$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89f75768-f5cc-3977-b803-ee0990cb3e34.roa File: 89f75768-f5cc-3977-b803-ee0990cb3e34.roa (raw, json) Hash identifier: yDY2alTIY4yAhHPD7GHv7PibVWDjYkPVupY/Y3OtvjE= Subject key identifier: C6:AB:64:2A:5B:3D:5A:F8:22:EF:B4:E3:F2:B6:F0:E3:FC:1B:FF:96 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784A7996AA6F8B5B4149E00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89f75768-f5cc-3977-b803-ee0990cb3e34.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.17.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:a7:99:6a:a6:f8:b5:b4:14:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=a35bcbec-1911-4ea9-8774-d273c76dd1df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fa:3a:19:bd:b2:48:92:b3:59:c0:12:b9:f9: f5:90:c4:c1:cd:b2:e0:fd:87:6d:92:3a:24:28:0b: fe:38:b4:26:33:7e:c1:f1:95:db:ec:9b:10:ca:9d: 55:db:fa:38:76:0d:fb:30:47:48:8f:b4:73:22:f5: 0c:14:24:0f:ed:0d:08:bf:3a:ad:53:6a:05:40:36: 78:13:36:45:84:6e:e9:9f:91:46:57:49:52:0e:1b: 65:36:f8:b2:87:60:15:39:b5:fd:fa:46:c6:c8:fd: 73:2d:35:64:30:ba:93:98:bc:e7:5c:bd:4d:27:64: 76:7b:7c:a6:3a:4f:4f:af:69:b8:90:5d:ac:66:de: ed:2a:b4:9b:36:fa:ef:2f:ef:b8:ee:ac:a0:40:c7: 4c:01:df:d2:49:50:32:64:3c:d1:cd:1c:cb:ea:1f: 77:d6:71:0a:1d:06:c1:b3:a5:69:fd:bd:5f:bd:ab: 33:80:49:81:21:28:97:16:6c:db:23:33:25:88:92: c6:d5:e4:9a:c2:b4:3a:87:47:19:d6:2d:12:44:3a: 8d:89:90:ff:f8:f7:4e:4a:ee:e3:bd:90:90:54:6a: bd:8d:a9:9b:f1:18:c4:b6:f0:8e:d1:a3:a9:da:33: b4:cd:2e:ad:55:05:c9:79:3c:59:0f:6e:1c:30:19: 62:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:AB:64:2A:5B:3D:5A:F8:22:EF:B4:E3:F2:B6:F0:E3:FC:1B:FF:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89f75768-f5cc-3977-b803-ee0990cb3e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:0c:88:6f:f5:a1:f7:54:4f:e5:a0:dd:8c:7d:f5:b0:75:20: 36:25:27:63:4f:8c:b5:7f:12:f6:73:bd:0d:4a:56:5d:97:15: 21:e9:50:7f:6f:cc:47:cb:a4:89:04:34:99:8c:b3:ab:e2:e6: 89:c0:f0:e6:3f:76:fe:c2:53:79:ed:e8:a6:89:af:73:d9:93: 0f:16:8b:41:14:b0:e7:b1:e1:eb:71:5b:a6:8b:3c:19:87:d6: 0f:c6:31:e1:0a:78:4f:14:2a:ee:a7:fd:d0:a8:95:3f:e1:07: 09:66:7a:9f:3a:38:92:7e:89:9e:a8:3c:2d:e7:36:c1:ff:c2: 59:e3:bf:7f:51:a8:42:e2:6a:4f:8e:7f:68:64:ed:5f:35:77: ca:2e:11:b4:f4:83:f2:07:d5:a2:99:55:43:48:21:61:4d:1c: d4:b1:6b:25:f7:2a:46:c3:b6:a3:40:31:fc:fd:1d:16:c6:cd: 96:c9:ab:30:7b:ce:24:07:7a:cf:d4:8d:ed:4b:cc:d3:77:81: 7d:a9:f2:25:bb:89:fb:3d:3c:ee:74:b0:7b:8f:87:5d:a7:cc: bc:e9:bb:c8:49:db:76:7e:47:3f:85:9e:4e:10:a1:43:19:6d: ab:b7:c1:aa:78:10:65:61:24:30:e2:64:fe:c8:2e:66:cf:af: 94:68:e3:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhKeZaqb4tbQUngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YTM1YmNiZWMtMTkxMS00ZWE5LTg3NzQtZDI3M2M3NmRkMWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPo6Gb2ySJKzWcASufn1kMTBzbLg/Ydtkjok KAv+OLQmM37B8ZXb7JsQyp1V2/o4dg37MEdIj7RzIvUMFCQP7Q0IvzqtU2oFQDZ4 EzZFhG7pn5FGV0lSDhtlNviyh2AVObX9+kbGyP1zLTVkMLqTmLznXL1NJ2R2e3ym Ok9Pr2m4kF2sZt7tKrSbNvrvL++47qygQMdMAd/SSVAyZDzRzRzL6h931nEKHQbB s6Vp/b1fvaszgEmBISiXFmzbIzMliJLG1eSawrQ6h0cZ1i0SRDqNiZD/+PdOSu7j vZCQVGq9jamb8RjEtvCO0aOp2jO0zS6tVQXJeTxZD24cMBli3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMarZCpbPVr4Iu+04/K28OP8G/+WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODlmNzU3NjgtZjVjYy0z OTc3LWI4MDMtZWUwOTkwY2IzZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRF6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAMiG/1ofdUT+Wg3Yx99bB1IDYlJ2NPjLV/EvZzvQ1KVl2XFSHpUH9v zEfLpIkENJmMs6vi5onA8OY/dv7CU3nt6KaJr3PZkw8Wi0EUsOex4etxW6aLPBmH 1g/GMeEKeE8UKu6n/dColT/hBwlmep86OJJ+iZ6oPC3nNsH/wlnjv39RqELiak+O f2hk7V81d8ouEbT0g/IH1aKZVUNIIWFNHNSxayX3KkbDtqNAMfz9HRbGzZbJqzB7 ziQHes/Uje1LzNN3gX2p8iW7ifs9PO50sHuPh12nzLzpu8hJ23Z+Rz+Fnk4QoUMZ bau3wap4EGVhJDDiZP7ILmbPr5Ro4ws= -----END CERTIFICATE-----Generated at Sun Apr 27 05:48:56 2025 by rpki-client