$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f37c0529-0224-36be-9712-21c713dbee93.roa File: f37c0529-0224-36be-9712-21c713dbee93.roa (raw, json) Hash identifier: I0hU+d9jKZ6z2j5cCP/xAqgTN+yHWeIEniy5RFyH05o= Subject key identifier: 84:D2:3C:BC:C9:C0:F0:52:F1:71:53:25:5A:33:89:F5:BB:AE:37:EE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A61F2E9188D57270311AE800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f37c0529-0224-36be-9712-21c713dbee93.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 30036 IP address blocks: 173.17.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:2e:91:88:d5:72:70:31:1a:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=b604a5df-0f8f-4613-af5c-2a40c7ee5f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1b:b3:e3:38:a4:7f:32:6b:c8:9e:47:be:c7: da:a3:d1:eb:03:e4:97:f6:03:16:2f:f7:cb:42:dd: d8:f3:db:a7:e9:ee:cc:6a:87:f5:64:88:1e:ff:65: 56:c3:6c:a0:8a:17:ff:e1:82:dd:9b:e7:cb:75:46: a3:8b:6d:41:aa:36:b6:81:8f:8a:65:be:cf:76:76: 3d:5c:e3:50:59:20:46:d6:1f:71:12:46:7a:c1:be: e5:6f:f2:1d:82:5a:3d:cc:58:62:cf:ab:b2:60:51: 83:b4:59:4e:ce:7b:e5:e7:6b:2c:a4:98:49:93:2c: 43:5d:8f:8c:12:98:fd:e5:f0:c8:51:96:86:89:d8: 8e:d8:8f:42:65:72:4f:67:c9:13:30:7b:c6:73:41: c4:bb:a4:e2:c4:3b:fb:3e:16:24:57:a2:26:ae:f3: 93:3a:c7:64:b2:2a:6d:f1:71:56:45:57:f8:14:ce: 24:db:e1:59:c7:aa:65:53:97:71:3c:3d:09:2e:86: 16:9f:c1:d8:ec:3a:6e:51:f9:f9:83:33:9b:66:3b: 40:c0:ca:4f:70:78:54:78:53:cd:c9:5f:6a:ce:b8: 4e:67:cf:25:9d:92:30:f0:e9:f6:02:7d:72:52:2f: 5f:67:a1:78:64:da:56:ff:05:a6:08:7f:a6:8b:cc: c5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D2:3C:BC:C9:C0:F0:52:F1:71:53:25:5A:33:89:F5:BB:AE:37:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f37c0529-0224-36be-9712-21c713dbee93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:c2:05:03:50:79:8b:44:c0:e7:2a:f0:65:89:92:4d:67:2f: ef:ab:ee:68:28:c6:7c:6e:07:53:1c:ac:15:e1:a0:19:6d:3f: 97:31:44:cf:85:f5:91:62:93:7b:2a:de:cd:83:89:1b:a1:5f: a7:90:cd:04:95:eb:60:db:b4:28:2c:52:24:39:b9:b5:f2:33: c5:60:01:ac:4c:93:55:b4:db:a8:4f:b0:85:81:67:36:0e:9d: 57:77:f5:1d:d5:2d:d8:8f:b4:0e:a5:5e:d2:d1:5a:26:07:3f: 31:c6:69:7e:2d:01:5e:fa:cb:5a:90:a0:9d:ca:29:a6:98:8d: d0:9f:95:d4:7f:04:03:72:f7:e0:e5:d8:4a:8c:e2:4b:60:25: 44:3a:15:5e:c0:4a:ec:2b:6f:c9:5c:54:15:ea:3c:9d:cf:64: d0:6a:b4:e5:be:6a:6b:36:6d:0f:36:40:eb:a8:1a:00:7d:0a: 48:4b:e1:e2:84:d5:17:fa:a9:28:a3:f1:21:7c:f6:ad:79:77: 31:ea:5f:73:d5:47:a4:8f:aa:04:d3:df:d4:23:05:06:b1:5e: ef:a8:2a:f8:d2:44:7d:06:b3:2f:cb:cd:31:1e:d7:75:33:7e: 60:53:da:c5:a8:34:6d:ce:67:35:fb:5e:e4:3c:80:39:94:6c: f8:de:e8:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHy6RiNVycDEa6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk YjYwNGE1ZGYtMGY4Zi00NjEzLWFmNWMtMmE0MGM3ZWU1ZjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxuz4zikfzJryJ5Hvsfao9HrA+SX9gMWL/fL Qt3Y89un6e7Maof1ZIge/2VWw2ygihf/4YLdm+fLdUaji21Bqja2gY+KZb7PdnY9 XONQWSBG1h9xEkZ6wb7lb/Idglo9zFhiz6uyYFGDtFlOznvl52sspJhJkyxDXY+M Epj95fDIUZaGidiO2I9CZXJPZ8kTMHvGc0HEu6TixDv7PhYkV6ImrvOTOsdksipt 8XFWRVf4FM4k2+FZx6plU5dxPD0JLoYWn8HY7DpuUfn5gzObZjtAwMpPcHhUeFPN yV9qzrhOZ88lnZIw8On2An1yUi9fZ6F4ZNpW/wWmCH+mi8zFRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITSPLzJwPBS8XFTJVozifW7rjfuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjM3YzA1MjktMDIyNC0z NmJlLTk3MTItMjFjNzEzZGJlZTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRG0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHCBQNQeYtEwOcq8GWJkk1nL++r7mgoxnxuB1McrBXhoBltP5cxRM+F 9ZFik3sq3s2DiRuhX6eQzQSV62DbtCgsUiQ5ubXyM8VgAaxMk1W026hPsIWBZzYO nVd39R3VLdiPtA6lXtLRWiYHPzHGaX4tAV76y1qQoJ3KKaaYjdCfldR/BANy9+Dl 2EqM4ktgJUQ6FV7ASuwrb8lcVBXqPJ3PZNBqtOW+ams2bQ82QOuoGgB9CkhL4eKE 1Rf6qSij8SF89q15dzHqX3PVR6SPqgTT39QjBQaxXu+oKvjSRH0Gsy/LzTEe13Uz fmBT2sWoNG3OZzX7XuQ8gDmUbPje6JU= -----END CERTIFICATE-----Generated at Sat Apr 26 20:59:45 2025 by rpki-client