$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2a3944eb-0f42-3c20-8076-e2b62795c657.roa File: 2a3944eb-0f42-3c20-8076-e2b62795c657.roa (raw, json) Hash identifier: b37tCgf2dBNvv0LvxUxgDJukLG95/mV25Hd8MS7dFiM= Subject key identifier: 33:56:98:F5:5E:38:F1:40:4E:1E:E0:CB:3D:D8:A6:B8:03:DE:82:2B Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F432858499C2E4BECB0103CB64E7784E0 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2a3944eb-0f42-3c20-8076-e2b62795c657.roa Signing time: Tue 22 Apr 2025 11:33:13 +0000 ROA not before: Tue 22 Apr 2025 11:33:13 +0000 ROA not after: Mon 21 Jul 2025 11:33:13 +0000 asID: 174 IP address blocks: 173.213.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:2e:4b:ec:b0:10:3c:b6:4e:77:84:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Apr 22 11:33:13 2025 GMT Not After : Jul 21 11:33:13 2025 GMT Subject: CN=fc1c7b92-45b3-438c-964d-a4a72ff4bc2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e4:20:03:c7:ce:ce:19:6d:56:2b:36:8a:38: e6:bb:45:65:eb:4b:2c:a4:f3:b5:ba:b5:b9:1f:ea: b7:23:0d:7b:f8:f1:79:11:1c:ff:7e:24:5e:33:aa: 20:46:60:63:ce:45:2b:2a:f6:f6:cf:ee:bb:e6:31: e0:22:e2:de:a4:7a:2b:88:10:12:49:8e:cf:95:09: 41:10:22:36:ad:3e:8d:28:07:ec:0b:73:6f:46:9f: 73:65:28:9b:54:63:9a:ee:87:4a:8f:da:83:f0:d0: b3:d3:e1:20:14:6c:04:67:26:28:df:3f:94:06:c9: ca:6d:f7:2a:44:49:d9:7e:3c:cb:a1:4f:fa:dc:bc: 4a:7d:29:b9:1a:60:a7:92:2c:15:8e:96:27:8d:9f: ef:46:e7:9d:4b:05:37:68:96:be:d6:a5:a7:c4:d5: 7d:c8:6b:37:8d:e0:da:80:bd:a9:e7:cd:c8:fa:ac: ac:4f:b7:10:d4:ac:30:f0:3c:20:63:33:7f:51:7b: 3f:a5:83:75:08:d7:5f:2f:c7:4a:7c:14:38:3a:b0: c4:d0:93:7b:1d:5e:5d:b9:f8:a7:a6:77:5f:05:2b: 88:37:91:46:e3:ed:d2:4b:c3:3c:48:d6:4c:f9:f5: 55:5e:44:62:49:25:a5:38:ef:04:b4:06:b5:7f:15: 58:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:56:98:F5:5E:38:F1:40:4E:1E:E0:CB:3D:D8:A6:B8:03:DE:82:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2a3944eb-0f42-3c20-8076-e2b62795c657.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.213.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:47:1c:f0:5c:0e:37:fc:37:2f:d9:b4:e1:94:9f:de:f5:93: 7b:5c:b7:40:0a:74:11:35:a0:2c:6f:a5:78:f0:68:3d:fa:3e: 51:13:e9:24:b1:55:1c:05:81:1d:17:a8:05:75:4b:99:f4:4b: a0:93:a8:4d:7d:f5:41:79:3a:70:a5:2d:8d:df:fa:0f:95:11: 88:f7:8f:c8:1a:dc:3a:24:64:fc:6e:58:69:b9:fa:7d:0b:d4: 51:04:f7:b6:54:6e:40:4a:9a:d8:49:c4:18:bd:d1:03:7e:c1: 49:0e:ac:12:50:c5:be:c9:7d:2d:6f:0b:61:59:44:2a:76:8e: 71:d8:1a:62:32:40:92:de:3b:78:af:fc:2f:27:51:2d:8f:5c: 8a:1e:5b:0e:8e:16:ec:64:e3:15:ac:fa:05:1e:13:e9:0a:1c: c9:be:b6:42:99:47:21:e1:62:74:ea:90:93:1d:42:fb:b1:b5: 32:0e:ca:a1:55:15:78:ce:15:46:14:80:05:bb:64:90:c9:cf: 35:d6:86:23:fe:93:39:58:35:0a:aa:3c:97:c2:23:10:b5:a1: 92:8a:38:18:d0:c3:e1:fc:06:60:12:91:4e:c6:0a:67:5f:c4: 2b:70:ab:5f:4c:9e:9c:d2:b2:5c:e9:dd:0d:68:f0:46:4e:20: 36:76:08:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcLkvssBA8tk53hOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDQyMjExMzMxM1oXDTI1MDcyMTExMzMxM1owLzEtMCsGA1UEAxMk ZmMxYzdiOTItNDViMy00MzhjLTk2NGQtYTRhNzJmZjRiYzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouQgA8fOzhltVis2ijjmu0Vl60sspPO1urW5 H+q3Iw17+PF5ERz/fiReM6ogRmBjzkUrKvb2z+675jHgIuLepHoriBASSY7PlQlB ECI2rT6NKAfsC3NvRp9zZSibVGOa7odKj9qD8NCz0+EgFGwEZyYo3z+UBsnKbfcq REnZfjzLoU/63LxKfSm5GmCnkiwVjpYnjZ/vRuedSwU3aJa+1qWnxNV9yGs3jeDa gL2p583I+qysT7cQ1Kww8DwgYzN/UXs/pYN1CNdfL8dKfBQ4OrDE0JN7HV5dufin pndfBSuIN5FG4+3SS8M8SNZM+fVVXkRiSSWlOO8EtAa1fxVYYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNWmPVeOPFATh7gyz3YprgD3oIrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMmEzOTQ0ZWItMGY0Mi0z YzIwLTgwNzYtZTJiNjI3OTVjNjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdVfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRHHPBcDjf8Ny/ZtOGUn971k3tct0AKdBE1oCxvpXjwaD36PlET6SSx VRwFgR0XqAV1S5n0S6CTqE199UF5OnClLY3f+g+VEYj3j8ga3DokZPxuWGm5+n0L 1FEE97ZUbkBKmthJxBi90QN+wUkOrBJQxb7JfS1vC2FZRCp2jnHYGmIyQJLeO3iv /C8nUS2PXIoeWw6OFuxk4xWs+gUeE+kKHMm+tkKZRyHhYnTqkJMdQvuxtTIOyqFV FXjOFUYUgAW7ZJDJzzXWhiP+kzlYNQqqPJfCIxC1oZKKOBjQw+H8BmASkU7GCmdf xCtwq19MnpzSslzp3Q1o8EZOIDZ2CLQ= -----END CERTIFICATE-----Generated at Sat Apr 26 13:23:49 2025 by rpki-client