$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a8ed961d-5255-381f-8d85-fa082487a432.roa File: a8ed961d-5255-381f-8d85-fa082487a432.roa (raw, json) Hash identifier: K9C5eEdxl7eUfyXV3cYbMJF7wPQ/3NTma8rhhRqO91Q= Subject key identifier: 94:16:13:89:AE:D7:37:BE:19:7F:20:27:4A:8D:A2:F2:AB:D0:E2:E5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1CD94773DF16E630D6ED700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a8ed961d-5255-381f-8d85-fa082487a432.roa Signing time: Thu 24 Apr 2025 11:53:11 +0000 ROA not before: Thu 24 Apr 2025 11:53:11 +0000 ROA not after: Wed 23 Jul 2025 11:53:11 +0000 asID: 19905 IP address blocks: 173.18.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:cd:94:77:3d:f1:6e:63:0d:6e:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 11:53:11 2025 GMT Not After : Jul 23 11:53:11 2025 GMT Subject: CN=42623e0b-6f62-4be9-9041-41c6fecb53a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7f:62:99:be:68:af:ca:3f:1f:e9:19:6c:32: d9:3d:6f:92:80:f4:b1:b9:70:7c:91:69:47:d0:46: 19:41:d5:3c:4b:fc:4c:a6:be:fe:5c:a8:28:f2:d2: 91:ab:5f:79:c9:d3:55:1d:09:18:5b:37:f6:61:ec: 7e:0c:e9:5a:17:1b:af:f7:0e:19:d0:b7:8c:89:b5: eb:07:ad:42:a4:48:03:cb:cb:ac:c2:11:a5:6d:8d: 60:33:ed:fb:b2:41:11:79:b5:47:62:28:f3:39:85: 93:f2:1f:66:5e:fc:5f:a1:05:d4:f0:17:98:33:5a: 60:49:ad:d1:87:03:8c:8d:d6:c4:1a:ba:f5:6d:83: 2e:5f:c6:63:12:cc:e2:df:c4:e6:ca:81:4d:35:ea: 48:47:01:0d:8d:72:82:5e:69:b0:73:2d:e5:c3:e5: 74:f4:70:b2:58:3d:6a:23:14:d1:51:42:ff:e6:cb: be:98:e7:a9:54:ea:2b:5c:fa:c9:bf:07:8e:c7:6b: fd:7b:e7:08:e5:b9:ab:ff:0c:18:5d:f3:cf:70:9b: 91:10:b3:0a:35:a8:47:f5:a2:09:d5:85:ff:ec:a9: 78:ae:c3:4f:9b:d3:3e:52:ec:68:9d:ca:54:84:da: af:c4:1f:06:9c:a2:f7:43:85:50:37:ea:21:37:9d: 79:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:16:13:89:AE:D7:37:BE:19:7F:20:27:4A:8D:A2:F2:AB:D0:E2:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a8ed961d-5255-381f-8d85-fa082487a432.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:f6:dd:f2:a2:62:06:bf:a2:05:4d:28:d0:1e:ec:56:9c:3c: 33:51:ea:55:7c:f0:d2:08:f1:8c:e2:1c:9e:ed:65:10:e5:ea: 66:b0:7b:b0:af:d4:91:30:1d:8d:68:ef:32:63:0f:b8:c0:ab: 32:29:77:9d:54:16:4d:07:a9:9e:08:f2:e6:78:79:13:6a:fc: 3e:6c:fb:94:2d:5c:52:fd:51:9c:09:3a:f1:12:ac:3c:37:44: 99:a6:b7:ce:be:91:05:eb:eb:8a:38:d6:ba:aa:b0:a1:d0:73: 20:cb:46:38:05:8d:5f:9d:ce:60:32:e1:75:09:6d:74:b6:e9: 5f:5b:ea:b1:69:e2:3f:a8:fa:fd:32:87:09:75:89:35:0b:27: 55:9b:38:13:ef:f3:87:c4:52:f9:8a:7c:f0:30:dd:66:d7:39: 8c:d8:26:5e:6d:5d:98:80:59:23:19:d0:72:6a:9c:66:5c:d5: fb:b1:19:fa:d8:18:82:f1:ca:ba:91:04:ad:a6:ee:af:5f:e0: c0:2b:f8:56:4e:ca:d5:0f:90:06:84:ef:0c:f9:32:6b:49:50: 91:40:7f:7b:57:f1:9c:61:2f:af:78:a6:1e:04:43:a8:6d:8b: ef:8d:4d:60:c8:c9:e5:03:0b:17:22:a2:4c:2c:bc:b1:28:1b: 77:8a:ae:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhzZR3PfFuYw1u1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDExNTMxMVoXDTI1MDcyMzExNTMxMVowLzEtMCsGA1UEAxMk NDI2MjNlMGItNmY2Mi00YmU5LTkwNDEtNDFjNmZlY2I1M2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn9imb5or8o/H+kZbDLZPW+SgPSxuXB8kWlH 0EYZQdU8S/xMpr7+XKgo8tKRq195ydNVHQkYWzf2Yex+DOlaFxuv9w4Z0LeMibXr B61CpEgDy8uswhGlbY1gM+37skERebVHYijzOYWT8h9mXvxfoQXU8BeYM1pgSa3R hwOMjdbEGrr1bYMuX8ZjEszi38TmyoFNNepIRwENjXKCXmmwcy3lw+V09HCyWD1q IxTRUUL/5su+mOepVOorXPrJvweOx2v9e+cI5bmr/wwYXfPPcJuRELMKNahH9aIJ 1YX/7Kl4rsNPm9M+UuxoncpUhNqvxB8GnKL3Q4VQN+ohN515hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQWE4mu1ze+GX8gJ0qNovKr0OLlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYThlZDk2MWQtNTI1NS0z ODFmLThkODUtZmEwODI0ODdhNDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRLvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEv23fKiYga/ogVNKNAe7FacPDNR6lV88NII8YziHJ7tZRDl6mawe7Cv 1JEwHY1o7zJjD7jAqzIpd51UFk0HqZ4I8uZ4eRNq/D5s+5QtXFL9UZwJOvESrDw3 RJmmt86+kQXr64o41rqqsKHQcyDLRjgFjV+dzmAy4XUJbXS26V9b6rFp4j+o+v0y hwl1iTULJ1WbOBPv84fEUvmKfPAw3WbXOYzYJl5tXZiAWSMZ0HJqnGZc1fuxGfrY GILxyrqRBK2m7q9f4MAr+FZOytUPkAaE7wz5MmtJUJFAf3tX8ZxhL694ph4EQ6ht i++NTWDIyeUDCxciokwsvLEoG3eKrl4= -----END CERTIFICATE-----Generated at Sat Apr 26 12:19:57 2025 by rpki-client