$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d81892c4-8d4a-3b81-8a8c-e826945c07d1.roa File: d81892c4-8d4a-3b81-8a8c-e826945c07d1.roa (raw, json) Hash identifier: VxEz0XFolKG1H0G/xm3q+v8YMlOzcfS2TZW6BVC5NdM= Subject key identifier: 86:44:DE:A2:C6:48:DB:9F:6F:35:BF:24:C9:80:46:C6:66:93:2B:62 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A61F31960643AF014A874980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d81892c4-8d4a-3b81-8a8c-e826945c07d1.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 30036 IP address blocks: 173.17.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:31:96:06:43:af:01:4a:87:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=686aa5e0-4144-4222-bf73-522156ef2c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:be:2f:b8:5c:e9:f4:62:0b:64:59:34:bf:44: ef:f6:a9:1f:39:8d:0d:d9:3d:10:c4:2f:ef:97:04: 3a:ef:7e:a7:98:b0:14:07:8c:62:57:e2:92:4c:11: 94:dc:42:98:9f:02:82:da:8f:36:d6:e8:a5:ad:25: aa:fa:7a:d1:7c:ed:5e:ec:51:d1:cc:43:db:fd:28: 36:ca:76:9d:7b:23:20:89:93:b3:62:12:b7:88:03: c8:3e:f0:0f:af:52:72:0c:a4:9a:dc:e9:86:30:89: 2a:c5:4c:00:e7:c5:97:dc:2a:6e:5a:41:0b:2f:d1: c0:b8:83:98:ee:cb:bf:f3:68:25:49:78:14:e5:02: d9:8a:2b:65:82:2e:b6:a5:cb:4a:98:5d:cb:d9:44: 06:99:ef:fd:06:eb:09:00:31:af:1b:9c:e8:22:91: 1e:eb:e3:07:5f:97:c2:8c:cb:cc:f4:ac:aa:f5:47: c5:d7:1e:5f:99:9c:a2:61:7d:a2:12:13:a7:25:37: 9c:af:da:fc:c1:22:38:8f:df:3c:9a:1e:b1:c6:02: 78:6f:0b:1d:d6:1c:bc:1b:2e:11:4a:05:5b:b5:48: f9:f5:03:6c:8b:89:ce:f1:87:7c:aa:c7:9b:65:0b: b3:a0:94:14:15:96:a8:20:86:00:45:df:b8:e5:b8: 11:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:44:DE:A2:C6:48:DB:9F:6F:35:BF:24:C9:80:46:C6:66:93:2B:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d81892c4-8d4a-3b81-8a8c-e826945c07d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:6b:80:0d:e3:f1:d7:96:87:9b:dc:a9:15:a7:e7:d5:68:4e: b7:1c:0d:d4:1e:1b:8f:e5:7b:ab:a5:53:e0:a4:29:1e:45:18: 13:a1:0a:98:6c:26:e8:0c:dd:fc:82:4b:45:b2:e3:d5:da:ff: 2e:af:8c:30:e5:5b:b6:ad:af:de:25:ee:81:40:3d:67:28:6b: 65:71:92:dc:ab:21:f9:1d:00:0f:af:1a:71:55:8b:a2:55:67: 0d:3a:eb:1a:73:74:8e:c4:c3:6b:c7:12:e2:f2:03:04:51:24: 58:17:f4:06:88:d7:d1:ff:e5:d1:d2:b0:46:a7:10:03:ae:3d: bf:16:61:d7:7c:26:b4:e1:7d:23:37:a7:92:b9:15:13:b4:e2: 5e:87:86:15:83:c8:a4:a4:73:e9:f8:55:bf:9b:f2:e2:26:47: 34:75:77:ec:56:0c:ec:d3:b0:11:d8:a0:47:aa:78:ac:82:63: b1:d9:55:3d:2a:c1:67:e3:f2:b0:a7:d1:f9:b6:de:e5:4d:df: bd:1b:b5:01:5b:08:7e:3d:66:0a:5d:05:06:78:9b:87:3d:31: 95:cc:df:6f:1e:71:1d:e7:2e:83:b9:33:61:af:27:32:b5:bd: 6d:89:55:71:49:d8:e2:b0:4c:aa:e5:01:61:e2:af:9d:8e:6f: 10:4f:40:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHzGWBkOvAUqHSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk Njg2YWE1ZTAtNDE0NC00MjIyLWJmNzMtNTIyMTU2ZWYyYzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb4vuFzp9GILZFk0v0Tv9qkfOY0N2T0QxC/v lwQ6736nmLAUB4xiV+KSTBGU3EKYnwKC2o821uilrSWq+nrRfO1e7FHRzEPb/Sg2 ynadeyMgiZOzYhK3iAPIPvAPr1JyDKSa3OmGMIkqxUwA58WX3CpuWkELL9HAuIOY 7su/82glSXgU5QLZiitlgi62pctKmF3L2UQGme/9BusJADGvG5zoIpEe6+MHX5fC jMvM9Kyq9UfF1x5fmZyiYX2iEhOnJTecr9r8wSI4j988mh6xxgJ4bwsd1hy8Gy4R SgVbtUj59QNsi4nO8Yd8qsebZQuzoJQUFZaoIIYARd+45bgR0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZE3qLGSNufbzW/JMmARsZmkytiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDgxODkyYzQtOGQ0YS0z YjgxLThhOGMtZTgyNjk0NWMwN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRErMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFrgA3j8deWh5vcqRWn59VoTrccDdQeG4/le6ulU+CkKR5FGBOhCphs JugM3fyCS0Wy49Xa/y6vjDDlW7atr94l7oFAPWcoa2VxktyrIfkdAA+vGnFVi6JV Zw066xpzdI7Ew2vHEuLyAwRRJFgX9AaI19H/5dHSsEanEAOuPb8WYdd8JrThfSM3 p5K5FRO04l6HhhWDyKSkc+n4Vb+b8uImRzR1d+xWDOzTsBHYoEeqeKyCY7HZVT0q wWfj8rCn0fm23uVN370btQFbCH49ZgpdBQZ4m4c9MZXM328ecR3nLoO5M2GvJzK1 vW2JVXFJ2OKwTKrlAWHir52ObxBPQNs= -----END CERTIFICATE-----Generated at Sun Apr 27 22:21:01 2025 by rpki-client