$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b67c4d0-b4c6-3f1b-8197-641e3b9256a4.roa File: 9b67c4d0-b4c6-3f1b-8197-641e3b9256a4.roa (raw, json) Hash identifier: LpN84zjxtvN3HkdHGj9vljjlC3kNehqQ2DoG3XvCBGM= Subject key identifier: 73:CB:27:62:BD:D4:A4:AD:FC:9D:39:93:28:B3:05:55:74:25:CE:08 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784BB68CB4FA883F2AF0D00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b67c4d0-b4c6-3f1b-8197-641e3b9256a4.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.19.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:bb:68:cb:4f:a8:83:f2:af:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=ef410f28-ef33-49a8-b9ea-67a54b14eb90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:72:96:86:5f:dc:da:d5:1c:93:11:53:bf:79: c0:66:d4:1f:1c:c7:b7:bc:53:5d:0a:77:ba:1f:49: a8:b4:b9:1f:f2:52:5c:21:21:22:73:a1:72:55:f5: 34:c3:04:8e:18:0c:77:08:d0:df:5c:96:61:b4:f2: 11:78:4a:9c:ea:69:52:b3:9f:71:5e:77:94:b4:40: 54:4d:ed:98:14:26:52:7d:28:83:3d:08:29:56:c9: 53:96:43:59:57:6d:80:8b:bc:76:f1:a9:72:9d:c7: 53:eb:20:76:d1:2c:af:29:4e:e8:ec:84:9b:cf:e6: 8d:46:9b:46:1f:b8:ce:b5:00:e1:9e:d0:ae:e8:40: 6b:4a:1e:58:95:1e:82:f2:2a:0e:70:a0:7f:0a:54: 3e:27:c5:cb:b0:4d:b7:32:ea:04:23:da:53:35:2b: 17:3c:e0:3d:10:f6:1c:0b:19:08:a4:c1:e1:f6:39: 84:57:6d:98:52:b7:d2:63:9c:d4:37:07:cc:d7:e8: 3a:43:67:39:fa:42:cf:a7:44:3d:5e:03:49:74:13: d1:2d:82:92:ed:58:c9:2a:ff:51:47:6e:a9:99:7b: 5c:87:19:c3:3c:04:db:4c:c3:23:ab:5a:b2:1d:d7: 9d:ce:cc:cb:f7:42:dc:45:98:4f:13:c2:8c:5b:73: 05:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:CB:27:62:BD:D4:A4:AD:FC:9D:39:93:28:B3:05:55:74:25:CE:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b67c4d0-b4c6-3f1b-8197-641e3b9256a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:46:3e:be:9b:a0:d9:a7:c4:ff:3d:52:28:2b:04:04:58:79: b7:07:ce:76:54:4a:57:81:55:63:2a:8c:fb:69:23:3a:ef:e1: 97:99:b0:fe:16:84:f1:97:37:eb:0a:fc:d0:4f:81:cf:84:15: 21:b9:23:8a:2f:bb:98:f4:36:ec:aa:96:df:f7:a6:19:20:c4: 4a:92:e4:5f:fb:fc:93:83:84:3c:2f:35:3f:d1:81:f5:0b:19: d4:87:36:27:3e:98:41:aa:52:94:c4:66:ef:17:2b:7f:29:3a: 2c:54:be:bc:85:cf:45:d0:1d:fd:e5:18:b0:c4:81:56:77:19: aa:19:93:d1:83:c0:f0:95:a2:d1:44:9b:a1:46:b2:78:b5:91: 04:1c:e3:f1:56:b5:ea:03:0e:83:d9:4a:36:f0:a8:09:ad:32: eb:c0:7d:5f:1b:20:77:a8:cf:50:59:b8:ef:3d:a0:06:0d:e2: da:57:6e:4f:f7:ec:67:9b:2b:ef:d2:38:9b:5a:f6:d5:12:d6: e0:d8:58:1d:cd:35:57:8f:12:f0:21:da:b6:bc:90:54:98:da: 70:9e:be:02:67:4c:b1:bb:9d:a2:0d:18:8b:d9:e4:72:3e:98: 10:de:c0:aa:fb:8c:47:f1:0c:05:f8:15:24:3b:d0:af:23:ff: b4:c4:c7:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhLtoy0+og/KvDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZWY0MTBmMjgtZWYzMy00OWE4LWI5ZWEtNjdhNTRiMTRlYjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXKWhl/c2tUckxFTv3nAZtQfHMe3vFNdCne6 H0motLkf8lJcISEic6FyVfU0wwSOGAx3CNDfXJZhtPIReEqc6mlSs59xXneUtEBU Te2YFCZSfSiDPQgpVslTlkNZV22Ai7x28alyncdT6yB20SyvKU7o7ISbz+aNRptG H7jOtQDhntCu6EBrSh5YlR6C8ioOcKB/ClQ+J8XLsE23MuoEI9pTNSsXPOA9EPYc CxkIpMHh9jmEV22YUrfSY5zUNwfM1+g6Q2c5+kLPp0Q9XgNJdBPRLYKS7VjJKv9R R26pmXtchxnDPATbTMMjq1qyHdedzszL90LcRZhPE8KMW3MFawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPLJ2K91KSt/J05kyizBVV0Jc4IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWI2N2M0ZDAtYjRjNi0z ZjFiLTgxOTctNjQxZTNiOTI1NmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRM6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRGPr6boNmnxP89UigrBARYebcHznZUSleBVWMqjPtpIzrv4ZeZsP4W hPGXN+sK/NBPgc+EFSG5I4ovu5j0Nuyqlt/3phkgxEqS5F/7/JODhDwvNT/RgfUL GdSHNic+mEGqUpTEZu8XK38pOixUvryFz0XQHf3lGLDEgVZ3GaoZk9GDwPCVotFE m6FGsni1kQQc4/FWteoDDoPZSjbwqAmtMuvAfV8bIHeoz1BZuO89oAYN4tpXbk/3 7GebK+/SOJta9tUS1uDYWB3NNVePEvAh2ra8kFSY2nCevgJnTLG7naINGIvZ5HI+ mBDewKr7jEfxDAX4FSQ70K8j/7TExwg= -----END CERTIFICATE-----Generated at Sun Apr 27 06:23:57 2025 by rpki-client