$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa6110af-a6cd-363a-a429-0c5816748ca2.roa File: aa6110af-a6cd-363a-a429-0c5816748ca2.roa (raw, json) Hash identifier: Inl9BNgEwV9w6g7kOGxlXkk8Px6Ot8rFavgg0BAQ5is= Subject key identifier: 8F:C3:3C:31:25:88:F3:CF:23:78:E9:92:9E:7E:F1:A2:A8:E0:3E:65 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C494E5DBF4677F55552500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa6110af-a6cd-363a-a429-0c5816748ca2.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.19.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:94:e5:db:f4:67:7f:55:55:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=6ba7f285-bb35-4b25-aa90-ff266acaaab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1d:ac:96:a3:6e:e8:77:a2:9a:63:f1:bb:f8: 44:d0:73:49:5e:f7:24:d2:cc:20:2f:b0:42:ff:0b: b1:0e:8d:ab:72:be:ff:7b:3a:d3:10:92:e3:9a:45: cb:be:ce:3f:71:d5:ad:b5:d3:0c:62:4c:e8:73:4a: 90:c8:46:4b:d0:b0:c3:8d:a8:76:a4:87:1f:d0:ed: a2:b3:51:5b:ac:19:8b:2b:85:95:30:95:e2:e7:0d: f0:84:93:99:92:4b:53:72:b4:d9:d0:08:10:4d:b8: d9:9a:8d:9e:be:2d:02:d5:5f:08:05:f7:6e:91:3e: 6c:c8:79:61:3a:b7:45:0b:b7:ef:80:0e:52:36:0c: d1:35:0f:3b:08:ea:dc:96:3a:0a:d2:df:ff:b3:1c: b6:68:2c:7e:a7:26:fa:96:b3:eb:67:c3:8c:5b:0e: b0:7d:62:c1:99:ac:57:fe:8b:ec:7c:de:9a:59:67: 3b:da:e4:27:c2:94:3a:e0:ea:63:2e:9a:57:ce:31: 78:2f:a8:98:ff:1a:06:2c:4a:a6:b9:1a:5f:6c:bc: 32:78:3c:6f:83:54:f7:54:a2:51:23:3d:a7:ae:3e: 05:b4:e4:a7:aa:5a:14:0c:d8:32:ba:89:d8:6a:a6: aa:ac:77:d9:51:7d:e5:7c:5d:98:ca:1b:85:83:b4: 11:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C3:3C:31:25:88:F3:CF:23:78:E9:92:9E:7E:F1:A2:A8:E0:3E:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa6110af-a6cd-363a-a429-0c5816748ca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:d0:48:e0:03:7c:79:3b:f3:69:af:93:6b:07:28:46:c2:17: da:a6:fc:d7:46:28:d6:0d:44:1e:d9:ca:4c:d3:36:ee:c4:98: 0b:d2:8d:f8:09:3c:5c:71:a1:77:a1:bf:90:fc:1a:55:0f:71: b7:55:c2:a0:96:71:64:87:17:b4:a4:37:3f:e3:9c:8e:60:1c: 75:ff:c0:cb:59:3a:35:f0:eb:91:3d:64:b0:89:0d:f1:e8:8a: 77:01:4d:02:9e:cc:ae:9f:f1:ac:65:0a:77:6a:1c:1e:1e:27: 85:ee:66:65:c6:4d:19:b1:45:92:69:a7:f7:59:00:41:92:da: 70:13:9c:98:4a:84:3f:b1:74:9b:e9:b7:da:4a:01:cc:7c:93: 3f:32:0c:7d:bd:06:3e:1c:1e:4f:80:87:d2:81:14:b8:13:23: 08:05:2a:df:23:a5:7c:e6:d8:f9:16:34:37:67:c4:8f:7f:0b: 45:71:bb:0e:3a:f8:77:ad:96:49:5b:23:8d:63:12:90:24:8c: 6f:12:c0:1f:d1:5e:96:f0:62:64:33:68:6d:10:2e:d6:79:b0: e9:e0:9f:58:55:84:9a:c5:00:7f:f0:0c:a4:71:74:1e:c1:8b: 25:00:45:02:56:17:c6:a4:f6:61:cc:26:ae:85:2d:8d:4d:24: c8:d1:3f:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxJTl2/Rnf1VVJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk NmJhN2YyODUtYmIzNS00YjI1LWFhOTAtZmYyNjZhY2FhYWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR2slqNu6HeimmPxu/hE0HNJXvck0swgL7BC /wuxDo2rcr7/ezrTEJLjmkXLvs4/cdWttdMMYkzoc0qQyEZL0LDDjah2pIcf0O2i s1FbrBmLK4WVMJXi5w3whJOZkktTcrTZ0AgQTbjZmo2evi0C1V8IBfdukT5syHlh OrdFC7fvgA5SNgzRNQ87COrcljoK0t//sxy2aCx+pyb6lrPrZ8OMWw6wfWLBmaxX /ovsfN6aWWc72uQnwpQ64OpjLppXzjF4L6iY/xoGLEqmuRpfbLwyeDxvg1T3VKJR Iz2nrj4FtOSnqloUDNgyuonYaqaqrHfZUX3lfF2YyhuFg7QRBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/DPDEliPPPI3jpkp5+8aKo4D5lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWE2MTEwYWYtYTZjZC0z NjNhLWE0MjktMGM1ODE2NzQ4Y2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRNvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrQSOADfHk782mvk2sHKEbCF9qm/NdGKNYNRB7ZykzTNu7EmAvSjfgJ PFxxoXehv5D8GlUPcbdVwqCWcWSHF7SkNz/jnI5gHHX/wMtZOjXw65E9ZLCJDfHo incBTQKezK6f8axlCndqHB4eJ4XuZmXGTRmxRZJpp/dZAEGS2nATnJhKhD+xdJvp t9pKAcx8kz8yDH29Bj4cHk+Ah9KBFLgTIwgFKt8jpXzm2PkWNDdnxI9/C0Vxuw46 +HetlklbI41jEpAkjG8SwB/RXpbwYmQzaG0QLtZ5sOngn1hVhJrFAH/wDKRxdB7B iyUARQJWF8ak9mHMJq6FLY1NJMjRP0I= -----END CERTIFICATE-----Generated at Sun Apr 27 01:03:44 2025 by rpki-client