$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ff99985f-95d7-37f2-b05b-c6b34f3c1d55.roa File: ff99985f-95d7-37f2-b05b-c6b34f3c1d55.roa (raw, json) Hash identifier: Au5TgCmBKK+4jHaAAUQpjZZhBudltghVBWMx6fNuW3g= Subject key identifier: 41:69:10:47:A8:62:63:CB:E6:45:71:B1:31:AC:FF:18:96:F2:03:D6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA3C0AC26747CA844635C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ff99985f-95d7-37f2-b05b-c6b34f3c1d55.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.24.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:3c:0a:c2:67:47:ca:84:46:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3eee657b-51bd-4428-8957-434ccc79ace6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:14:a7:74:14:c0:56:e1:fc:cf:84:c6:2a:28: 28:44:7a:c7:d3:bb:00:9d:6f:0f:4c:70:35:ea:ab: 33:16:0a:20:b4:b8:25:b2:21:f4:d0:d4:bb:77:83: fd:e1:19:61:ac:7a:ec:0b:88:ec:b6:4e:11:2e:60: 7d:61:08:67:31:07:79:eb:3e:f7:cf:87:a9:f9:f2: 1f:b5:76:f2:e5:a8:22:e1:f6:19:54:2b:e3:77:3b: 69:55:2b:f4:de:50:d3:54:64:f6:90:49:2f:79:ce: d0:8c:b5:1a:bc:4a:db:ea:a5:58:a4:24:67:13:e8: 25:55:b3:c5:e8:1b:a6:58:f2:b2:42:cc:93:cf:ba: 52:f7:3d:24:43:be:79:a8:c1:60:5b:0b:b2:2a:42: 7e:03:1a:35:33:c5:4d:d2:82:1f:c8:be:cd:56:b7: d0:98:3e:49:74:44:5b:a6:00:5f:d9:22:08:e7:59: f1:2c:77:5d:92:5c:7b:35:3a:f0:7b:52:4f:67:33: d2:93:47:15:9c:94:bc:c7:e8:b1:bd:2f:f0:94:b1: 0f:3b:e4:b9:fb:56:d7:cc:c3:57:94:36:9c:c4:0e: 4e:30:0d:71:01:a2:d1:ae:d5:e0:71:18:db:ca:78: 9e:a2:63:de:5d:82:bf:0c:6b:45:d3:e5:7b:11:66: 91:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:69:10:47:A8:62:63:CB:E6:45:71:B1:31:AC:FF:18:96:F2:03:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ff99985f-95d7-37f2-b05b-c6b34f3c1d55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:c4:19:96:76:b8:fe:00:cd:11:2f:20:fd:63:85:ee:d5:7c: fe:3d:b2:4f:91:f8:02:ea:8d:ef:93:89:e3:00:91:9f:86:fd: 82:34:35:d5:01:50:59:37:e4:5c:30:af:e3:2c:4a:44:ea:c1: 7b:db:fd:91:23:12:88:07:1b:95:54:f8:5f:b6:a0:9f:a9:cb: da:e9:a7:51:19:2d:9a:10:56:07:91:f3:02:b5:f3:bf:19:dc: 67:84:17:62:8a:87:95:54:80:bb:ea:1e:d6:ae:42:3b:a2:7b: be:eb:e8:86:11:f4:45:aa:2e:7a:b0:21:86:95:0f:58:db:b3: 2f:4d:4a:f9:bb:07:63:f1:f6:f5:b0:0c:ac:f7:ce:9f:c9:b5: ac:ab:ee:e4:82:73:dd:26:ee:84:51:0b:9d:0c:eb:09:2f:2b: 17:85:25:b9:41:01:58:30:11:2d:d4:3b:d8:bc:24:65:55:5d: 7a:fa:da:d5:61:d1:8d:3b:24:41:12:61:df:da:5d:bd:40:d0: b8:a6:26:d6:23:f9:63:75:36:84:1b:ad:ab:8f:db:84:b1:d7: 64:3a:b9:f3:59:57:99:2b:9e:d3:e7:5f:e5:5a:d6:03:bf:aa: 32:93:26:28:a0:97:76:ea:6b:eb:36:53:b1:e1:bd:7d:4a:fd: d0:65:60:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkujwKwmdHyoRGNcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk M2VlZTY1N2ItNTFiZC00NDI4LTg5NTctNDM0Y2NjNzlhY2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRSndBTAVuH8z4TGKigoRHrH07sAnW8PTHA1 6qszFgogtLglsiH00NS7d4P94RlhrHrsC4jstk4RLmB9YQhnMQd56z73z4ep+fIf tXby5agi4fYZVCvjdztpVSv03lDTVGT2kEkvec7QjLUavErb6qVYpCRnE+glVbPF 6BumWPKyQsyTz7pS9z0kQ755qMFgWwuyKkJ+Axo1M8VN0oIfyL7NVrfQmD5JdERb pgBf2SII51nxLHddklx7NTrwe1JPZzPSk0cVnJS8x+ixvS/wlLEPO+S5+1bXzMNX lDacxA5OMA1xAaLRrtXgcRjbynieomPeXYK/DGtF0+V7EWaRXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFpEEeoYmPL5kVxsTGs/xiW8gPWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmY5OTk4NWYtOTVkNy0z N2YyLWIwNWItYzZiMzRmM2MxZDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRhYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTEGZZ2uP4AzREvIP1jhe7VfP49sk+R+ALqje+TieMAkZ+G/YI0NdUB UFk35Fwwr+MsSkTqwXvb/ZEjEogHG5VU+F+2oJ+py9rpp1EZLZoQVgeR8wK1878Z 3GeEF2KKh5VUgLvqHtauQjuie77r6IYR9EWqLnqwIYaVD1jbsy9NSvm7B2Px9vWw DKz3zp/Jtayr7uSCc90m7oRRC50M6wkvKxeFJblBAVgwES3UO9i8JGVVXXr62tVh 0Y07JEESYd/aXb1A0LimJtYj+WN1NoQbrauP24Sx12Q6ufNZV5krntPnX+Va1gO/ qjKTJiigl3bqa+s2U7HhvX1K/dBlYJ0= -----END CERTIFICATE-----Generated at Sun Apr 27 09:15:53 2025 by rpki-client