$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e862efb7-ebc0-3290-8ab0-d8c7a08ee6a3.roa File: e862efb7-ebc0-3290-8ab0-d8c7a08ee6a3.roa (raw, json) Hash identifier: kstFJHFvmibXGF6u1GmCvzxxvIYKhAEyT7GPffgkoLE= Subject key identifier: 37:32:A8:0F:AC:51:66:5C:3F:AA:79:A6:4D:0C:77:47:E0:69:85:97 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784BC59795E75D69A3CAD80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e862efb7-ebc0-3290-8ab0-d8c7a08ee6a3.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.23.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:bc:59:79:5e:75:d6:9a:3c:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=540a5e98-b3ce-4fb9-91b8-b2c272eb7ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8b:9b:97:bf:be:6a:ab:48:0a:82:bc:1a:7f: 49:83:ef:68:e4:97:e2:6d:4b:83:3c:f3:9e:03:89: 81:0f:c8:f8:e7:8c:c5:30:50:fb:ba:11:ad:bb:d0: 02:0f:08:d0:7c:01:18:26:b2:f6:d4:52:44:ae:36: cd:ec:db:db:d3:43:e7:be:56:9e:a9:04:f7:40:23: 92:2b:3e:62:97:e2:84:bf:ad:05:44:e1:6c:2b:68: f3:3d:ce:d8:8e:0b:26:98:3f:3f:6c:eb:b0:5f:62: a5:b6:d0:3b:05:fd:89:46:9a:8e:fb:32:51:f5:a8: 55:ff:ac:7f:fb:86:e9:d9:79:74:91:3a:6f:86:69: 00:95:6d:78:65:61:bb:d2:42:f7:d0:46:05:a7:75: 47:48:9d:8e:dd:cb:ba:92:93:53:c2:8d:8f:8b:78: 82:c4:9c:ba:29:75:c0:e4:58:5a:93:1e:b8:c7:77: c4:01:b8:63:c8:44:2d:4b:a6:07:3b:16:22:a5:b0: 1c:b1:80:c1:9e:39:b1:ad:fc:92:41:0c:ce:d3:20: 9e:03:f0:5a:36:4f:d2:ff:bc:0f:af:da:f3:c2:88: 3a:ff:95:ff:1b:d0:8c:19:08:9a:b0:77:24:dd:c4: a2:c8:6f:af:73:87:68:2e:ea:6c:4c:b7:17:c8:5d: 13:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:32:A8:0F:AC:51:66:5C:3F:AA:79:A6:4D:0C:77:47:E0:69:85:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e862efb7-ebc0-3290-8ab0-d8c7a08ee6a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ea:52:d0:f4:82:87:8d:b3:af:72:7b:18:72:98:27:6e:0c: 14:a8:35:37:ac:49:0b:18:05:23:7d:55:9e:31:40:af:cf:e6: 43:5a:92:05:29:f2:7d:a7:6b:20:f6:ab:8e:44:5e:2a:be:7e: a5:7b:c0:69:88:7a:e4:38:9c:03:23:c9:c4:c6:41:9d:82:50: d9:33:37:ff:1c:07:d2:71:2e:d7:53:41:ac:08:f6:ba:7f:80: 46:cc:c3:a9:ca:4c:1c:03:fe:1c:1d:8b:3d:dd:81:3d:9c:6e: f0:ac:cc:03:7b:f5:4f:be:e5:26:2e:39:ac:20:5f:5f:2e:6c: 56:07:ab:09:19:47:77:f7:2a:1a:f5:55:c1:99:ac:66:f4:11: fc:95:cf:f0:8d:06:62:5c:82:5b:19:4e:6b:a6:d3:29:2b:10: 68:d4:48:69:6a:97:0d:1a:dc:bb:6b:30:e9:9d:96:2c:3d:6a: 15:62:2e:89:fc:3d:21:57:b0:eb:57:06:a8:93:d4:65:ea:b0: 22:11:0e:2f:0a:7a:0e:b6:0b:6d:2c:fa:f2:44:ba:ba:03:1e: 4d:99:79:8a:55:03:21:92:d4:45:33:40:20:8f:41:92:c5:87: f5:8a:89:3a:ff:a1:7c:80:40:6e:a9:6e:c2:e4:f8:d8:76:63: 76:8b:da:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhLxZeV511po8rYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NTQwYTVlOTgtYjNjZS00ZmI5LTkxYjgtYjJjMjcyZWI3ZWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloubl7++aqtICoK8Gn9Jg+9o5JfibUuDPPOe A4mBD8j454zFMFD7uhGtu9ACDwjQfAEYJrL21FJErjbN7Nvb00PnvlaeqQT3QCOS Kz5il+KEv60FROFsK2jzPc7YjgsmmD8/bOuwX2KlttA7Bf2JRpqO+zJR9ahV/6x/ +4bp2Xl0kTpvhmkAlW14ZWG70kL30EYFp3VHSJ2O3cu6kpNTwo2Pi3iCxJy6KXXA 5Fhakx64x3fEAbhjyEQtS6YHOxYipbAcsYDBnjmxrfySQQzO0yCeA/BaNk/S/7wP r9rzwog6/5X/G9CMGQiasHck3cSiyG+vc4doLupsTLcXyF0T7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcyqA+sUWZcP6p5pk0Md0fgaYWXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTg2MmVmYjctZWJjMC0z MjkwLThhYjAtZDhjN2EwOGVlNmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArReKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADqUtD0goeNs69yexhymCduDBSoNTesSQsYBSN9VZ4xQK/P5kNakgUp 8n2nayD2q45EXiq+fqV7wGmIeuQ4nAMjycTGQZ2CUNkzN/8cB9JxLtdTQawI9rp/ gEbMw6nKTBwD/hwdiz3dgT2cbvCszAN79U++5SYuOawgX18ubFYHqwkZR3f3Khr1 VcGZrGb0EfyVz/CNBmJcglsZTmum0ykrEGjUSGlqlw0a3LtrMOmdliw9ahViLon8 PSFXsOtXBqiT1GXqsCIRDi8Keg62C20s+vJEuroDHk2ZeYpVAyGS1EUzQCCPQZLF h/WKiTr/oXyAQG6pbsLk+Nh2Y3aL2qY= -----END CERTIFICATE-----Generated at Mon Apr 28 06:13:01 2025 by rpki-client