$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf573940-4999-30dc-8a74-589e5c1d1f58.roa File: cf573940-4999-30dc-8a74-589e5c1d1f58.roa (raw, json) Hash identifier: OnyZHBaLnp1MUYun6GgnP5sbbiC3Lg77T2uPANJY0pw= Subject key identifier: 34:8E:6B:F2:BE:2A:26:C6:C8:AA:3E:E4:8D:65:3F:50:D4:F9:A5:73 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA4407964D9F15DFAE1F80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf573940-4999-30dc-8a74-589e5c1d1f58.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.23.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:44:07:96:4d:9f:15:df:ae:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=563d041b-21b9-4406-a097-9025622857f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a8:0f:9c:88:f8:96:73:11:34:67:ef:8d:72: 6c:37:08:82:f2:b2:cb:3a:27:9d:87:16:32:6a:3a: 0a:8e:58:e7:e1:ed:d8:1c:16:70:ba:5d:a8:02:30: 1a:ac:a5:ed:bf:d6:77:ca:7f:55:91:72:30:0e:5a: 2b:23:4d:c2:10:af:55:00:7f:aa:ea:32:e5:e9:7c: 15:22:b4:70:3f:fb:61:fe:24:95:2f:45:81:2a:33: 35:85:5b:10:a3:4c:15:f4:69:bd:c5:a9:0e:13:97: a0:50:4c:98:15:4c:5e:16:0b:f1:89:6f:6e:6c:2d: ed:04:ed:1d:6c:3a:1c:42:59:db:8b:0f:e1:ab:36: 29:6d:fb:00:31:8d:99:f7:cb:f3:ec:f7:af:3c:be: a7:ff:b5:3f:5e:2c:16:8b:94:66:4c:3e:e5:2b:2e: 39:29:ed:b8:38:5a:4d:1d:6d:6f:05:22:24:a3:48: 9b:27:e5:72:5b:36:f5:51:b6:3e:72:8b:47:a7:41: 65:81:c2:65:46:4b:b9:75:c2:bf:4a:93:25:62:16: 66:49:2b:5d:32:64:01:c7:a1:70:d6:8f:48:3b:7b: ff:70:57:3d:f3:1c:ec:c9:b8:c2:a8:21:d0:93:3b: 11:89:8d:d2:bd:14:3e:44:70:d7:cd:0a:ea:1a:b5: 84:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:8E:6B:F2:BE:2A:26:C6:C8:AA:3E:E4:8D:65:3F:50:D4:F9:A5:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf573940-4999-30dc-8a74-589e5c1d1f58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:6c:18:e0:98:6e:09:80:39:86:74:b9:f0:56:58:0b:85:5f: a1:9b:4b:45:79:c6:ac:53:b4:0d:6a:f1:ee:4d:26:24:3e:90: 10:b0:be:44:8d:08:9d:43:d0:6a:6b:03:f9:32:30:83:da:4d: 25:49:ca:76:6d:62:fd:7c:8f:0f:d9:ad:ca:c3:26:b3:6b:ad: ac:03:49:dd:2b:24:ee:7e:bd:22:b8:de:84:b2:d1:db:66:2f: 54:1f:0c:e9:c4:97:ba:0b:f2:64:d3:02:2f:d4:73:cf:98:1d: 79:4b:ff:d5:8a:f0:61:b2:03:01:9d:41:e0:ce:1c:42:5a:58: fd:df:68:ad:21:24:5e:03:4b:e0:2f:8c:b5:c7:f5:ba:81:c8: 0a:76:7f:40:0f:32:27:76:1c:ac:81:ec:27:31:a8:7a:56:dc: a7:28:b1:bc:2f:af:48:b2:be:b6:6d:ea:06:e3:ac:88:4a:eb: 40:b1:c0:7c:77:f7:cd:a5:1b:32:ab:2e:f6:77:08:67:18:96: e5:59:8e:41:4c:4b:02:b1:fb:b0:02:84:17:b3:8c:d3:08:fb: 4b:a5:66:ee:c7:e0:0b:c5:05:20:e4:d7:cd:3c:e6:ca:a1:dc: 9d:38:ca:43:5a:8b:e0:6c:91:0d:bf:b6:61:1f:66:78:8e:2f: fc:db:18:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkukQHlk2fFd+uH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTYzZDA0MWItMjFiOS00NDA2LWEwOTctOTAyNTYyMjg1N2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6gPnIj4lnMRNGfvjXJsNwiC8rLLOiedhxYy ajoKjljn4e3YHBZwul2oAjAarKXtv9Z3yn9VkXIwDlorI03CEK9VAH+q6jLl6XwV IrRwP/th/iSVL0WBKjM1hVsQo0wV9Gm9xakOE5egUEyYFUxeFgvxiW9ubC3tBO0d bDocQlnbiw/hqzYpbfsAMY2Z98vz7PevPL6n/7U/XiwWi5RmTD7lKy45Ke24OFpN HW1vBSIko0ibJ+VyWzb1UbY+cotHp0FlgcJlRku5dcK/SpMlYhZmSStdMmQBx6Fw 1o9IO3v/cFc98xzsybjCqCHQkzsRiY3SvRQ+RHDXzQrqGrWEvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSOa/K+KibGyKo+5I1lP1DU+aVzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2Y1NzM5NDAtNDk5OS0z MGRjLThhNzQtNTg5ZTVjMWQxZjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRcKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRsGOCYbgmAOYZ0ufBWWAuFX6GbS0V5xqxTtA1q8e5NJiQ+kBCwvkSN CJ1D0GprA/kyMIPaTSVJynZtYv18jw/ZrcrDJrNrrawDSd0rJO5+vSK43oSy0dtm L1QfDOnEl7oL8mTTAi/Uc8+YHXlL/9WK8GGyAwGdQeDOHEJaWP3faK0hJF4DS+Av jLXH9bqByAp2f0APMid2HKyB7CcxqHpW3Kcosbwvr0iyvrZt6gbjrIhK60CxwHx3 982lGzKrLvZ3CGcYluVZjkFMSwKx+7AChBezjNMI+0ulZu7H4AvFBSDk18085sqh 3J04ykNai+BskQ2/tmEfZniOL/zbGBg= -----END CERTIFICATE-----Generated at Sun Apr 27 00:17:43 2025 by rpki-client