwNDllNzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRcoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7BDAQea6NrcrlZKOhrQQ6C9KZ3DRGZHvqwDALCOVEWjaCUdFrzlGEY Btg0/YO0qlowAyHxx6Yj7Z24OwbSo4HMV1ZzISC6DkqXVJYBYBQqkgV+k6lfqUfZ FEa2wYbqNX5nIfOsfhvX0pp4+2wpPyqwgdr/Vk6VCv7fMdvqRaYlI3Fsrws7xo9v Tr+vhmHuUDAruT3oXRp91Qb4f0yly/889udpBQc/XTI4jXGoGu/Gt8Eiij6r859s Udt6NXG0SqYIFhepMYX/P/qAtu3h+gG7LUS28cuvXGWi0K/Sw8WBgt+HOhk3zoLY 7pnZU/vPBeQAn893oqKfBh8vGVnItoI= -----END CERTIFICATE-----Generated at Sun Apr 27 03:10:14 2025 by rpki-client