$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba2d1514-9d7c-35e2-a12c-60e1c8423a18.roa File: ba2d1514-9d7c-35e2-a12c-60e1c8423a18.roa (raw, json) Hash identifier: 3i8kbYfcrpjzdbPY8YXRwT5MoTuWT3liX/7irOPy+/w= Subject key identifier: EB:44:0B:1F:B7:C7:E8:0D:97:4E:33:B6:A8:43:B4:32:24:68:52:07 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1CD749A34B02ECC7DAA8940 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba2d1514-9d7c-35e2-a12c-60e1c8423a18.roa Signing time: Thu 24 Apr 2025 11:52:56 +0000 ROA not before: Thu 24 Apr 2025 11:52:56 +0000 ROA not after: Wed 23 Jul 2025 11:52:56 +0000 asID: 19905 IP address blocks: 173.16.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:cd:74:9a:34:b0:2e:cc:7d:aa:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 11:52:56 2025 GMT Not After : Jul 23 11:52:56 2025 GMT Subject: CN=70092926-4cb9-470b-bd9c-dc8913327117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9b:27:ef:c9:24:36:18:45:c1:43:60:cc:9e: 67:19:c4:8e:09:f9:07:40:d6:cc:3c:f6:e7:3e:a3: 0e:b6:89:09:d0:c0:f9:fe:7c:0b:40:82:41:58:bb: cd:ea:06:a7:82:e7:86:94:50:aa:aa:0d:e7:99:01: 55:71:51:ca:cd:6b:f2:12:e6:1f:84:31:22:82:19: 3a:0f:9d:2d:22:a6:0e:68:1a:25:a0:21:eb:b5:3c: 84:02:11:a0:41:e9:e0:37:95:d2:26:50:14:2e:49: ec:48:ad:3c:47:f4:09:6f:50:61:44:08:81:2f:27: 7d:a2:14:cc:fb:d4:04:dd:74:88:58:6a:7f:23:c4: 30:f7:ab:52:39:21:e7:33:2b:23:eb:17:b4:28:35: 1a:c2:0f:b3:c1:db:e3:6f:df:a1:09:39:35:47:bb: e9:3c:bb:eb:aa:15:74:ae:f0:88:c8:1d:c8:38:5a: 79:29:a6:f0:fc:6f:05:c8:d4:60:e1:c3:6f:9f:7f: 26:2f:1c:4c:c6:4c:7c:8c:98:59:13:f0:f7:2c:08: 45:23:be:e5:2b:4e:f8:c1:51:f3:53:fe:91:1a:cb: da:54:14:ad:14:f4:64:02:07:4e:3a:d3:d4:20:d3: 8f:4c:78:07:3a:a2:ec:e3:77:b9:21:71:54:e2:3d: 4f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:44:0B:1F:B7:C7:E8:0D:97:4E:33:B6:A8:43:B4:32:24:68:52:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba2d1514-9d7c-35e2-a12c-60e1c8423a18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:1c:0f:8b:9c:d1:2a:0b:ca:a4:6e:49:e3:45:ff:c3:d2:a3: 2a:2e:ce:d9:60:41:04:07:7f:9e:ab:cd:e1:55:57:fb:d3:35: ba:96:da:a9:17:73:4f:8d:84:55:0e:45:5d:d5:bb:1d:34:c5: 42:51:e9:33:b0:c6:12:e5:6f:03:c7:bb:77:6d:85:ac:83:0c: 4c:42:01:7a:f0:07:66:36:64:83:7c:c5:2d:1e:a0:42:8e:09: 14:d9:84:c8:a0:96:76:bd:0f:54:00:e9:9a:00:ef:bc:4a:0b: 25:9a:d0:c7:d8:f6:ce:8a:92:6c:2a:38:43:ab:9d:8c:98:e6: 19:c5:d3:00:c7:32:b8:a7:50:a0:db:4e:75:9f:3f:ef:a0:90: 84:80:6c:5b:b5:d1:78:fa:86:94:b8:d9:73:db:f8:8f:8b:b3: 1c:fe:13:6c:7e:ee:5e:84:2e:c1:4e:63:70:3c:f0:2f:b3:63: 09:7a:54:d1:23:39:92:ee:1e:d3:f6:08:05:d1:4e:7b:55:6b: a9:1d:c7:3b:96:f4:11:bd:ac:a9:0c:86:7e:86:4a:3f:84:2f: e4:41:38:d4:b4:38:2a:6e:26:14:9d:61:ca:d6:9c:dc:c5:71: 59:e6:b3:ff:82:89:e9:99:3c:e7:61:68:d2:69:bd:bb:57:4b: d6:bd:f0:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhzXSaNLAuzH2qiUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDExNTI1NloXDTI1MDcyMzExNTI1NlowLzEtMCsGA1UEAxMk NzAwOTI5MjYtNGNiOS00NzBiLWJkOWMtZGM4OTEzMzI3MTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJsn78kkNhhFwUNgzJ5nGcSOCfkHQNbMPPbn PqMOtokJ0MD5/nwLQIJBWLvN6gangueGlFCqqg3nmQFVcVHKzWvyEuYfhDEighk6 D50tIqYOaBoloCHrtTyEAhGgQengN5XSJlAULknsSK08R/QJb1BhRAiBLyd9ohTM +9QE3XSIWGp/I8Qw96tSOSHnMysj6xe0KDUawg+zwdvjb9+hCTk1R7vpPLvrqhV0 rvCIyB3IOFp5Kabw/G8FyNRg4cNvn38mLxxMxkx8jJhZE/D3LAhFI77lK074wVHz U/6RGsvaVBStFPRkAgdOOtPUINOPTHgHOqLs43e5IXFU4j1PqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtECx+3x+gNl04ztqhDtDIkaFIHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmEyZDE1MTQtOWQ3Yy0z NWUyLWExMmMtNjBlMWM4NDIzYTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRARMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkcD4uc0SoLyqRuSeNF/8PSoyouztlgQQQHf56rzeFVV/vTNbqW2qkX c0+NhFUORV3Vux00xUJR6TOwxhLlbwPHu3dthayDDExCAXrwB2Y2ZIN8xS0eoEKO CRTZhMiglna9D1QA6ZoA77xKCyWa0MfY9s6KkmwqOEOrnYyY5hnF0wDHMrinUKDb TnWfP++gkISAbFu10Xj6hpS42XPb+I+Lsxz+E2x+7l6ELsFOY3A88C+zYwl6VNEj OZLuHtP2CAXRTntVa6kdxzuW9BG9rKkMhn6GSj+EL+RBONS0OCpuJhSdYcrWnNzF cVnms/+CiemZPOdhaNJpvbtXS9a98LE= -----END CERTIFICATE-----Generated at Sat Apr 26 15:51:26 2025 by rpki-client