$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f54a464e-1def-32dd-ac3d-ac0da0e0c0ea.roa File: f54a464e-1def-32dd-ac3d-ac0da0e0c0ea.roa (raw, json) Hash identifier: kDxPYlGzRaLII7ZwpIwgaKX8faqn4i1FHp90/z4wvbs= Subject key identifier: D2:02:E6:B9:D6:04:A9:66:89:62:FF:A9:3F:CD:F7:AE:E1:BB:D2:EB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784BAD805B76517A9BB6040 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f54a464e-1def-32dd-ac3d-ac0da0e0c0ea.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 170.52.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ba:d8:05:b7:65:17:a9:bb:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=17441228-c01b-4e8c-8296-3e406232d583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:26:8b:46:51:0c:a1:38:7e:66:f9:e5:09:aa: a3:a4:f4:fb:24:5f:d7:dc:c0:04:c7:7e:d8:1b:53: b9:50:b5:4e:11:ff:61:53:e3:ea:5e:52:04:8f:1e: a5:cf:b9:94:d6:f0:33:6e:f0:51:82:31:62:fb:c8: 26:ba:f3:f8:b7:4b:3b:17:fc:ec:9a:c3:54:d8:d9: 9b:a4:3a:fd:60:6d:88:ba:a2:10:1e:3f:16:77:b5: 94:5d:be:ac:8a:9a:cb:a5:1b:83:50:4d:18:f8:a0: 2a:c8:0a:ea:d6:9c:e5:0e:06:e3:24:96:8c:ae:00: d9:21:cf:26:95:a6:9a:b3:d6:37:6f:3e:34:3e:8e: 4f:d9:90:08:1b:ea:ff:59:06:31:f7:26:ca:e5:44: ce:2d:99:12:fa:1a:c4:c8:fe:fe:87:ab:93:da:47: 37:01:a4:30:0c:77:63:2c:49:5e:ad:89:8e:a6:8a: 53:59:f5:df:0c:48:b7:32:41:60:15:2a:8f:0b:59: ca:33:32:0a:15:c5:3e:29:69:ff:97:18:24:65:22: 14:c7:8e:5d:82:00:43:31:07:58:ab:cb:67:f0:96: 28:37:4d:3f:1c:bb:c0:4f:c4:f4:9a:83:e8:00:5a: 19:4c:de:ea:cd:40:7e:ea:cd:a0:56:b8:5c:f1:62: da:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:02:E6:B9:D6:04:A9:66:89:62:FF:A9:3F:CD:F7:AE:E1:BB:D2:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f54a464e-1def-32dd-ac3d-ac0da0e0c0ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 170.52.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:d6:ef:d6:b1:a7:1e:fb:82:7a:b4:dc:d2:50:d8:fb:9a:4c: 99:94:88:95:b1:0b:c2:b9:96:54:14:e9:ba:b5:0b:24:be:5b: b2:52:0f:3a:f5:d9:f2:60:9c:c2:96:18:d1:8a:32:cb:37:5e: 52:62:7d:58:6a:c7:e3:aa:23:9c:42:73:8b:6c:03:70:27:eb: 5b:9d:0d:a0:b7:d7:b8:26:2c:7a:c9:6e:aa:cf:ca:ba:a9:3f: 67:13:7c:05:f3:5b:10:bd:2a:12:0b:38:77:7a:30:ec:61:e9: 9a:2e:b5:22:c9:92:88:5b:fe:61:66:1f:79:63:a9:c9:b2:05: 45:b6:e4:35:97:ec:e7:b4:fc:e6:0f:f0:23:75:a0:6c:0a:b5: 8b:62:ac:35:01:a5:1f:27:dd:95:1b:95:0b:71:d3:d5:df:78: eb:db:6b:16:18:1e:fc:a9:6b:c2:79:aa:2a:b5:52:f4:86:d5: 1a:6a:f5:97:0d:71:8a:fc:22:1c:11:c4:e1:1a:f8:fc:84:30: 56:c3:d6:be:b0:42:82:83:30:56:83:13:95:9a:b5:4d:09:56: ad:97:a9:48:40:a7:ee:dc:21:e6:ea:3b:a8:2a:f1:38:a3:d2: 5d:ed:ce:5f:3f:89:b4:41:fa:54:5f:3a:fd:4e:a5:e8:74:49: ed:f6:91:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhLrYBbdlF6m7YEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MTc0NDEyMjgtYzAxYi00ZThjLTgyOTYtM2U0MDYyMzJkNTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiaLRlEMoTh+ZvnlCaqjpPT7JF/X3MAEx37Y G1O5ULVOEf9hU+PqXlIEjx6lz7mU1vAzbvBRgjFi+8gmuvP4t0s7F/zsmsNU2Nmb pDr9YG2IuqIQHj8Wd7WUXb6siprLpRuDUE0Y+KAqyArq1pzlDgbjJJaMrgDZIc8m laaas9Y3bz40Po5P2ZAIG+r/WQYx9ybK5UTOLZkS+hrEyP7+h6uT2kc3AaQwDHdj LElerYmOpopTWfXfDEi3MkFgFSqPC1nKMzIKFcU+KWn/lxgkZSIUx45dggBDMQdY q8tn8JYoN00/HLvAT8T0moPoAFoZTN7qzUB+6s2gVrhc8WLa+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIC5rnWBKlmiWL/qT/N967hu9LrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjU0YTQ2NGUtMWRlZi0z MmRkLWFjM2QtYWMwZGEwZTBjMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqjQJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/W79axpx77gnq03NJQ2PuaTJmUiJWxC8K5llQU6bq1CyS+W7JSDzr1 2fJgnMKWGNGKMss3XlJifVhqx+OqI5xCc4tsA3An61udDaC317gmLHrJbqrPyrqp P2cTfAXzWxC9KhILOHd6MOxh6ZoutSLJkohb/mFmH3ljqcmyBUW25DWX7Oe0/OYP 8CN1oGwKtYtirDUBpR8n3ZUblQtx09XfeOvbaxYYHvypa8J5qiq1UvSG1Rpq9ZcN cYr8IhwRxOEa+PyEMFbD1r6wQoKDMFaDE5WatU0JVq2XqUhAp+7cIebqO6gq8Tij 0l3tzl8/ibRB+lRfOv1Opeh0Se32keI= -----END CERTIFICATE-----Generated at Wed Apr 30 02:22:29 2025 by rpki-client