$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c5973860-b5e2-3692-8123-91559c744412.roa File: c5973860-b5e2-3692-8123-91559c744412.roa (raw, json) Hash identifier: L9anA46SRZwIhFIUevV3miXaWDIXmqRL1Z0uNwUczKI= Subject key identifier: 59:C2:93:70:2A:84:A1:67:86:3D:77:95:EA:43:A9:93:D5:B7:84:55 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA33233CE1B7BD4B1EB800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c5973860-b5e2-3692-8123-91559c744412.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.19.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:33:23:3c:e1:b7:bd:4b:1e:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=9c447486-4d95-45b8-9946-5d289bceba9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8c:5d:38:3a:e4:a0:b8:c8:7e:c8:a1:5c:78: 64:07:dd:74:13:72:ce:79:ab:71:53:bc:20:9c:d1: 21:96:b2:c3:0d:d7:04:07:08:97:dd:3f:39:6d:6c: 8c:7b:20:b5:ac:50:2e:45:84:00:b4:45:45:36:7a: c7:17:67:4a:15:dc:4d:28:ce:8a:ba:c6:03:a9:7e: e4:79:07:fd:ab:2d:75:3e:31:67:6b:30:5b:ed:74: 12:06:2d:5d:13:e8:b8:bc:ab:2b:bf:bf:8c:59:82: b5:1e:15:b1:85:bd:ab:95:c2:39:a1:9e:dd:65:2c: 13:01:69:90:38:0b:8f:78:4e:b9:f2:ef:44:52:d4: 18:47:d8:08:2b:36:49:d3:cc:06:17:38:91:98:6a: 8d:8d:ca:f3:6b:01:8f:fd:82:aa:e0:e1:fb:f2:e6: a8:4e:7b:94:bd:5c:f2:40:ad:ae:d9:a9:9d:0d:96: 0f:fd:4d:af:9e:b0:ba:52:2d:fd:c4:e6:ec:ff:5e: da:87:fd:bb:cb:be:38:fb:2f:d5:e7:97:ed:e2:cf: 87:08:8b:3a:15:79:86:e2:d2:97:fa:9d:ac:d1:bb: b0:6c:71:90:44:5a:42:76:cb:3a:da:8f:f5:e8:89: b9:eb:66:e9:57:eb:6e:02:4a:e0:40:a7:fd:23:8a: 30:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C2:93:70:2A:84:A1:67:86:3D:77:95:EA:43:A9:93:D5:B7:84:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c5973860-b5e2-3692-8123-91559c744412.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:49:c7:b8:bd:aa:8f:e4:dc:31:40:0a:14:39:f4:ca:da:90: a4:c0:e0:34:7d:95:9c:ef:c4:16:0b:a0:e5:47:39:e9:a0:ac: ad:eb:eb:05:8c:7f:9e:92:c9:9b:1f:ac:06:35:84:75:79:fa: 1d:f9:27:75:e8:f1:64:c3:c3:d6:07:fd:c7:0c:51:e7:94:cf: 10:7f:d9:25:fd:cb:4e:31:88:03:df:26:22:aa:e1:e6:63:ca: fd:c9:5a:2e:19:a1:c0:b5:d5:67:25:a9:21:b4:93:df:75:1a: dd:68:e8:7e:1e:a2:97:e9:97:a9:ac:69:15:7d:1b:9b:20:19: ad:f1:68:1a:6e:68:be:25:d0:37:37:13:89:28:28:d2:2f:e3: 43:f0:15:22:50:c1:41:d0:d1:99:20:23:35:22:9c:32:d0:17: 76:48:70:af:f1:ab:81:5c:79:f0:db:25:47:fa:90:26:33:7c: 5a:c4:a6:3b:49:2c:ff:4b:de:70:61:af:44:f0:84:0f:4f:ba: 17:65:5a:1f:5f:65:1d:95:2c:5a:7b:f1:26:d8:f4:f7:57:68: db:78:b5:fd:40:cb:55:a3:69:c4:66:5a:32:74:39:7a:3a:89: 55:20:f5:07:dd:2e:d4:b6:d0:c4:67:9e:8d:3f:b6:5d:f8:21: 4f:2d:42:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkujMjPOG3vUseuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OWM0NDc0ODYtNGQ5NS00NWI4LTk5NDYtNWQyODliY2ViYTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIxdODrkoLjIfsihXHhkB910E3LOeatxU7wg nNEhlrLDDdcEBwiX3T85bWyMeyC1rFAuRYQAtEVFNnrHF2dKFdxNKM6KusYDqX7k eQf9qy11PjFnazBb7XQSBi1dE+i4vKsrv7+MWYK1HhWxhb2rlcI5oZ7dZSwTAWmQ OAuPeE658u9EUtQYR9gIKzZJ08wGFziRmGqNjcrzawGP/YKq4OH78uaoTnuUvVzy QK2u2amdDZYP/U2vnrC6Ui39xObs/17ah/27y744+y/V55ft4s+HCIs6FXmG4tKX +p2s0buwbHGQRFpCdss62o/16Im562bpV+tuAkrgQKf9I4ow5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnCk3AqhKFnhj13lepDqZPVt4RVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzU5NzM4NjAtYjVlMi0z NjkyLTgxMjMtOTE1NTljNzQ0NDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRNSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZJx7i9qo/k3DFAChQ59MrakKTA4DR9lZzvxBYLoOVHOemgrK3r6wWM f56SyZsfrAY1hHV5+h35J3Xo8WTDw9YH/ccMUeeUzxB/2SX9y04xiAPfJiKq4eZj yv3JWi4ZocC11WclqSG0k991Gt1o6H4eopfpl6msaRV9G5sgGa3xaBpuaL4l0Dc3 E4koKNIv40PwFSJQwUHQ0ZkgIzUinDLQF3ZIcK/xq4FcefDbJUf6kCYzfFrEpjtJ LP9L3nBhr0TwhA9PuhdlWh9fZR2VLFp78SbY9PdXaNt4tf1Ay1WjacRmWjJ0OXo6 iVUg9QfdLtS20MRnno0/tl34IU8tQqg= -----END CERTIFICATE-----Generated at Mon Apr 28 23:45:33 2025 by rpki-client