$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a525a691-83ca-3334-8085-c21e4f6b991c.roa File: a525a691-83ca-3334-8085-c21e4f6b991c.roa (raw, json) Hash identifier: VGYaIdFAg0fKSTU9kjzL1Fdh2kkRZ5UmPo0+vrVYTnM= Subject key identifier: B3:6D:66:99:E6:39:E3:27:CA:A7:60:BD:4B:67:EE:86:EC:90:CC:2C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA17E48F829AA1885CA240 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a525a691-83ca-3334-8085-c21e4f6b991c.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.23.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:17:e4:8f:82:9a:a1:88:5c:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=c390d285-6b1a-441a-92ca-6c2f92a96540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:40:9d:32:a0:98:7e:48:3d:84:be:d5:e6:a9: 5c:ec:07:0c:33:2f:a9:a9:5f:29:ae:4e:20:72:6c: 03:c1:ca:52:86:24:82:6c:63:12:c5:d4:df:f6:0d: 8d:1c:7c:28:8e:c7:57:85:02:54:df:30:49:e1:49: cc:8f:1b:7e:01:d6:c7:34:55:d9:ea:63:25:69:c8: c9:58:bf:17:f7:44:ee:eb:fc:82:e7:83:f7:5d:71: b4:b5:ae:6f:22:75:0f:1b:0f:88:0d:46:a3:89:a0: e8:cd:34:2e:65:9e:3b:05:b8:e2:af:18:bf:7a:34: a5:4e:21:ac:09:1d:22:fd:6d:02:10:13:9b:cc:d4: 4b:a0:73:27:08:5a:08:98:d5:5a:b9:03:9f:e3:07: fc:b2:a1:19:ed:27:dc:08:46:68:6c:dd:6f:c3:88: 23:71:4f:23:2d:c4:ab:dd:64:81:46:cf:4a:64:4f: 16:90:c2:a8:43:f3:8b:b3:00:ca:6f:9f:66:5f:c0: 41:07:81:92:56:8a:21:3f:85:01:dd:8b:ce:c2:35: 9e:61:57:5a:0a:d0:e0:f2:9d:21:b9:98:16:d3:db: b1:55:e4:ad:42:c1:ec:33:01:0d:e2:ea:10:c6:21: 4c:b8:2a:4c:cf:97:0e:c3:e0:11:8e:6c:67:42:e3: e4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:6D:66:99:E6:39:E3:27:CA:A7:60:BD:4B:67:EE:86:EC:90:CC:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a525a691-83ca-3334-8085-c21e4f6b991c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:00:4c:7c:69:5b:28:c9:a5:84:3b:55:f4:41:38:0e:4b:58: fd:1f:51:34:08:a8:7a:57:bf:fd:57:85:ce:92:19:6f:9e:90: fc:37:e1:68:a3:4a:cc:cb:05:2a:7d:28:2a:3b:df:d0:4b:9e: ec:50:76:39:4d:13:90:3a:07:ca:16:83:80:58:bd:2d:44:e8: 15:81:d8:06:77:ff:5c:04:b9:27:2f:bc:29:0d:8e:e6:80:e0: b1:6e:f4:5f:9b:53:c1:68:66:95:86:32:0d:f5:a7:54:61:aa: 11:fb:ea:4c:b6:e9:89:70:f9:97:9a:ed:68:70:20:1a:a2:f8: d6:75:db:6b:b0:14:20:da:fc:7a:93:af:17:47:ce:dc:53:7a: a0:32:67:25:7f:a7:52:6d:fa:fa:53:7e:24:71:c5:22:2e:e1: 2b:e1:42:6c:b6:b2:28:c9:3e:34:62:d9:c7:e1:06:d7:1d:a5: 87:99:93:21:cc:db:ee:2e:94:31:2e:07:a6:92:3a:7d:64:46: d1:b5:cd:ba:2b:0b:a9:51:b9:aa:93:c8:95:dc:bf:a4:e1:b6: 08:e2:d0:a5:89:42:69:a9:90:36:98:40:c5:b8:7a:28:4d:59: b5:6f:da:9a:91:a2:a5:f3:e6:e7:78:64:4c:73:73:9d:f8:68: b8:e8:58:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuhfkj4KaoYhcokAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YzM5MGQyODUtNmIxYS00NDFhLTkyY2EtNmMyZjkyYTk2NTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUCdMqCYfkg9hL7V5qlc7AcMMy+pqV8prk4g cmwDwcpShiSCbGMSxdTf9g2NHHwojsdXhQJU3zBJ4UnMjxt+AdbHNFXZ6mMlacjJ WL8X90Tu6/yC54P3XXG0ta5vInUPGw+IDUajiaDozTQuZZ47Bbjirxi/ejSlTiGs CR0i/W0CEBObzNRLoHMnCFoImNVauQOf4wf8sqEZ7SfcCEZobN1vw4gjcU8jLcSr 3WSBRs9KZE8WkMKoQ/OLswDKb59mX8BBB4GSVoohP4UB3YvOwjWeYVdaCtDg8p0h uZgW09uxVeStQsHsMwEN4uoQxiFMuCpMz5cOw+ARjmxnQuPknQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNtZpnmOeMnyqdgvUtn7obskMwsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTUyNWE2OTEtODNjYS0z MzM0LTgwODUtYzIxZTRmNmI5OTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRe8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsATHxpWyjJpYQ7VfRBOA5LWP0fUTQIqHpXv/1Xhc6SGW+ekPw34Wij SszLBSp9KCo739BLnuxQdjlNE5A6B8oWg4BYvS1E6BWB2AZ3/1wEuScvvCkNjuaA 4LFu9F+bU8FoZpWGMg31p1RhqhH76ky26Ylw+Zea7WhwIBqi+NZ122uwFCDa/HqT rxdHztxTeqAyZyV/p1Jt+vpTfiRxxSIu4SvhQmy2sijJPjRi2cfhBtcdpYeZkyHM 2+4ulDEuB6aSOn1kRtG1zborC6lRuaqTyJXcv6Thtgji0KWJQmmpkDaYQMW4eihN WbVv2pqRoqXz5ud4ZExzc534aLjoWMk= -----END CERTIFICATE-----Generated at Sun Apr 27 01:11:58 2025 by rpki-client