$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/97f17b34-51d0-382a-8007-18d4cbd49133.roa File: 97f17b34-51d0-382a-8007-18d4cbd49133.roa (raw, json) Hash identifier: KDYEQp4+BBbVFCfamGodedMSGP3gtZmgCEdMCijGMs0= Subject key identifier: DD:76:7B:D3:51:44:FD:E7:9C:9C:F8:0F:99:D3:9D:65:59:5D:17:43 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F432858499BF46FA4BE6E29FDDBF6D600 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/97f17b34-51d0-382a-8007-18d4cbd49133.roa Signing time: Tue 22 Apr 2025 09:36:38 +0000 ROA not before: Tue 22 Apr 2025 09:36:38 +0000 ROA not after: Mon 21 Jul 2025 09:36:38 +0000 asID: 19905 IP address blocks: 173.18.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9b:f4:6f:a4:be:6e:29:fd:db:f6:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 22 09:36:38 2025 GMT Not After : Jul 21 09:36:38 2025 GMT Subject: CN=56a4a0df-a417-49f0-8112-581618d99f5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2b:99:a9:be:1e:f5:a9:91:bf:cf:45:de:a2: cb:a1:c6:14:67:d3:59:3c:18:80:76:1c:37:6a:cf: da:75:55:38:94:4b:51:a0:1a:0b:56:46:26:74:60: 02:d7:09:b4:04:64:7c:95:4b:51:18:23:76:67:f9: a6:a7:10:93:8d:cf:02:fc:4d:2a:8e:d6:9b:20:5c: 5e:bb:20:e2:f3:00:48:79:ab:6a:fc:69:b2:1e:dc: 63:cf:3f:a4:8c:51:35:1b:70:c9:22:ae:67:1b:f8: 2a:e7:19:b5:f9:62:3f:73:49:ea:1c:2d:0b:a0:44: b7:d6:ff:b0:c4:f2:96:0b:7e:3d:4c:36:95:ac:31: 44:95:eb:6e:b8:d1:3e:11:5f:92:83:6f:6d:75:bc: b8:2b:fb:38:0d:6c:01:c3:50:c1:b3:81:ac:26:5c: 12:06:2d:36:03:d2:8c:46:e1:17:d6:eb:65:ab:6b: aa:95:12:06:f9:a3:17:f4:a3:24:ff:0a:20:d7:e6: f6:05:f7:a8:d1:20:7a:a4:c8:af:b3:44:e0:39:e5: 95:2d:c0:73:53:86:60:20:0f:d6:86:00:24:f6:27: 13:96:89:02:6a:c1:f9:55:a0:b5:e3:ee:cd:7d:0c: b6:06:90:f8:32:dd:8b:d0:72:27:0b:30:d3:7b:94: 0e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:76:7B:D3:51:44:FD:E7:9C:9C:F8:0F:99:D3:9D:65:59:5D:17:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/97f17b34-51d0-382a-8007-18d4cbd49133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:c2:df:d0:b5:37:3c:ae:c2:ea:df:60:c5:52:4d:a4:93:5c: 52:64:e5:73:2d:1c:fd:ac:86:74:19:3b:67:c7:01:6f:49:25: dc:96:a2:33:b5:5f:8b:e2:a4:12:73:bd:45:8e:66:f4:06:34: 38:86:27:12:8a:bc:c6:90:26:70:c6:5f:f9:36:71:ee:84:7e: 1d:09:10:90:0d:4b:12:d3:16:e5:fd:b5:f1:f1:15:f4:17:f5: c7:e7:46:57:2c:ea:b0:34:a1:35:b1:b9:90:c6:59:0d:5c:6b: f0:4c:88:46:ae:58:99:da:ee:fd:08:cc:54:64:d2:c9:69:59: fd:b7:25:e5:b0:ee:f0:ce:78:d6:b0:88:38:2a:e9:57:6b:65: cc:7d:50:05:38:2f:b8:1a:df:15:ab:66:33:7c:09:11:77:03: 5e:b5:a4:ce:fb:4e:26:80:2b:2f:3f:f2:60:40:f4:c0:e0:81: f6:fe:10:e7:b8:c7:28:30:f2:58:9d:49:f0:47:3c:39:ec:05: 40:f4:e0:d3:8e:a7:aa:82:b4:6f:df:fe:c9:62:a6:bb:8b:08: 14:cd:47:7d:51:72:8f:92:1a:16:d8:ce:6b:78:7f:40:ce:6a: 73:5a:d9:43:99:0d:a8:11:78:59:05:40:3e:71:55:83:ff:a9: c2:ad:2c:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmb9G+kvm4p/dv21gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMjA5MzYzOFoXDTI1MDcyMTA5MzYzOFowLzEtMCsGA1UEAxMk NTZhNGEwZGYtYTQxNy00OWYwLTgxMTItNTgxNjE4ZDk5ZjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCuZqb4e9amRv89F3qLLocYUZ9NZPBiAdhw3 as/adVU4lEtRoBoLVkYmdGAC1wm0BGR8lUtRGCN2Z/mmpxCTjc8C/E0qjtabIFxe uyDi8wBIeatq/GmyHtxjzz+kjFE1G3DJIq5nG/gq5xm1+WI/c0nqHC0LoES31v+w xPKWC349TDaVrDFEletuuNE+EV+Sg29tdby4K/s4DWwBw1DBs4GsJlwSBi02A9KM RuEX1utlq2uqlRIG+aMX9KMk/wog1+b2Bfeo0SB6pMivs0TgOeWVLcBzU4ZgIA/W hgAk9icTlokCasH5VaC14+7NfQy2BpD4Mt2L0HInCzDTe5QOywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN12e9NRRP3nnJz4D5nTnWVZXRdDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTdmMTdiMzQtNTFkMC0z ODJhLTgwMDctMThkNGNiZDQ5MTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRKIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHC39C1NzyuwurfYMVSTaSTXFJk5XMtHP2shnQZO2fHAW9JJdyWojO1 X4vipBJzvUWOZvQGNDiGJxKKvMaQJnDGX/k2ce6Efh0JEJANSxLTFuX9tfHxFfQX 9cfnRlcs6rA0oTWxuZDGWQ1ca/BMiEauWJna7v0IzFRk0slpWf23JeWw7vDOeNaw iDgq6VdrZcx9UAU4L7ga3xWrZjN8CRF3A161pM77TiaAKy8/8mBA9MDggfb+EOe4 xygw8lidSfBHPDnsBUD04NOOp6qCtG/f/slipruLCBTNR31Rco+SGhbYzmt4f0DO anNa2UOZDagReFkFQD5xVYP/qcKtLNg= -----END CERTIFICATE-----Generated at Sat Apr 26 12:55:37 2025 by rpki-client