$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9a8cb9c9-2a82-314f-831e-767a34553ab5.roa File: 9a8cb9c9-2a82-314f-831e-767a34553ab5.roa (raw, json) Hash identifier: tNM5s4PwLF3K9kw0Kpx/d0mAx6yZOLNQ8ZXKHxxiVCU= Subject key identifier: 8E:81:AC:EB:45:F6:FD:4E:A6:E0:1F:C9:4D:8F:75:A4:22:37:1D:54 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C49478588A66D659E90E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9a8cb9c9-2a82-314f-831e-767a34553ab5.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.18.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:94:78:58:8a:66:d6:59:e9:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=fba3e729-3313-4326-a3da-ad397d67e338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:58:6f:e1:bc:9f:d0:27:7b:cb:08:d1:a2:a0: 3a:65:8e:89:a9:e4:dc:5a:cf:a2:de:ca:72:b8:d5: ec:cf:f6:6d:cb:75:2b:2d:8e:f8:84:98:c4:11:c6: 45:26:5f:d3:dc:dd:7e:07:d5:ca:00:ae:be:95:fa: 74:c8:6a:c5:78:db:2c:d8:cc:44:29:f5:3f:d6:42: e3:4e:a5:c7:52:be:07:d4:73:c9:7c:1e:e5:8a:44: 04:de:58:f6:f0:3e:fc:ec:48:fa:5c:85:f6:87:bd: 85:2b:85:ea:f6:96:c2:f1:63:e7:94:2d:99:55:f2: 69:cf:0c:08:38:24:1c:9b:4a:17:32:03:d5:39:d1: e9:24:d3:70:2d:e5:ee:ab:96:c2:41:8a:28:2f:6b: c5:43:a1:00:34:37:61:14:1b:1a:06:60:0f:1c:b6: 92:37:03:0f:01:bf:2d:07:ae:e6:91:41:ce:f2:36: b9:91:d1:8a:4a:e9:ae:14:c2:79:36:0b:f8:3f:28: 65:3c:db:3f:69:a6:e1:a3:b4:0a:eb:da:76:96:83: b8:5a:2c:5b:86:f0:15:c4:21:55:a8:b9:c2:6c:a2: 7b:a5:a7:7b:42:d2:2a:48:06:86:c0:f6:cc:ad:6e: 75:36:c8:e1:fe:17:12:b1:65:35:af:1c:d6:e2:a6: 16:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:81:AC:EB:45:F6:FD:4E:A6:E0:1F:C9:4D:8F:75:A4:22:37:1D:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9a8cb9c9-2a82-314f-831e-767a34553ab5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:18:e5:7c:ea:ec:00:9d:19:f3:8f:f6:f5:fc:58:8d:2e:6b: bb:d8:3e:3c:9f:20:a5:69:76:38:48:5f:5c:6a:75:97:69:1d: ab:48:1a:f1:fe:60:51:d0:77:f3:2d:26:e1:ea:8e:8a:74:46: 40:81:b0:06:dc:bc:e6:a3:49:bb:c8:b8:37:d7:c8:ab:08:64: ff:c8:41:6c:96:8f:09:60:2e:19:75:f8:64:a1:5b:1b:cb:58: 01:12:28:79:10:af:4a:b5:d4:d7:19:8e:0c:f6:3e:be:fd:de: 3d:e7:af:12:00:72:51:10:cd:21:6e:58:5e:c5:ae:ea:64:95: c1:82:b9:98:8d:72:ae:dd:c9:18:6f:52:79:27:1a:dc:f1:ce: 74:64:c5:4c:26:72:fe:91:fa:00:06:38:42:3a:61:b9:4d:b3: e8:65:58:7a:f9:ea:a9:98:21:05:4c:f9:99:54:cd:aa:91:1a: 1a:76:dc:0b:7e:84:79:01:01:34:9c:e9:3c:d2:8b:27:c5:67: b2:a7:92:ef:32:d3:90:29:5d:99:ef:9f:59:47:dc:c4:d6:ee: 0e:a7:24:b1:ca:ba:ab:15:39:bc:07:d6:13:8f:7c:9e:f4:7b: 8c:93:96:09:60:84:6d:57:01:d6:d3:2c:73:37:83:5f:17:2f: 7e:e4:47:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxJR4WIpm1lnpDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk ZmJhM2U3MjktMzMxMy00MzI2LWEzZGEtYWQzOTdkNjdlMzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFhv4byf0Cd7ywjRoqA6ZY6JqeTcWs+i3spy uNXsz/Zty3UrLY74hJjEEcZFJl/T3N1+B9XKAK6+lfp0yGrFeNss2MxEKfU/1kLj TqXHUr4H1HPJfB7likQE3lj28D787Ej6XIX2h72FK4Xq9pbC8WPnlC2ZVfJpzwwI OCQcm0oXMgPVOdHpJNNwLeXuq5bCQYooL2vFQ6EANDdhFBsaBmAPHLaSNwMPAb8t B67mkUHO8ja5kdGKSumuFMJ5Ngv4PyhlPNs/aabho7QK69p2loO4WixbhvAVxCFV qLnCbKJ7pad7QtIqSAaGwPbMrW51Nsjh/hcSsWU1rxzW4qYWmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6BrOtF9v1OpuAfyU2PdaQiNx1UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWE4Y2I5YzktMmE4Mi0z MTRmLTgzMWUtNzY3YTM0NTUzYWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRKcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4Y5Xzq7ACdGfOP9vX8WI0ua7vYPjyfIKVpdjhIX1xqdZdpHatIGvH+ YFHQd/MtJuHqjop0RkCBsAbcvOajSbvIuDfXyKsIZP/IQWyWjwlgLhl1+GShWxvL WAESKHkQr0q11NcZjgz2Pr793j3nrxIAclEQzSFuWF7FrupklcGCuZiNcq7dyRhv UnknGtzxznRkxUwmcv6R+gAGOEI6YblNs+hlWHr56qmYIQVM+ZlUzaqRGhp23At+ hHkBATSc6TzSiyfFZ7Knku8y05ApXZnvn1lH3MTW7g6nJLHKuqsVObwH1hOPfJ70 e4yTlglghG1XAdbTLHM3g18XL37kRwM= -----END CERTIFICATE-----Generated at Mon Apr 28 02:03:13 2025 by rpki-client