$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d418cbd1-7ca3-359d-8800-c514565576e8.roa File: d418cbd1-7ca3-359d-8800-c514565576e8.roa (raw, json) Hash identifier: QaRtBRpMzmrR1wcyt5FISF5A6HJtYkYJpSD8vG41NZY= Subject key identifier: 10:3A:11:5F:29:E1:F9:BE:FE:78:7B:37:8F:B3:FB:3E:EE:A3:CB:91 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA055D335E6AD6C0661C00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d418cbd1-7ca3-359d-8800-c514565576e8.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.16.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:05:5d:33:5e:6a:d6:c0:66:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d52b903f-764d-4297-9afc-7746db330461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f8:c0:26:55:be:83:d9:86:18:cf:6a:fb:f6: be:0b:75:04:5b:7d:75:dc:6d:22:d9:44:c3:b1:48: bc:b6:48:e7:14:e3:cd:91:ee:50:94:13:a6:db:da: 88:c6:2b:7a:fb:94:84:8d:f4:87:29:af:3e:9b:b0: 57:6c:e6:7d:50:69:a0:ac:11:59:82:a4:6f:a6:e5: bd:9e:6e:5c:4d:a6:e4:c5:82:ac:54:91:b2:d3:25: 37:78:47:b5:c4:64:8b:9b:8a:5a:2f:41:78:39:89: 40:ec:1f:09:4e:5f:ec:9e:f7:5a:fa:60:e2:3b:5f: 2e:76:66:7f:b5:aa:55:a4:70:48:dc:71:31:80:61: ef:41:d6:2c:40:83:57:ea:01:30:c8:19:aa:04:9e: 23:59:17:74:08:4f:60:99:8b:d6:d8:95:f4:bb:51: 86:da:3d:11:7d:de:58:c6:2c:8b:71:51:f7:99:38: 9f:a3:71:1c:b3:67:ec:71:46:64:96:d8:af:5d:df: 0b:91:fc:22:21:b7:69:92:c4:4c:56:30:57:5b:f5: ef:50:95:f8:8d:f1:fa:c5:4d:cd:1d:f5:f6:8c:f5: 6d:02:2b:75:bb:bf:f4:6b:97:98:ef:99:62:1b:28: ce:d8:fb:76:04:68:50:03:2c:71:6c:62:3c:f4:d5: c2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3A:11:5F:29:E1:F9:BE:FE:78:7B:37:8F:B3:FB:3E:EE:A3:CB:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d418cbd1-7ca3-359d-8800-c514565576e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:2a:e8:1d:ed:db:2c:7e:a2:4a:5e:ce:10:23:52:3e:c6:75: 5a:d7:6b:8c:9d:ab:52:f3:13:cb:ab:b9:99:72:a7:09:00:d3: 61:f1:e0:66:03:91:ab:a6:a9:06:9b:a3:74:b3:1e:49:63:f0: 17:8d:2f:88:42:de:fb:33:1c:31:cb:c5:bb:ca:d5:a0:6f:7d: 00:7e:cd:2d:f8:be:f2:87:d2:2d:62:1e:8a:c0:5b:22:11:57: 8e:74:29:f0:d3:57:98:d7:1b:ba:03:2b:92:e9:49:43:98:61: 61:ce:c2:47:10:60:a8:d5:62:90:7b:3f:42:99:d6:01:16:39: 48:7f:c0:f4:78:46:fd:d5:93:2c:07:9c:97:dd:5a:40:92:e9: d4:8f:c8:86:f0:db:f5:a8:3f:3f:f9:34:1a:2d:3f:12:a6:18: 61:77:6b:f5:5c:78:d2:bb:3e:1a:31:7e:a7:00:94:ea:2c:44: b7:14:cf:a6:bd:8d:65:87:bd:8c:45:12:75:52:f7:23:66:84: fe:b2:52:5d:cb:f1:5a:3a:63:2e:b5:8d:8e:24:85:df:30:81: 29:06:6e:a3:5f:39:af:f0:12:92:1e:88:8f:77:ee:c4:c0:e7: 7e:49:42:b1:56:2c:04:db:42:fb:48:ba:37:80:76:09:92:6a: 10:fa:ec:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkugVdM15q1sBmHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDUyYjkwM2YtNzY0ZC00Mjk3LTlhZmMtNzc0NmRiMzMwNDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/jAJlW+g9mGGM9q+/a+C3UEW3113G0i2UTD sUi8tkjnFOPNke5QlBOm29qIxit6+5SEjfSHKa8+m7BXbOZ9UGmgrBFZgqRvpuW9 nm5cTabkxYKsVJGy0yU3eEe1xGSLm4paL0F4OYlA7B8JTl/snvda+mDiO18udmZ/ tapVpHBI3HExgGHvQdYsQINX6gEwyBmqBJ4jWRd0CE9gmYvW2JX0u1GG2j0Rfd5Y xiyLcVH3mTifo3Ecs2fscUZkltivXd8LkfwiIbdpksRMVjBXW/XvUJX4jfH6xU3N HfX2jPVtAit1u7/0a5eY75liGyjO2Pt2BGhQAyxxbGI89NXCJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBA6EV8p4fm+/nh7N4+z+z7uo8uRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDQxOGNiZDEtN2NhMy0z NTlkLTg4MDAtYzUxNDU2NTU3NmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgq6B3t2yx+okpezhAjUj7GdVrXa4ydq1LzE8uruZlypwkA02Hx4GYD kaumqQabo3SzHklj8BeNL4hC3vszHDHLxbvK1aBvfQB+zS34vvKH0i1iHorAWyIR V450KfDTV5jXG7oDK5LpSUOYYWHOwkcQYKjVYpB7P0KZ1gEWOUh/wPR4Rv3VkywH nJfdWkCS6dSPyIbw2/WoPz/5NBotPxKmGGF3a/VceNK7PhoxfqcAlOosRLcUz6a9 jWWHvYxFEnVS9yNmhP6yUl3L8Vo6Yy61jY4khd8wgSkGbqNfOa/wEpIeiI937sTA 535JQrFWLATbQvtIujeAdgmSahD67PQ= -----END CERTIFICATE-----Generated at Mon Apr 28 15:23:30 2025 by rpki-client