$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f16e379d-eaa4-319f-9f86-6635763863e7.roa File: f16e379d-eaa4-319f-9f86-6635763863e7.roa (raw, json) Hash identifier: W+GiECRSG669E215st2q7/DjBzMLgkK96c6gMEgZnvk= Subject key identifier: 97:61:33:12:FE:F4:EA:C0:32:1D:48:D4:3A:C3:F5:02:8D:B8:E1:D6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA138E5617EBD69DFC28C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f16e379d-eaa4-319f-9f86-6635763863e7.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.17.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:13:8e:56:17:eb:d6:9d:fc:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=fda59f1e-8855-437a-9190-8f9a5fc0547d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:94:db:a3:1c:f0:93:de:c6:e0:ef:06:ae:37: 45:79:74:1f:23:b1:b7:9f:f2:f4:28:ec:96:b7:26: 37:18:81:0e:d3:e0:f5:df:6a:f1:d4:ca:ad:ff:2f: 67:08:38:4f:ef:7c:70:df:c7:df:10:b6:81:1a:23: df:df:60:02:0b:9b:6f:71:a1:26:75:d6:82:ba:cc: 57:e4:b5:af:7a:d9:dd:b5:b8:97:b9:f3:b4:42:03: 84:de:32:3c:46:59:b7:05:63:0e:99:d8:57:cf:44: f0:aa:fb:e1:53:c3:8f:77:a5:5a:08:9e:73:de:58: 1b:6b:58:13:76:5d:c0:65:51:3c:9f:46:b3:34:94: a3:89:44:d5:e8:23:57:35:1a:90:6a:c1:ea:c3:f0: 63:26:09:c9:b5:24:5f:1b:65:35:f0:89:3d:9c:f4: 88:89:23:a9:61:96:aa:48:bb:b9:c8:6a:f9:5b:f2: 37:2a:7a:b2:4e:ba:9c:de:8d:ed:81:db:0c:d8:2c: 1d:e6:b7:8f:ca:30:39:f7:18:3c:ff:af:f7:3c:16: 75:3d:53:02:d4:65:6d:64:a8:9f:08:77:61:4d:7d: b2:b1:a7:48:c7:cf:a3:7b:46:9d:e5:6b:91:c7:b7: 46:d1:00:c4:24:3c:25:ea:f1:bc:1c:b9:3c:65:e2: 5e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:61:33:12:FE:F4:EA:C0:32:1D:48:D4:3A:C3:F5:02:8D:B8:E1:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f16e379d-eaa4-319f-9f86-6635763863e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:aa:3e:75:50:1c:92:30:01:0d:64:6b:bf:3b:1f:a7:d2:a4: d9:72:e7:fa:1c:5c:9a:2b:3b:f9:cd:65:f3:68:be:6c:b3:43: 7d:5d:79:63:1a:25:c2:b1:83:f7:d8:41:f8:4f:24:5a:ed:13: 33:3e:be:9d:0d:6a:83:49:b5:b8:41:4c:a0:02:2d:5e:21:1b: 1a:4c:22:f9:1e:c0:1d:f8:e2:7a:da:08:b3:7f:5e:cc:3d:be: 56:91:a6:2a:b8:e9:ed:4d:00:4f:cc:72:04:f5:bc:39:d8:a9: 1e:ec:94:21:23:57:6b:75:78:38:4c:f9:9c:03:91:16:c7:10: 9c:46:a7:62:5e:aa:fa:0b:f4:79:00:81:dc:c7:21:f7:aa:17: 8f:54:cd:16:85:7a:b1:86:1c:b6:fd:28:d6:f0:e9:72:a9:d4: 33:67:13:c4:83:19:31:ab:52:e2:8d:0e:b1:bb:d2:70:c9:37: 07:d4:74:df:11:cf:a6:ce:e3:46:9a:d1:a4:94:4b:e1:8f:81: 16:c1:cd:a4:23:5b:08:10:57:ad:89:be:39:f1:d4:d7:74:06: f6:ac:ec:c5:fa:b0:63:a1:d6:05:76:1c:b1:b3:17:12:05:82: f6:fe:fe:3a:fa:f8:1e:ef:75:18:20:26:70:e1:c5:5f:9c:f2: f9:34:83:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuhOOVhfr1p38KMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZmRhNTlmMWUtODg1NS00MzdhLTkxOTAtOGY5YTVmYzA1NDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5Tboxzwk97G4O8GrjdFeXQfI7G3n/L0KOyW tyY3GIEO0+D132rx1Mqt/y9nCDhP73xw38ffELaBGiPf32ACC5tvcaEmddaCusxX 5LWvetndtbiXufO0QgOE3jI8Rlm3BWMOmdhXz0TwqvvhU8OPd6VaCJ5z3lgba1gT dl3AZVE8n0azNJSjiUTV6CNXNRqQasHqw/BjJgnJtSRfG2U18Ik9nPSIiSOpYZaq SLu5yGr5W/I3KnqyTrqc3o3tgdsM2Cwd5rePyjA59xg8/6/3PBZ1PVMC1GVtZKif CHdhTX2ysadIx8+je0ad5WuRx7dG0QDEJDwl6vG8HLk8ZeJeRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdhMxL+9OrAMh1I1DrD9QKNuOHWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjE2ZTM3OWQtZWFhNC0z MTlmLTlmODYtNjYzNTc2Mzg2M2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRE8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECqPnVQHJIwAQ1ka787H6fSpNly5/ocXJorO/nNZfNovmyzQ31deWMa JcKxg/fYQfhPJFrtEzM+vp0NaoNJtbhBTKACLV4hGxpMIvkewB344nraCLN/Xsw9 vlaRpiq46e1NAE/McgT1vDnYqR7slCEjV2t1eDhM+ZwDkRbHEJxGp2JeqvoL9HkA gdzHIfeqF49UzRaFerGGHLb9KNbw6XKp1DNnE8SDGTGrUuKNDrG70nDJNwfUdN8R z6bO40aa0aSUS+GPgRbBzaQjWwgQV62Jvjnx1Nd0Bvas7MX6sGOh1gV2HLGzFxIF gvb+/jr6+B7vdRggJnDhxV+c8vk0g78= -----END CERTIFICATE-----Generated at Sun Apr 27 12:30:22 2025 by rpki-client