$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a65898a6-1682-3d49-9ac1-8856bbbccf5d.roa File: a65898a6-1682-3d49-9ac1-8856bbbccf5d.roa (raw, json) Hash identifier: X8G9qE3egDzfXCfQt5jUMGPAES+qnJ6etsGFSWoulPw= Subject key identifier: BB:40:75:70:AE:65:3D:D6:76:03:69:CF:88:FC:2C:0F:84:5B:8E:06 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA2EDA971EFFB9107BE580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a65898a6-1682-3d49-9ac1-8856bbbccf5d.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.23.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:2e:da:97:1e:ff:b9:10:7b:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=b2ef8a65-db97-4074-96b5-c2bc5c416e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:40:12:ac:8e:db:13:4e:79:73:8c:ff:a6:b6: 9b:8a:81:03:c3:48:fc:ca:b8:95:6b:20:9c:df:03: a5:0d:3c:52:fe:ec:5d:23:97:7f:98:be:db:83:dc: 9c:8b:c5:8e:a1:8b:48:29:f7:54:36:1c:6e:1f:ca: 3e:44:de:cc:30:3b:9a:f6:81:f9:87:2f:4c:1d:31: a5:5f:3a:b9:e5:e2:f6:95:d1:1a:98:8a:90:20:41: 4f:85:79:7e:36:7b:9a:70:c1:c1:8a:72:3e:10:43: 29:21:81:62:f0:10:d4:c8:c0:56:74:50:4b:5a:9d: 05:3e:58:c1:f9:f3:59:54:b2:5e:15:61:1c:04:4b: 01:a9:16:a3:5f:73:87:be:90:9e:1d:d9:c5:ce:b9: 7f:43:3f:6b:36:65:e6:22:a2:da:3b:41:03:3b:20: 57:f2:b0:8f:c7:7f:6d:08:0e:30:1b:af:64:74:72: 4f:55:b2:a0:60:f6:d0:14:11:ae:24:03:53:ef:77: 8c:2e:1b:6a:f2:ff:1f:a7:fe:a5:c8:82:0c:99:e3: 64:62:3e:96:5b:4a:81:9d:f6:98:a7:42:29:06:0b: 93:59:34:0d:24:75:0b:6b:f6:c5:e5:2b:e3:27:78: 6f:a7:5c:69:c3:0f:4b:f9:89:a1:11:c3:07:14:84: b7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:40:75:70:AE:65:3D:D6:76:03:69:CF:88:FC:2C:0F:84:5B:8E:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a65898a6-1682-3d49-9ac1-8856bbbccf5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:cb:d0:d9:ff:b6:11:e4:9c:91:af:3f:29:48:b3:3c:4d:c3: 79:67:a6:f1:71:ca:ae:ad:94:d8:34:55:ea:96:dc:72:ae:46: 6d:57:17:e3:21:61:d9:55:5f:30:e6:07:b3:40:56:27:d5:13: 6c:14:83:22:0a:5c:26:a9:fe:4b:d5:e5:4b:6b:e3:9d:e7:c5: 49:0a:78:22:36:14:78:93:4b:75:11:b3:7f:bc:a5:ad:1d:e6: 18:45:da:c0:7c:68:d0:24:48:95:d5:43:18:c8:5c:75:7f:ad: 8a:0e:fa:02:bf:51:ab:2c:d1:90:94:3e:24:5b:26:61:47:b0: 93:ab:3a:d6:7e:a0:25:1c:51:35:32:66:06:2a:7f:00:e3:10: d2:11:fe:09:b1:09:a2:7c:f6:30:e2:e9:8e:b5:e4:26:f9:32: cf:e4:ab:c1:28:83:60:47:58:96:ad:93:47:98:a6:a0:f8:82: 54:f6:72:1b:f4:25:78:57:24:f6:cc:bf:74:cf:38:42:ef:97: ce:f8:e0:37:51:19:e1:2d:22:43:f2:82:eb:80:f1:2a:0e:40: 5d:8d:d6:67:b2:a4:59:3c:b1:75:0a:d1:a1:7f:e8:70:3e:f8: 55:60:2d:4c:a4:c7:96:1d:a9:2c:c8:6f:13:c1:32:74:03:cb: 44:ed:a7:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkui7alx7/uRB75YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YjJlZjhhNjUtZGI5Ny00MDc0LTk2YjUtYzJiYzVjNDE2ZTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykASrI7bE055c4z/prabioEDw0j8yriVayCc 3wOlDTxS/uxdI5d/mL7bg9yci8WOoYtIKfdUNhxuH8o+RN7MMDua9oH5hy9MHTGl Xzq55eL2ldEamIqQIEFPhXl+NnuacMHBinI+EEMpIYFi8BDUyMBWdFBLWp0FPljB +fNZVLJeFWEcBEsBqRajX3OHvpCeHdnFzrl/Qz9rNmXmIqLaO0EDOyBX8rCPx39t CA4wG69kdHJPVbKgYPbQFBGuJANT73eMLhtq8v8fp/6lyIIMmeNkYj6WW0qBnfaY p0IpBguTWTQNJHULa/bF5SvjJ3hvp1xpww9L+YmhEcMHFIS3GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtAdXCuZT3WdgNpz4j8LA+EW44GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTY1ODk4YTYtMTY4Mi0z ZDQ5LTlhYzEtODg1NmJiYmNjZjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRcEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnL0Nn/thHknJGvPylIszxNw3lnpvFxyq6tlNg0VeqW3HKuRm1XF+Mh YdlVXzDmB7NAVifVE2wUgyIKXCap/kvV5Utr453nxUkKeCI2FHiTS3URs3+8pa0d 5hhF2sB8aNAkSJXVQxjIXHV/rYoO+gK/Uass0ZCUPiRbJmFHsJOrOtZ+oCUcUTUy ZgYqfwDjENIR/gmxCaJ89jDi6Y615Cb5Ms/kq8Eog2BHWJatk0eYpqD4glT2chv0 JXhXJPbMv3TPOELvl8744DdRGeEtIkPyguuA8SoOQF2N1meypFk8sXUK0aF/6HA+ +FVgLUykx5YdqSzIbxPBMnQDy0Ttp/s= -----END CERTIFICATE-----Generated at Sun Apr 27 08:21:32 2025 by rpki-client