$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8b1f6d19-f2d5-3080-9946-8ad4a907332f.roa File: 8b1f6d19-f2d5-3080-9946-8ad4a907332f.roa (raw, json) Hash identifier: /+z1WUSGRGbNkIco6bmMqvDhNYEJ8oma+7OHy8iwb2Y= Subject key identifier: 58:F6:79:26:DD:D8:B4:BF:2B:50:B0:C8:59:35:61:43:1E:C6:D9:5C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF4EACC232A70FA5137DA0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8b1f6d19-f2d5-3080-9946-8ad4a907332f.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.19.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:4e:ac:c2:32:a7:0f:a5:13:7d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=1aa98f95-846a-4964-993a-e25a746a8ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:83:d0:82:c8:5c:1e:4f:9a:e1:95:06:5b:c5: ec:72:b9:e1:a9:7c:13:fb:9e:d8:f2:7b:59:0a:76: 06:8c:8a:57:db:ce:d0:69:c8:17:dc:55:4f:e8:75: 1c:58:57:27:92:9e:4b:3c:1d:c8:20:40:0b:ca:41: 66:9a:d3:08:60:e9:b5:98:57:43:26:15:42:4f:ad: 69:9c:06:4b:37:70:de:98:46:b0:4e:bd:d9:4f:1f: 07:03:2d:4b:00:61:25:00:89:d9:b2:97:0d:01:84: 9c:72:38:4b:b0:b0:07:55:01:96:41:25:7e:46:ec: 6c:56:cc:02:a5:b5:ff:9c:69:cf:d0:1f:a8:b1:3b: 58:fd:b2:c1:11:c7:f4:a8:ac:bd:96:03:29:57:df: 30:bf:c8:94:1c:a2:fc:69:7f:10:7a:40:d2:37:16: 76:69:5c:0c:58:32:d5:ec:f7:ce:e9:5a:0f:57:30: 99:88:05:4f:78:9a:04:3a:67:90:55:3d:a6:32:fe: 97:fc:48:12:4e:1b:fa:13:58:3c:e5:e5:ba:eb:b4: 97:ad:26:8b:ee:3b:3a:4f:7b:2b:c5:0d:e3:f5:2d: c6:7b:41:79:cb:21:24:5a:f6:78:52:a1:02:a2:cb: a0:b7:aa:19:ee:ac:bf:76:c4:db:c4:30:fc:7a:0b: c8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F6:79:26:DD:D8:B4:BF:2B:50:B0:C8:59:35:61:43:1E:C6:D9:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8b1f6d19-f2d5-3080-9946-8ad4a907332f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:f9:61:18:5b:06:44:2f:ff:a7:87:f4:b2:3c:ef:f0:c8:e1: dc:3a:6a:14:81:96:b6:db:6e:f6:0e:4e:24:30:89:da:8d:f6: c9:74:d6:91:68:77:0f:4b:b8:e6:e9:d4:56:a6:83:1a:a2:12: e7:77:de:d3:8c:0f:e6:09:73:85:a6:07:66:f0:f7:7a:08:93: d1:67:e3:22:b9:bd:2f:af:d0:66:c0:f3:d2:dc:93:9a:b1:66: 7d:49:b5:08:e3:78:26:ac:9e:d8:b7:74:6a:c7:98:5d:23:02: 7d:89:bb:db:35:c7:a7:47:67:d2:57:13:01:c2:c9:15:ca:a6: 25:5c:11:f1:2c:1f:2d:fe:84:07:70:9f:8d:1d:8b:0a:fd:70: b8:32:14:59:d1:20:d5:34:9d:30:40:f1:0e:8d:ba:1f:d7:e1: 22:34:5a:22:0c:35:b9:cf:a7:c2:ab:e0:ef:16:b0:5a:a4:f1: c9:7f:e4:45:bf:86:80:f4:e5:f7:39:21:c9:21:70:20:63:56: fc:7d:ba:c4:ae:01:e8:62:48:f3:a0:39:17:43:91:5e:59:d1: 78:cc:2b:d6:f3:c7:19:68:92:7c:e1:19:c3:7a:27:51:d4:19: 1d:b7:3e:f1:54:5a:bd:12:1f:36:5a:d1:dd:17:25:9b:2b:01: ac:d9:9b:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh706swjKnD6UTfaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk MWFhOThmOTUtODQ2YS00OTY0LTk5M2EtZTI1YTc0NmE4YWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoPQgshcHk+a4ZUGW8XscrnhqXwT+57Y8ntZ CnYGjIpX287QacgX3FVP6HUcWFcnkp5LPB3IIEALykFmmtMIYOm1mFdDJhVCT61p nAZLN3DemEawTr3ZTx8HAy1LAGElAInZspcNAYSccjhLsLAHVQGWQSV+RuxsVswC pbX/nGnP0B+osTtY/bLBEcf0qKy9lgMpV98wv8iUHKL8aX8QekDSNxZ2aVwMWDLV 7PfO6VoPVzCZiAVPeJoEOmeQVT2mMv6X/EgSThv6E1g85eW667SXrSaL7js6T3sr xQ3j9S3Ge0F5yyEkWvZ4UqECosugt6oZ7qy/dsTbxDD8egvIEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFj2eSbd2LS/K1CwyFk1YUMextlcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGIxZjZkMTktZjJkNS0z MDgwLTk5NDYtOGFkNGE5MDczMzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHT5YRhbBkQv/6eH9LI87/DI4dw6ahSBlrbbbvYOTiQwidqN9sl01pFo dw9LuObp1FamgxqiEud33tOMD+YJc4WmB2bw93oIk9Fn4yK5vS+v0GbA89Lck5qx Zn1JtQjjeCasnti3dGrHmF0jAn2Ju9s1x6dHZ9JXEwHCyRXKpiVcEfEsHy3+hAdw n40diwr9cLgyFFnRINU0nTBA8Q6Nuh/X4SI0WiIMNbnPp8Kr4O8WsFqk8cl/5EW/ hoD05fc5IckhcCBjVvx9usSuAehiSPOgORdDkV5Z0XjMK9bzxxloknzhGcN6J1HU GR23PvFUWr0SHzZa0d0XJZsrAazZmws= -----END CERTIFICATE-----Generated at Sun Apr 27 01:11:28 2025 by rpki-client