$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/87712887-f1c7-309c-8b22-7270d183ad5b.roa File: 87712887-f1c7-309c-8b22-7270d183ad5b.roa (raw, json) Hash identifier: dhs9pLsVOp83VXcRIFpIak+7qzR8NOOGr5HLoBCHNSg= Subject key identifier: 14:6D:21:CE:7E:FC:E8:45:54:31:1C:92:7C:19:3B:17:52:E7:FA:20 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C493DC3A138BE1F797AF80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/87712887-f1c7-309c-8b22-7270d183ad5b.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.16.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:93:dc:3a:13:8b:e1:f7:97:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=153fb100-3e5f-4ad2-b9d3-02510bae3a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e1:f1:ed:5f:6f:7f:92:ea:47:57:03:4c:b5: ab:19:d0:a8:b4:72:63:43:4a:4c:0e:7c:1a:22:e4: 94:f2:02:74:40:e2:9d:99:bc:41:e4:fc:6b:01:39: 15:76:f5:fb:b2:e2:7d:12:95:54:b7:00:dd:5f:f0: 9a:4a:2b:48:74:27:ed:3b:dc:4a:5b:94:7c:85:6b: 67:33:f1:e7:5d:d0:56:a7:f1:a9:eb:77:ea:93:6f: dc:4b:a3:2b:55:1e:5d:a3:46:af:5f:53:3a:3d:07: c9:25:7f:d8:bf:85:d5:61:a4:9d:55:47:32:62:bd: 65:e5:be:be:17:b0:2a:86:10:a2:93:93:0d:a7:d3: 43:5f:9d:74:3b:42:d7:4a:b4:b8:ae:24:a9:1f:01: 41:dc:27:c4:98:83:d7:79:72:0f:d4:17:50:db:cb: 69:9a:00:e9:1a:91:5f:1c:42:4d:a2:54:db:ea:59: 1c:db:b7:0b:08:de:66:aa:e3:70:3e:35:3b:18:ad: 15:13:0b:34:31:e4:86:7b:2d:86:b4:95:6f:a9:a2: 1e:2e:9a:21:ef:01:a9:0d:b3:3f:9e:a1:6a:7e:84: 82:80:2a:b0:db:57:ed:3f:89:71:aa:48:61:b5:d9: c7:ca:c4:87:ea:48:de:9c:68:68:8a:3f:12:74:37: 47:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:6D:21:CE:7E:FC:E8:45:54:31:1C:92:7C:19:3B:17:52:E7:FA:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/87712887-f1c7-309c-8b22-7270d183ad5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:3b:0d:0c:43:5b:6b:89:15:47:a9:98:fd:02:b7:95:b6:a2: e0:eb:b1:f3:d3:55:b0:9c:50:a9:59:99:7b:28:a8:82:70:31: 85:2b:21:a6:ef:27:bf:37:c0:c7:b4:12:8c:89:ce:0f:9c:e3: e1:64:f3:3d:93:62:76:64:7b:ef:bc:52:b3:3e:ba:27:1e:75: 95:dd:47:bb:c3:5f:ad:15:67:ca:80:ef:98:fc:e2:32:ed:64: af:71:46:41:94:de:38:e6:05:dd:c5:4d:05:21:58:5e:3c:56: ef:8e:25:13:61:52:49:bc:1c:be:52:76:58:3e:9f:92:d4:0b: f9:ef:0a:6f:3d:40:55:66:56:ec:88:37:a3:bf:ae:ce:c7:8b: 86:d9:62:ac:95:f4:07:a3:be:cd:9a:9a:86:b4:f9:e9:ea:2d: 26:b4:56:72:29:26:3e:b0:d2:a1:9b:dc:76:7e:b6:c1:3f:d2: 50:bd:c7:d0:ac:05:3d:64:06:9e:fb:26:92:4e:36:da:f6:f2: 7a:21:81:8f:72:1c:dd:81:68:82:79:17:92:87:5a:e1:f8:6d: ce:c5:4c:66:4b:6f:1e:71:8c:d9:9d:ce:9b:c3:cc:41:48:93: f2:e3:3b:0c:94:8d:33:6e:cd:5a:0b:77:88:d2:ce:4e:7d:7b: 12:dc:d0:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxJPcOhOL4feXr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk MTUzZmIxMDAtM2U1Zi00YWQyLWI5ZDMtMDI1MTBiYWUzYTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuHx7V9vf5LqR1cDTLWrGdCotHJjQ0pMDnwa IuSU8gJ0QOKdmbxB5PxrATkVdvX7suJ9EpVUtwDdX/CaSitIdCftO9xKW5R8hWtn M/HnXdBWp/Gp63fqk2/cS6MrVR5do0avX1M6PQfJJX/Yv4XVYaSdVUcyYr1l5b6+ F7AqhhCik5MNp9NDX510O0LXSrS4riSpHwFB3CfEmIPXeXIP1BdQ28tpmgDpGpFf HEJNolTb6lkc27cLCN5mquNwPjU7GK0VEws0MeSGey2GtJVvqaIeLpoh7wGpDbM/ nqFqfoSCgCqw21ftP4lxqkhhtdnHysSH6kjenGhoij8SdDdH/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRtIc5+/OhFVDEcknwZOxdS5/ogMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODc3MTI4ODctZjFjNy0z MDljLThiMjItNzI3MGQxODNhZDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRArMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABY7DQxDW2uJFUepmP0Ct5W2ouDrsfPTVbCcUKlZmXsoqIJwMYUrIabv J783wMe0EoyJzg+c4+Fk8z2TYnZke++8UrM+uicedZXdR7vDX60VZ8qA75j84jLt ZK9xRkGU3jjmBd3FTQUhWF48Vu+OJRNhUkm8HL5Sdlg+n5LUC/nvCm89QFVmVuyI N6O/rs7Hi4bZYqyV9Aejvs2amoa0+enqLSa0VnIpJj6w0qGb3HZ+tsE/0lC9x9Cs BT1kBp77JpJONtr28nohgY9yHN2BaIJ5F5KHWuH4bc7FTGZLbx5xjNmdzpvDzEFI k/LjOwyUjTNuzVoLd4jSzk59exLc0I4= -----END CERTIFICATE-----Generated at Sun Apr 27 01:10:49 2025 by rpki-client