$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/afb3a249-923e-3a07-90f3-787e2b08b42a.roa File: afb3a249-923e-3a07-90f3-787e2b08b42a.roa (raw, json) Hash identifier: WfWXkpn2Xs+B5JwAt7JM8QtgabWnUFHpostwRCEVSvY= Subject key identifier: BE:00:78:8D:D7:7D:36:BF:7E:DF:66:F3:4A:05:D3:3E:47:F0:06:44 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1CDC300FFB6BA020F864A80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/afb3a249-923e-3a07-90f3-787e2b08b42a.roa Signing time: Thu 24 Apr 2025 11:53:33 +0000 ROA not before: Thu 24 Apr 2025 11:53:33 +0000 ROA not after: Wed 23 Jul 2025 11:53:33 +0000 asID: 19905 IP address blocks: 173.23.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:cd:c3:00:ff:b6:ba:02:0f:86:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 11:53:33 2025 GMT Not After : Jul 23 11:53:33 2025 GMT Subject: CN=9d7ea2b4-ed06-4c50-b48c-32c82b17725d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a3:eb:b4:f5:c4:ec:b0:3d:86:ff:ba:36:2e: 0f:82:02:02:7d:a3:aa:f4:4c:07:f2:03:5c:1a:1e: b3:db:c5:96:29:24:5a:be:0a:98:b2:fd:8d:dd:83: 1a:74:55:d7:f8:12:30:68:2a:69:31:c2:fe:0d:59: 25:36:d7:69:6a:be:2a:b6:2e:4c:2b:e4:dc:90:7b: de:75:5e:81:10:82:7a:eb:e2:a8:88:9a:5c:fc:6e: 48:7b:d9:08:af:b5:53:1f:c1:0f:29:ab:d8:ec:30: 40:1a:75:fc:61:7f:9e:c6:70:64:59:1f:7d:16:57: 5c:4c:49:10:b4:c9:dc:9a:8f:25:9a:c1:da:a9:4b: b0:0c:e3:4a:90:88:69:cb:49:de:71:25:be:e2:60: 8c:e6:fc:41:58:69:d5:6b:50:f7:bd:9f:38:fb:2f: 54:c9:8a:f4:db:f1:9b:4b:06:88:72:52:b1:6e:1f: c1:21:da:31:b1:68:43:18:50:9c:89:f5:60:21:1c: a8:00:bf:87:ac:c8:53:2d:58:ef:5c:80:ee:db:58: d4:11:db:88:b4:72:bf:ac:47:56:30:03:1e:5c:6a: e7:9d:81:74:35:12:2a:8c:e3:27:b5:a4:03:e5:7d: 87:73:cd:a4:fd:2e:68:ad:a0:1d:f3:4c:d2:41:c3: 1d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:00:78:8D:D7:7D:36:BF:7E:DF:66:F3:4A:05:D3:3E:47:F0:06:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/afb3a249-923e-3a07-90f3-787e2b08b42a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:ea:b6:3b:37:27:d7:df:91:74:c7:62:a0:64:a6:37:f1:79: 02:a1:59:95:6a:e7:62:59:40:9c:5e:9d:b7:7b:38:f2:55:e8: 0f:af:3e:b5:be:91:77:44:90:38:3c:2b:32:e8:d1:7e:78:49: e8:50:7d:83:3c:c8:e9:b6:46:cc:3f:56:1c:4e:e7:29:d5:90: 84:a6:f9:b5:fb:ec:91:0c:93:7d:a7:9e:54:5d:f3:d2:cd:0e: 75:79:a0:08:b2:a4:66:92:8e:3e:6b:a8:b6:42:ab:fc:16:2d: f5:f3:8b:79:3c:23:2e:77:32:7d:cd:d3:8a:de:49:dc:c0:85: 90:08:f0:44:da:30:d7:76:24:04:06:54:aa:e0:d3:2b:a8:9f: 00:80:67:da:6e:6b:b8:4d:6f:69:d1:99:e2:35:3a:ed:8f:c1: 41:91:e6:06:b7:70:97:16:91:30:bb:33:66:43:38:95:f5:f8: f9:8b:50:22:52:27:35:31:36:95:29:35:74:c7:ab:31:ac:94: 34:3c:f2:36:36:68:70:c8:e9:56:6c:c9:5e:19:f4:9c:5c:cc: 51:02:69:c7:d9:32:cc:fb:99:f6:74:3c:83:79:be:11:aa:28: ea:73:83:b6:f5:75:c7:98:0b:a0:95:07:4b:50:7d:c8:08:81: b3:12:aa:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhzcMA/7a6Ag+GSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDExNTMzM1oXDTI1MDcyMzExNTMzM1owLzEtMCsGA1UEAxMk OWQ3ZWEyYjQtZWQwNi00YzUwLWI0OGMtMzJjODJiMTc3MjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqPrtPXE7LA9hv+6Ni4PggICfaOq9EwH8gNc Gh6z28WWKSRavgqYsv2N3YMadFXX+BIwaCppMcL+DVklNtdpar4qti5MK+TckHve dV6BEIJ66+KoiJpc/G5Ie9kIr7VTH8EPKavY7DBAGnX8YX+exnBkWR99FldcTEkQ tMncmo8lmsHaqUuwDONKkIhpy0necSW+4mCM5vxBWGnVa1D3vZ84+y9UyYr02/Gb SwaIclKxbh/BIdoxsWhDGFCcifVgIRyoAL+HrMhTLVjvXIDu21jUEduItHK/rEdW MAMeXGrnnYF0NRIqjOMntaQD5X2Hc82k/S5oraAd80zSQcMdbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4AeI3XfTa/ft9m80oF0z5H8AZEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWZiM2EyNDktOTIzZS0z YTA3LTkwZjMtNzg3ZTJiMDhiNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRe/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfqtjs3J9ffkXTHYqBkpjfxeQKhWZVq52JZQJxenbd7OPJV6A+vPrW+ kXdEkDg8KzLo0X54SehQfYM8yOm2Rsw/VhxO5ynVkISm+bX77JEMk32nnlRd89LN DnV5oAiypGaSjj5rqLZCq/wWLfXzi3k8Iy53Mn3N04reSdzAhZAI8ETaMNd2JAQG VKrg0yuonwCAZ9pua7hNb2nRmeI1Ou2PwUGR5ga3cJcWkTC7M2ZDOJX1+PmLUCJS JzUxNpUpNXTHqzGslDQ88jY2aHDI6VZsyV4Z9JxczFECacfZMsz7mfZ0PIN5vhGq KOpzg7b1dceYC6CVB0tQfcgIgbMSqls= -----END CERTIFICATE-----Generated at Sat Apr 26 18:35:38 2025 by rpki-client