$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af3520ed-e043-3001-b695-d4f401a42f6d.roa File: af3520ed-e043-3001-b695-d4f401a42f6d.roa (raw, json) Hash identifier: n99kw/URgeYt5qyxSyST5syJ0AXtMnLll0agoeKlEtQ= Subject key identifier: 4A:89:8A:5B:9F:3F:78:46:2E:FF:A1:3F:39:FE:90:30:24:9D:97:74 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784A93348275E39726A2B00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af3520ed-e043-3001-b695-d4f401a42f6d.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.24.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:a9:33:48:27:5e:39:72:6a:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=99ab7831-d72f-4335-931a-6fc38913235a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:92:8a:a5:7e:6d:a8:ae:8d:41:3c:2e:b9:69: 4e:8b:9b:a1:8b:a0:df:50:5c:f4:77:c6:ab:d7:e8: 21:1e:51:fa:43:5e:35:6d:23:45:51:e0:1d:05:8e: ad:2a:8e:3f:94:ab:fc:69:b7:b9:b4:99:cc:c3:d4: ab:17:0f:44:0f:5b:be:1f:82:ce:28:72:9a:f1:16: d6:f8:52:64:60:4f:79:4d:2d:8a:56:3e:34:4e:6e: f0:07:79:2b:04:c6:1c:9c:a5:2b:f4:51:33:c3:a5: 9d:be:75:5c:fb:4b:b3:a6:e7:db:36:ac:35:94:19: cf:d6:d9:6d:1e:ec:33:9c:87:ed:64:f5:c4:58:4f: 3c:b0:42:fa:a3:38:c9:70:c0:f9:d6:07:ca:df:e2: 77:3e:5b:4b:82:86:fc:d7:96:95:74:d4:90:c4:db: d7:67:27:da:5c:92:19:93:06:e5:40:28:40:18:0c: 12:35:f0:08:11:00:22:30:d9:65:f3:03:1c:1b:05: 45:5d:b1:ae:28:60:67:8f:f7:77:39:41:b3:46:06: 93:d7:ac:ad:67:d7:6c:5a:70:e0:10:9d:46:a5:27: 58:82:96:fd:22:44:c5:26:70:17:1c:f6:ca:26:04: 32:49:0d:0a:63:48:3d:e6:6f:58:c9:91:84:6a:dc: 08:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:89:8A:5B:9F:3F:78:46:2E:FF:A1:3F:39:FE:90:30:24:9D:97:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af3520ed-e043-3001-b695-d4f401a42f6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:a1:a1:e5:60:90:58:cb:bc:58:26:d6:0e:ee:fd:35:b1:32: d8:21:15:f1:cf:04:82:f3:1f:72:28:10:d8:65:f4:97:71:c0: 48:9a:fe:88:13:4a:31:cc:b6:f2:2c:14:f1:61:2a:c0:5d:6f: 2d:00:62:24:7b:70:90:45:e3:19:25:66:69:2e:b1:f4:ba:d6: 07:99:e5:4d:77:40:a0:9b:8c:58:bc:9f:a0:d5:09:d3:b6:70: 31:eb:ff:85:15:10:1d:fc:1f:f2:9d:aa:4c:bc:11:eb:92:18: 10:ab:da:ae:4c:c0:85:d5:06:af:eb:04:5c:c7:17:47:fd:26: 3e:51:1c:5e:94:a9:d2:d0:f2:7f:b1:8b:ca:f9:c6:22:3f:06: 18:f4:79:fc:c4:38:74:cb:65:44:e1:af:34:ef:52:ef:02:a3: a5:00:35:bc:8e:0e:9a:23:71:93:a8:54:94:d1:a6:ab:21:e8: 6f:00:f4:e9:ca:94:cb:09:87:7d:d2:7d:e8:71:98:83:f5:b8: ae:03:e3:88:ac:38:6f:b5:b4:01:66:b2:95:29:bd:a8:e0:48: 06:6e:c7:8d:54:b2:8e:37:d0:38:dc:e7:1a:bf:37:64:00:25: d9:cb:14:29:7d:78:da:36:42:f3:42:80:c9:dd:c5:6e:7e:f7: 33:3a:e2:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhKkzSCdeOXJqKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OTlhYjc4MzEtZDcyZi00MzM1LTkzMWEtNmZjMzg5MTMyMzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZKKpX5tqK6NQTwuuWlOi5uhi6DfUFz0d8ar 1+ghHlH6Q141bSNFUeAdBY6tKo4/lKv8abe5tJnMw9SrFw9ED1u+H4LOKHKa8RbW +FJkYE95TS2KVj40Tm7wB3krBMYcnKUr9FEzw6WdvnVc+0uzpufbNqw1lBnP1tlt HuwznIftZPXEWE88sEL6ozjJcMD51gfK3+J3PltLgob815aVdNSQxNvXZyfaXJIZ kwblQChAGAwSNfAIEQAiMNll8wMcGwVFXbGuKGBnj/d3OUGzRgaT16ytZ9dsWnDg EJ1GpSdYgpb9IkTFJnAXHPbKJgQySQ0KY0g95m9YyZGEatwIJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqJilufP3hGLv+hPzn+kDAknZd0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWYzNTIwZWQtZTA0My0z MDAxLWI2OTUtZDRmNDAxYTQyZjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRjCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWhoeVgkFjLvFgm1g7u/TWxMtghFfHPBILzH3IoENhl9JdxwEia/ogT SjHMtvIsFPFhKsBdby0AYiR7cJBF4xklZmkusfS61geZ5U13QKCbjFi8n6DVCdO2 cDHr/4UVEB38H/Kdqky8EeuSGBCr2q5MwIXVBq/rBFzHF0f9Jj5RHF6UqdLQ8n+x i8r5xiI/Bhj0efzEOHTLZUThrzTvUu8Co6UANbyODpojcZOoVJTRpqsh6G8A9OnK lMsJh33SfehxmIP1uK4D44isOG+1tAFmspUpvajgSAZux41Uso430Djc5xq/N2QA JdnLFCl9eNo2QvNCgMndxW5+9zM64k0= -----END CERTIFICATE-----Generated at Sun Apr 27 00:16:59 2025 by rpki-client