$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e8a4a207-02cb-31d1-9839-b150437e40a7.roa File: e8a4a207-02cb-31d1-9839-b150437e40a7.roa (raw, json) Hash identifier: 837E4uXDcbxD3LCjs7NFOjAVmmJl0ETq4IxILms9DjM= Subject key identifier: C9:85:01:E4:0D:25:6F:E8:48:F3:43:E0:8D:6B:37:A4:5F:BB:F8:A1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C486D41D81DC60514CB380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e8a4a207-02cb-31d1-9839-b150437e40a7.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.24.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:86:d4:1d:81:dc:60:51:4c:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=cfd8bab7-277f-4f81-8a7e-8ee30f2744bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:01:ba:63:da:e0:44:45:72:94:7d:83:51:4e: bd:44:54:e2:8f:c1:b7:9e:fe:56:00:7d:0f:53:20: 20:8e:03:fb:07:d5:25:7f:30:77:6b:64:0c:1f:ca: 8c:01:a9:86:c4:2a:b3:e0:14:fb:d6:14:0c:4e:56: b2:f6:a5:3a:b8:55:be:6b:eb:90:75:e8:22:bc:40: 6a:28:b4:47:37:5a:95:f5:96:b7:ac:be:79:f3:b7: e1:66:be:e1:be:bb:de:0b:f7:0f:df:17:88:a8:68: 7d:89:c5:e2:2a:15:51:19:15:db:59:01:f6:f4:a6: ef:97:e8:99:39:ef:44:d7:04:2d:0c:fe:e6:5d:2d: bc:76:41:36:49:b2:44:dd:21:f5:83:9e:f2:02:ab: 60:6a:e7:3f:e3:2f:92:b3:b2:c7:57:b7:d5:40:b5: a8:b6:54:0c:ea:e4:5a:01:cc:f7:42:cd:8c:64:29: a1:77:cf:bc:1e:75:ca:73:d6:06:67:49:e7:64:98: 3b:d4:90:c4:f8:91:86:0e:3e:bd:63:ee:f5:d4:c1: f7:34:38:a4:eb:70:84:d8:20:8c:42:7c:28:b4:cb: fb:e2:61:66:7d:4c:b7:60:20:24:94:f2:97:1d:f3: 3c:b2:90:84:32:e0:3f:b9:fe:e5:2e:73:83:6a:bf: d8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:85:01:E4:0D:25:6F:E8:48:F3:43:E0:8D:6B:37:A4:5F:BB:F8:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e8a4a207-02cb-31d1-9839-b150437e40a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:ee:68:58:4f:6e:ac:fd:1b:fd:1b:44:61:89:84:ee:0a:63: 73:88:2e:4c:48:5d:e6:ae:20:9e:2a:fd:fb:32:d0:cd:a4:20: a3:8e:3f:4b:e4:d5:c4:8c:7d:a1:05:54:2b:77:cb:e5:9d:98: dc:dd:fd:fc:cb:7c:3b:be:66:16:d1:7a:99:6e:72:31:0c:54: 0d:82:bc:95:c7:b3:43:45:69:00:75:fa:e0:44:70:40:e7:f1: b9:db:2e:65:e1:9c:63:f6:c9:8b:e5:f3:4e:77:49:90:2d:b3: c7:ea:41:1c:0c:57:49:c1:23:06:01:10:48:a9:c9:4a:13:f9: 55:ab:7c:dd:bf:be:61:8d:4b:f3:45:18:4f:53:fe:6c:58:73: b7:26:15:fe:22:36:29:61:33:00:e7:a4:37:5c:be:94:2f:d2: 3c:c4:cc:c2:9b:e6:a9:d3:15:18:8c:36:04:d8:9a:21:f6:33: 7d:bb:81:51:d4:60:da:0b:54:7b:44:57:19:79:6b:ee:24:3e: a1:d4:27:c9:e6:e5:19:9a:dc:e9:79:ac:ac:f5:bd:fa:db:3e: cf:98:c7:40:10:a8:a4:3c:70:02:29:84:19:23:25:79:1c:12: c5:2f:63:85:3b:db:d2:f6:ba:8c:db:b1:b9:48:55:22:e4:9b: 2c:8d:a7:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxIbUHYHcYFFMs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk Y2ZkOGJhYjctMjc3Zi00ZjgxLThhN2UtOGVlMzBmMjc0NGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogG6Y9rgREVylH2DUU69RFTij8G3nv5WAH0P UyAgjgP7B9UlfzB3a2QMH8qMAamGxCqz4BT71hQMTlay9qU6uFW+a+uQdegivEBq KLRHN1qV9Za3rL5587fhZr7hvrveC/cP3xeIqGh9icXiKhVRGRXbWQH29Kbvl+iZ Oe9E1wQtDP7mXS28dkE2SbJE3SH1g57yAqtgauc/4y+Ss7LHV7fVQLWotlQM6uRa Acz3Qs2MZCmhd8+8HnXKc9YGZ0nnZJg71JDE+JGGDj69Y+711MH3NDik63CE2CCM QnwotMv74mFmfUy3YCAklPKXHfM8spCEMuA/uf7lLnODar/YNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmFAeQNJW/oSPND4I1rN6Rfu/ihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZThhNGEyMDctMDJjYi0z MWQxLTk4MzktYjE1MDQzN2U0MGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3uaFhPbqz9G/0bRGGJhO4KY3OILkxIXeauIJ4q/fsy0M2kIKOOP0vk 1cSMfaEFVCt3y+WdmNzd/fzLfDu+ZhbReplucjEMVA2CvJXHs0NFaQB1+uBEcEDn 8bnbLmXhnGP2yYvl8053SZAts8fqQRwMV0nBIwYBEEipyUoT+VWrfN2/vmGNS/NF GE9T/mxYc7cmFf4iNilhMwDnpDdcvpQv0jzEzMKb5qnTFRiMNgTYmiH2M327gVHU YNoLVHtEVxl5a+4kPqHUJ8nm5Rma3Ol5rKz1vfrbPs+Yx0AQqKQ8cAIphBkjJXkc EsUvY4U729L2uozbsblIVSLkmyyNp1Q= -----END CERTIFICATE-----Generated at Sat Apr 26 20:55:21 2025 by rpki-client