$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7cfa9be-e28e-39cb-b724-508b2c7f1e73.roa File: a7cfa9be-e28e-39cb-b724-508b2c7f1e73.roa (raw, json) Hash identifier: eHRUmRmMCeF5tc5cDdPo8t1NiBmuzZ0slD79FDzCSmc= Subject key identifier: 41:0F:6E:CA:2F:99:F8:CC:C9:59:D5:E2:E1:9C:66:6A:E1:1F:5D:22 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784A4DC7C9157CF0301FE40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7cfa9be-e28e-39cb-b724-508b2c7f1e73.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.17.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:a4:dc:7c:91:57:cf:03:01:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=a933ab75-b2f9-425a-8d72-bb75579deb84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:69:73:04:97:da:f5:2d:50:b6:01:41:cd:f0: 71:83:91:90:2a:5b:a7:64:4e:72:a6:24:ce:d0:9b: bd:4d:84:2c:14:b9:ec:0b:0f:d0:5e:13:20:9f:d1: 4c:dd:44:be:7b:20:03:eb:39:c6:b7:0a:cb:b3:14: 17:48:fc:8d:cb:75:6c:a6:36:38:a0:c9:12:7e:44: 69:e0:ec:39:59:30:a0:10:94:ae:6a:70:4e:a6:f5: 90:5f:23:cc:4d:3e:b4:94:9d:c2:45:29:4a:71:f3: 20:9f:e6:0f:00:0f:fe:bc:e9:cd:66:3d:55:51:b1: 59:1b:25:c1:b5:18:c6:f3:e0:34:b0:2a:90:55:b5: 30:31:ab:d9:13:a3:ff:20:13:07:3b:80:a6:f1:eb: 27:c7:e6:17:44:21:8a:2f:80:d4:4d:0f:0c:7d:6a: 6d:5b:49:8e:2a:13:42:17:f0:31:89:6b:b6:d7:1b: fe:96:ad:16:bc:40:34:52:8c:2e:2f:26:db:8a:8a: 1c:cb:8f:4d:85:82:25:bc:3d:37:ab:38:af:91:df: 6d:e0:aa:3d:b8:da:a3:b5:dd:3d:48:c0:8c:d5:4d: 8f:7e:e5:01:c9:3b:75:54:ac:7d:d4:61:1b:a2:69: 4e:ca:62:29:21:5d:09:75:aa:2f:b9:7b:c9:bd:c9: e9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:0F:6E:CA:2F:99:F8:CC:C9:59:D5:E2:E1:9C:66:6A:E1:1F:5D:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7cfa9be-e28e-39cb-b724-508b2c7f1e73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:4f:86:60:da:d7:18:04:fb:af:53:cc:24:3f:62:ba:2c:e1: 4c:ea:77:e2:ad:4f:02:28:7e:d7:0a:b3:ef:ee:b6:9b:dd:6e: be:d1:be:52:59:b4:7d:db:c1:77:cc:b3:b9:c4:7d:83:fd:6e: a7:00:76:9f:0a:22:72:c7:30:8a:ae:7e:32:69:5f:8d:c1:00: 6c:2f:57:6c:30:4c:42:7e:47:19:a4:b4:46:1b:c9:03:32:ec: ac:9d:af:e3:7d:e0:7c:35:82:62:e8:91:ac:3f:57:cb:b6:ea: e7:44:3d:53:bb:3b:12:4d:9b:2d:2c:36:7d:fd:bd:dc:b2:ba: 53:cc:c8:9c:26:0e:8d:28:74:59:03:93:87:0a:02:c6:13:4a: 3b:33:c1:bb:1b:e8:08:f4:de:9e:30:f6:ca:44:62:ed:e2:48: e6:2d:7e:8d:13:c4:8c:2b:60:71:92:2c:5b:63:ed:e9:21:7c: eb:67:18:81:57:07:86:b0:d4:cd:64:50:a2:e6:4d:62:f4:2b: ac:c1:31:02:66:7b:1d:8e:47:1c:b6:9b:08:d1:7f:98:7f:c9: 5c:4b:2d:e3:c3:a0:28:db:a4:ab:e2:6d:8e:12:1c:e4:17:a5: 22:11:9b:61:2d:e8:fe:62:69:b9:ed:6f:88:c0:f4:11:5a:3a: 24:d4:61:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhKTcfJFXzwMB/kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YTkzM2FiNzUtYjJmOS00MjVhLThkNzItYmI3NTU3OWRlYjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWlzBJfa9S1QtgFBzfBxg5GQKlunZE5ypiTO 0Ju9TYQsFLnsCw/QXhMgn9FM3US+eyAD6znGtwrLsxQXSPyNy3VspjY4oMkSfkRp 4Ow5WTCgEJSuanBOpvWQXyPMTT60lJ3CRSlKcfMgn+YPAA/+vOnNZj1VUbFZGyXB tRjG8+A0sCqQVbUwMavZE6P/IBMHO4Cm8esnx+YXRCGKL4DUTQ8MfWptW0mOKhNC F/AxiWu21xv+lq0WvEA0UowuLybbioocy49NhYIlvD03qzivkd9t4Ko9uNqjtd09 SMCM1U2PfuUByTt1VKx91GEbomlOymIpIV0JdaovuXvJvcnptQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEPbsovmfjMyVnV4uGcZmrhH10iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTdjZmE5YmUtZTI4ZS0z OWNiLWI3MjQtNTA4YjJjN2YxZTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRGUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVPhmDa1xgE+69TzCQ/Yros4Uzqd+KtTwIoftcKs+/utpvdbr7RvlJZ tH3bwXfMs7nEfYP9bqcAdp8KInLHMIqufjJpX43BAGwvV2wwTEJ+RxmktEYbyQMy 7Kydr+N94Hw1gmLokaw/V8u26udEPVO7OxJNmy0sNn39vdyyulPMyJwmDo0odFkD k4cKAsYTSjszwbsb6Aj03p4w9spEYu3iSOYtfo0TxIwrYHGSLFtj7ekhfOtnGIFX B4aw1M1kUKLmTWL0K6zBMQJmex2ORxy2mwjRf5h/yVxLLePDoCjbpKvibY4SHOQX pSIRm2Et6P5iabntb4jA9BFaOiTUYSk= -----END CERTIFICATE-----Generated at Sat Apr 26 20:52:07 2025 by rpki-client