$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d434fc45-3a8d-3209-ad15-806cf9da7ca2.roa File: d434fc45-3a8d-3209-ad15-806cf9da7ca2.roa (raw, json) Hash identifier: XsdlxRd6HS+59dQKuVunkczUWSS+gdwetpXw2vdKeFo= Subject key identifier: DA:7D:1E:69:7B:05:94:9E:A1:EC:F1:CB:4C:AC:AF:5A:3E:42:0D:3E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA442C6EFC9C7C6322C540 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d434fc45-3a8d-3209-ad15-806cf9da7ca2.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.23.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:44:2c:6e:fc:9c:7c:63:22:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=5687d868-6892-43f5-921f-0f13597a0ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ee:14:d4:62:32:c8:5f:4e:fe:0e:2a:41:ad: 3c:e2:34:9d:19:1d:d6:2d:25:6e:29:b1:3b:3b:dc: f3:67:f7:01:4d:18:22:69:c2:02:aa:92:2b:c0:ed: d6:d1:e9:4e:50:d9:f3:ef:69:d6:7c:82:41:2d:63: 5b:6f:f1:97:15:44:b4:fb:8b:0b:58:c6:fc:a5:6a: 56:29:cf:c0:fb:e2:c7:ff:ab:ef:a0:65:83:09:27: 9f:22:da:69:20:4c:67:2c:81:30:50:8d:c7:2f:24: 5b:f4:b7:d0:8a:43:ae:78:54:49:ad:4b:c2:79:83: 20:62:ca:3b:55:10:53:39:75:5f:03:ec:41:fd:79: ee:2b:71:93:ce:c0:0e:23:75:57:28:12:fa:f2:94: de:ff:63:14:4b:a6:f4:22:55:e7:75:0f:fc:36:26: ae:fb:17:8a:05:9a:87:0e:fb:ad:42:11:df:e7:d8: 74:03:f8:3e:3d:a1:70:ec:28:3a:3f:c7:ca:42:f9: 67:db:cf:64:0d:e6:76:3c:94:85:ca:9e:08:f5:ce: 23:d7:c4:ab:1a:ad:d6:fc:0a:40:9e:1d:23:e2:06: 4a:28:06:b3:59:8d:7e:10:0a:48:b8:bf:60:5c:4c: 74:e0:c1:c8:f9:e4:f5:c6:a1:1c:a7:49:c3:00:41: e4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7D:1E:69:7B:05:94:9E:A1:EC:F1:CB:4C:AC:AF:5A:3E:42:0D:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d434fc45-3a8d-3209-ad15-806cf9da7ca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:37:3a:8b:b5:51:5c:25:49:b1:cc:08:92:e3:ef:cb:82:82: c1:8e:c0:31:20:47:c4:9e:47:a3:ff:b5:a1:9e:97:53:72:80: 85:21:0d:e5:4b:13:69:e5:48:57:bb:fe:45:79:e5:bc:c6:fc: 52:d2:d7:a2:b9:33:f5:77:c1:9a:db:52:25:8c:00:4f:12:0a: d1:3c:48:50:45:4a:60:fe:39:9b:d8:e0:45:c3:19:88:2d:07: fe:48:26:57:0d:06:39:75:c0:86:87:d7:cc:0f:b8:9c:c0:51: 12:ea:4f:33:01:68:53:67:96:27:df:03:9a:55:e8:9b:d1:22: d0:ed:b1:bb:98:3e:1d:b6:c3:5b:cf:e9:54:25:94:97:e9:50: 3f:ac:86:bb:b1:0b:5d:f7:54:11:c8:89:fa:6b:97:d2:7d:29: 87:aa:39:1e:05:17:18:d8:13:12:5c:b4:6b:11:88:89:36:64: c4:8a:30:d1:c6:14:41:34:10:27:f1:1d:e2:36:68:18:16:5b: a0:20:75:8a:c9:53:fe:1e:73:db:bf:6f:99:c2:a1:95:ad:b6: d3:eb:0d:13:88:e7:55:30:49:ee:a0:cf:42:9a:7b:cb:76:ea: 2d:b1:4c:3d:f4:3a:7f:b3:5b:e8:1c:56:9f:f5:a4:07:d7:52: b5:28:70:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkukQsbvycfGMixUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTY4N2Q4NjgtNjg5Mi00M2Y1LTkyMWYtMGYxMzU5N2EwZWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje4U1GIyyF9O/g4qQa084jSdGR3WLSVuKbE7 O9zzZ/cBTRgiacICqpIrwO3W0elOUNnz72nWfIJBLWNbb/GXFUS0+4sLWMb8pWpW Kc/A++LH/6vvoGWDCSefItppIExnLIEwUI3HLyRb9LfQikOueFRJrUvCeYMgYso7 VRBTOXVfA+xB/XnuK3GTzsAOI3VXKBL68pTe/2MUS6b0IlXndQ/8Niau+xeKBZqH DvutQhHf59h0A/g+PaFw7Cg6P8fKQvln289kDeZ2PJSFyp4I9c4j18SrGq3W/ApA nh0j4gZKKAazWY1+EApIuL9gXEx04MHI+eT1xqEcp0nDAEHk4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNp9Hml7BZSeoezxy0ysr1o+Qg0+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDQzNGZjNDUtM2E4ZC0z MjA5LWFkMTUtODA2Y2Y5ZGE3Y2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRdLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHY3Oou1UVwlSbHMCJLj78uCgsGOwDEgR8SeR6P/taGel1NygIUhDeVL E2nlSFe7/kV55bzG/FLS16K5M/V3wZrbUiWMAE8SCtE8SFBFSmD+OZvY4EXDGYgt B/5IJlcNBjl1wIaH18wPuJzAURLqTzMBaFNnliffA5pV6JvRItDtsbuYPh22w1vP 6VQllJfpUD+shruxC133VBHIifprl9J9KYeqOR4FFxjYExJctGsRiIk2ZMSKMNHG FEE0ECfxHeI2aBgWW6AgdYrJU/4ec9u/b5nCoZWtttPrDROI51UwSe6gz0Kae8t2 6i2xTD30On+zW+gcVp/1pAfXUrUocEM= -----END CERTIFICATE-----Generated at Sun Jun 15 15:07:46 2025 by rpki-client