$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3a3efa4-4f4d-3b97-9820-b0a5a7b2471e.roa File: a3a3efa4-4f4d-3b97-9820-b0a5a7b2471e.roa (raw, json) Hash identifier: MzHXIZ9ENPT1QpUBIbfZ+1WH+zuSHde/2FBf57O/wHA= Subject key identifier: 64:52:92:0F:FE:AF:8C:99:B8:C6:B8:3E:5F:41:38:1B:5B:2E:DB:B5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA1435DE520ACF66A93100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3a3efa4-4f4d-3b97-9820-b0a5a7b2471e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.24.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:14:35:de:52:0a:cf:66:a9:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=2031485c-0681-4ca3-9f79-f439e9933117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:89:33:b0:71:4e:02:a0:61:58:27:2f:ea:c2: f2:5e:a4:92:a4:de:84:e7:91:cd:d1:3d:6e:67:c4: e2:1c:94:e0:8f:3a:ae:d3:1c:b6:30:f6:12:32:35: b1:2d:3c:a3:97:a7:0b:78:a6:3a:ed:ac:7e:9c:54: 23:00:a1:e4:b4:ad:18:d8:c7:96:b9:7d:37:9b:69: 6a:6f:03:4a:7a:6e:55:94:7a:72:1c:2e:2a:fa:c5: 5e:e2:35:59:c7:78:11:e3:a3:7a:aa:86:88:7f:df: b6:c1:8c:c0:d5:bd:2c:eb:32:c9:fd:90:82:1d:eb: 8b:92:5d:30:37:ea:a0:6f:22:05:3b:29:7a:fe:78: 51:d3:62:a4:72:97:62:7e:37:87:6b:a2:a9:af:7a: ce:dc:36:6b:16:28:fe:24:ab:21:33:df:84:12:6d: 70:00:e6:93:36:f3:a4:c3:4e:61:83:49:ef:58:35: 67:15:de:6e:4d:f5:bf:50:8b:7f:e1:ea:a4:4d:70: 83:0b:55:07:67:bd:4d:17:4a:f7:9c:46:d7:d8:8c: 7d:9c:58:75:68:0d:e7:94:fe:f7:a3:a1:c2:4f:cc: b7:5a:e3:63:8b:77:8a:c7:b9:3c:d9:a8:c2:76:5c: ac:44:e3:7f:f0:ab:24:2c:d1:00:17:13:cb:cb:a0: 95:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:52:92:0F:FE:AF:8C:99:B8:C6:B8:3E:5F:41:38:1B:5B:2E:DB:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3a3efa4-4f4d-3b97-9820-b0a5a7b2471e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:bf:84:52:63:88:5e:10:a2:b5:74:9d:4c:78:de:0b:56:3f: 26:61:ba:21:7c:b0:4d:d5:06:5e:69:b6:56:77:d1:ae:52:5d: fb:f8:91:f1:c1:13:a6:1d:9c:c8:fd:31:8d:b1:38:18:df:df: 2a:04:51:6d:76:fe:e6:48:56:8e:91:67:c1:d9:2c:37:f8:b2: e6:80:34:61:36:85:c4:1b:1c:79:cc:54:12:6f:21:56:47:34: 5e:ee:64:70:6e:ad:dc:b0:f1:af:ab:7e:cb:bf:f0:ee:79:cb: bc:2e:6d:4b:78:c7:42:91:59:08:21:ce:a9:6d:b1:fa:87:d3: 74:00:03:5a:99:fa:59:ea:5e:dd:8d:f0:e5:82:6f:d7:4c:16: f1:69:ad:46:b4:59:80:49:72:35:75:6e:de:22:6a:f5:e1:7c: 93:53:92:25:a8:e0:c0:d2:ed:a4:39:2c:91:af:b4:ce:21:fe: 89:22:cd:00:1f:b0:48:c8:d8:72:bd:7a:bf:1a:25:03:e9:e1: 39:b8:a3:d0:21:34:65:8f:f6:9b:6f:de:c4:b1:03:eb:68:53: 2a:23:58:d8:79:22:7e:12:1a:cd:9d:47:cd:2d:8e:8b:0c:e0: 8b:89:39:94:8f:65:24:46:2a:da:54:12:24:d5:01:0e:55:83: f4:10:93:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuhQ13lIKz2apMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MjAzMTQ4NWMtMDY4MS00Y2EzLTlmNzktZjQzOWU5OTMzMTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhokzsHFOAqBhWCcv6sLyXqSSpN6E55HN0T1u Z8TiHJTgjzqu0xy2MPYSMjWxLTyjl6cLeKY67ax+nFQjAKHktK0Y2MeWuX03m2lq bwNKem5VlHpyHC4q+sVe4jVZx3gR46N6qoaIf9+2wYzA1b0s6zLJ/ZCCHeuLkl0w N+qgbyIFOyl6/nhR02KkcpdifjeHa6Kpr3rO3DZrFij+JKshM9+EEm1wAOaTNvOk w05hg0nvWDVnFd5uTfW/UIt/4eqkTXCDC1UHZ71NF0r3nEbX2Ix9nFh1aA3nlP73 o6HCT8y3WuNji3eKx7k82ajCdlysRON/8KskLNEAFxPLy6CV1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRSkg/+r4yZuMa4Pl9BOBtbLtu1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTNhM2VmYTQtNGY0ZC0z Yjk3LTk4MjAtYjBhNWE3YjI0NzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRjeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACm/hFJjiF4QorV0nUx43gtWPyZhuiF8sE3VBl5ptlZ30a5SXfv4kfHB E6YdnMj9MY2xOBjf3yoEUW12/uZIVo6RZ8HZLDf4suaANGE2hcQbHHnMVBJvIVZH NF7uZHBurdyw8a+rfsu/8O55y7wubUt4x0KRWQghzqltsfqH03QAA1qZ+lnqXt2N 8OWCb9dMFvFprUa0WYBJcjV1bt4iavXhfJNTkiWo4MDS7aQ5LJGvtM4h/okizQAf sEjI2HK9er8aJQPp4Tm4o9AhNGWP9ptv3sSxA+toUyojWNh5In4SGs2dR80tjosM 4IuJOZSPZSRGKtpUEiTVAQ5Vg/QQk70= -----END CERTIFICATE-----Generated at Sun Apr 27 03:25:13 2025 by rpki-client