$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de6faab4-4b6a-3bbf-84b1-280f3491cade.roa File: de6faab4-4b6a-3bbf-84b1-280f3491cade.roa (raw, json) Hash identifier: rlB5Rw+0MMl/sQ2OGygQsBldkcNvQP4LnCEVYn0APwc= Subject key identifier: B2:10:74:86:B3:25:B5:30:B1:93:87:3A:4E:ED:2F:6E:DE:F6:6B:D8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA42F913E13A57248E0A00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de6faab4-4b6a-3bbf-84b1-280f3491cade.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.19.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:42:f9:13:e1:3a:57:24:8e:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=f462df6f-18e6-4623-b2fb-ac004d3afbe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:62:1b:5c:07:12:fc:0f:ac:16:34:c2:da:f1: d7:43:67:b6:84:af:9f:4b:5c:9e:e4:d7:24:c1:eb: a1:b1:fb:3a:17:4b:05:4d:bc:70:ea:9f:a7:75:ee: 32:30:2a:fc:a7:57:d2:69:7e:65:b6:4f:b6:6e:6f: b8:10:67:69:81:b4:d8:1a:7a:d6:3b:6e:b5:20:e8: 46:c4:e5:01:ae:d3:57:81:24:c3:3e:e8:f0:60:3e: b3:33:de:af:a8:7e:2e:cc:63:ac:93:d1:bd:f6:1b: 40:fc:64:b0:2b:2d:3f:1f:4c:ec:17:2e:a5:90:6c: 16:16:04:0b:9f:78:78:fe:bc:ba:e3:43:e0:03:71: 29:b1:01:69:e0:35:42:5e:2c:82:53:3c:f2:ae:33: dc:46:17:a5:8a:68:c9:77:11:ba:82:6b:bd:21:c2: b5:71:9d:de:ac:08:5e:d0:bb:15:da:30:ef:56:55: 4f:54:e5:7d:64:9e:33:b3:7c:28:4f:69:14:67:c3: c9:c5:6b:ef:9e:68:64:c8:5e:de:4b:88:f5:49:00: 1a:d6:aa:b8:28:4f:77:7a:f0:1d:ac:bb:e9:cd:90: eb:d1:cb:e0:26:1e:15:a0:c2:92:5f:71:f9:a6:89: f4:53:0a:c8:8d:ab:52:44:fe:76:f7:53:57:12:18: d3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:10:74:86:B3:25:B5:30:B1:93:87:3A:4E:ED:2F:6E:DE:F6:6B:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/de6faab4-4b6a-3bbf-84b1-280f3491cade.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:61:f3:f8:b1:3b:ee:58:c9:b1:ac:b7:3a:f7:f6:77:34:e7: f8:54:51:9a:d4:72:a1:1d:87:54:39:47:24:44:90:ed:92:64: 89:2a:9e:23:ff:ec:0a:61:34:d8:d4:bf:77:66:27:d6:3e:6e: 81:b8:b5:fd:ee:7d:bf:34:cf:f0:77:3c:5b:a6:91:57:73:f0: 88:fe:83:a5:40:9f:e2:bc:9d:81:c5:1c:66:dc:d7:34:73:36: 5f:a1:e1:ed:45:22:ce:59:30:c4:ff:4b:a0:d6:47:91:7d:08: 45:08:5a:32:15:50:d1:66:c2:4c:e4:2c:75:47:fd:a8:a3:d9: ff:46:e6:bf:bb:ca:7f:5d:f8:8b:4b:cb:d2:ae:93:fa:b5:7e: b2:51:a6:bc:c0:42:e3:a0:bb:ca:99:f5:96:77:f6:1a:c0:50: ed:31:a8:ca:90:75:c0:70:30:e5:a1:17:a9:1e:4b:c8:34:fe: d4:1c:3b:a2:8a:9f:10:5b:03:8c:37:d4:6c:35:bb:95:92:3a: c7:c8:81:b7:48:d1:44:1c:0a:d3:28:49:33:4e:3d:f7:e9:de: 4e:10:2b:f5:0d:f5:c8:41:ad:90:b1:a3:a6:95:31:eb:04:81: d9:dd:fc:4b:6b:d1:3d:2e:a1:38:97:42:88:96:b0:39:2b:4a: cd:c8:bd:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkukL5E+E6VySOCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZjQ2MmRmNmYtMThlNi00NjIzLWIyZmItYWMwMDRkM2FmYmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGIbXAcS/A+sFjTC2vHXQ2e2hK+fS1ye5Nck weuhsfs6F0sFTbxw6p+nde4yMCr8p1fSaX5ltk+2bm+4EGdpgbTYGnrWO261IOhG xOUBrtNXgSTDPujwYD6zM96vqH4uzGOsk9G99htA/GSwKy0/H0zsFy6lkGwWFgQL n3h4/ry640PgA3EpsQFp4DVCXiyCUzzyrjPcRhelimjJdxG6gmu9IcK1cZ3erAhe 0LsV2jDvVlVPVOV9ZJ4zs3woT2kUZ8PJxWvvnmhkyF7eS4j1SQAa1qq4KE93evAd rLvpzZDr0cvgJh4VoMKSX3H5pon0UwrIjatSRP5291NXEhjTgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIQdIazJbUwsZOHOk7tL27e9mvYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGU2ZmFhYjQtNGI2YS0z YmJmLTg0YjEtMjgwZjM0OTFjYWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRNhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5h8/ixO+5YybGstzr39nc05/hUUZrUcqEdh1Q5RyREkO2SZIkqniP/ 7AphNNjUv3dmJ9Y+boG4tf3ufb80z/B3PFumkVdz8Ij+g6VAn+K8nYHFHGbc1zRz Nl+h4e1FIs5ZMMT/S6DWR5F9CEUIWjIVUNFmwkzkLHVH/aij2f9G5r+7yn9d+ItL y9Kuk/q1frJRprzAQuOgu8qZ9ZZ39hrAUO0xqMqQdcBwMOWhF6keS8g0/tQcO6KK nxBbA4w31Gw1u5WSOsfIgbdI0UQcCtMoSTNOPffp3k4QK/UN9chBrZCxo6aVMesE gdnd/Etr0T0uoTiXQoiWsDkrSs3IvZI= -----END CERTIFICATE-----Generated at Sun Jun 15 14:56:38 2025 by rpki-client