$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0b3f8ab-1cd2-3672-926f-40c10a3d9207.roa File: d0b3f8ab-1cd2-3672-926f-40c10a3d9207.roa (raw, json) Hash identifier: mybw3Nd7rLdViLz1a4fnbW+DE79GWibJQObZq8a0XhI= Subject key identifier: D4:A1:BC:42:53:0C:50:0F:B2:29:AC:C0:BA:43:6B:44:5B:8A:6D:6B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF4B1B4F3BBE4FBEE215D0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0b3f8ab-1cd2-3672-926f-40c10a3d9207.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.24.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:4b:1b:4f:3b:be:4f:be:e2:15:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=13164830-d7b5-4172-8953-ee4ec16af631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1e:eb:4c:3c:af:05:db:ef:4e:33:3e:b1:69: 0e:74:b5:2e:6c:36:2c:45:38:3c:0f:41:25:76:dc: cd:41:b2:94:ea:26:bc:88:45:dc:09:e0:20:e0:21: c1:7d:52:78:e0:c8:c5:8e:06:13:66:12:8a:7e:27: 3d:d7:78:0d:b1:7e:40:35:45:d3:ad:29:a6:f7:01: be:1c:2b:f5:df:bd:86:b7:5c:c0:fd:ca:30:b5:1a: ed:49:8c:5c:32:62:d6:6f:b6:c6:5b:69:e6:e0:3a: 02:bf:19:5d:76:02:ea:cd:2c:b2:f8:39:58:39:8a: dc:f8:d8:fd:2d:c8:70:e8:ee:05:ec:db:f3:c7:dd: b8:84:12:d3:a8:30:3a:2f:48:09:8f:b7:00:57:88: 52:ce:2a:90:bc:71:47:12:01:ee:18:e1:af:cc:43: 0b:19:2d:69:41:a5:ba:a6:5d:f7:dd:e2:50:47:3a: 63:55:d7:78:89:70:20:14:33:8e:f7:84:7f:6f:51: 53:91:c3:2d:2e:ee:c6:2d:19:91:30:d7:68:e1:a3: 66:cb:e4:b9:1e:00:4d:00:de:58:28:9b:b7:8e:45: 9c:d0:7d:db:41:d3:3f:56:5e:b0:ef:98:9e:53:a9: 39:e8:f4:cb:85:6e:ea:f8:1b:86:ce:b0:fd:a8:e6: 41:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A1:BC:42:53:0C:50:0F:B2:29:AC:C0:BA:43:6B:44:5B:8A:6D:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0b3f8ab-1cd2-3672-926f-40c10a3d9207.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:34:a4:cc:b9:17:04:54:b2:a1:d2:be:9e:68:f6:2d:09:5e: d0:94:f2:3f:ad:1d:76:3c:ce:1a:ef:f1:82:ae:aa:89:dd:e3: e3:7c:c8:25:93:6e:26:08:72:c5:fa:77:9e:65:7c:05:8b:6f: ac:2b:9d:62:34:e1:c8:77:26:89:42:31:03:be:05:29:5b:2a: f5:98:e9:26:62:94:6e:d9:27:96:89:80:36:f0:cb:d8:d9:e1: 53:5e:e8:63:43:9d:54:09:2b:69:9b:35:32:b2:6a:e5:48:63: ac:03:30:d3:ae:0f:cc:63:37:80:77:db:c1:94:11:4f:f4:79: db:63:24:b6:0a:cf:6f:2c:ca:b8:0a:a7:2c:86:19:58:59:5c: 48:04:5f:60:4f:8e:97:d8:c4:21:61:90:2c:38:bc:1f:2c:3a: 9a:c0:3d:3c:f9:f8:8d:fb:41:8e:87:a0:b1:19:11:ad:e6:8e: 71:1a:26:22:2a:50:58:c5:03:a0:41:62:3f:a0:c0:91:79:d4: 03:58:a2:31:60:b2:0f:41:71:4a:f5:63:c4:07:92:d4:1c:14: 60:6d:f7:04:59:92:c2:c6:e8:f1:64:9a:69:14:83:e4:2c:ce: 87:9c:a6:c9:3f:f4:38:51:43:af:91:9f:cc:b5:81:da:26:80: b2:08:4a:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh70sbTzu+T77iFdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk MTMxNjQ4MzAtZDdiNS00MTcyLTg5NTMtZWU0ZWMxNmFmNjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx7rTDyvBdvvTjM+sWkOdLUubDYsRTg8D0El dtzNQbKU6ia8iEXcCeAg4CHBfVJ44MjFjgYTZhKKfic913gNsX5ANUXTrSmm9wG+ HCv1372Gt1zA/cowtRrtSYxcMmLWb7bGW2nm4DoCvxlddgLqzSyy+DlYOYrc+Nj9 Lchw6O4F7Nvzx924hBLTqDA6L0gJj7cAV4hSziqQvHFHEgHuGOGvzEMLGS1pQaW6 pl333eJQRzpjVdd4iXAgFDOO94R/b1FTkcMtLu7GLRmRMNdo4aNmy+S5HgBNAN5Y KJu3jkWc0H3bQdM/Vl6w75ieU6k56PTLhW7q+BuGzrD9qOZB4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNShvEJTDFAPsimswLpDa0Rbim1rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDBiM2Y4YWItMWNkMi0z NjcyLTkyNmYtNDBjMTBhM2Q5MjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRgMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG80pMy5FwRUsqHSvp5o9i0JXtCU8j+tHXY8zhrv8YKuqond4+N8yCWT biYIcsX6d55lfAWLb6wrnWI04ch3JolCMQO+BSlbKvWY6SZilG7ZJ5aJgDbwy9jZ 4VNe6GNDnVQJK2mbNTKyauVIY6wDMNOuD8xjN4B328GUEU/0edtjJLYKz28syrgK pyyGGVhZXEgEX2BPjpfYxCFhkCw4vB8sOprAPTz5+I37QY6HoLEZEa3mjnEaJiIq UFjFA6BBYj+gwJF51ANYojFgsg9BcUr1Y8QHktQcFGBt9wRZksLG6PFkmmkUg+Qs zoecpsk/9DhRQ6+Rn8y1gdomgLIISkI= -----END CERTIFICATE-----Generated at Mon Apr 28 09:10:48 2025 by rpki-client