$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/45835583-4460-387f-b1aa-f86276a1384d.roa File: 45835583-4460-387f-b1aa-f86276a1384d.roa (raw, json) Hash identifier: 0Xu7u5j/9GxtgLJ00qGoAyWMzVUGZv/ygFbHmCvdJSA= Subject key identifier: 3D:A3:19:BD:88:69:70:30:73:DC:32:D9:18:DF:31:98:73:CD:A3:C1 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F432858499CAA58906EB7DF66FE709B80 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/45835583-4460-387f-b1aa-f86276a1384d.roa Signing time: Tue 22 Apr 2025 15:43:09 +0000 ROA not before: Tue 22 Apr 2025 15:43:09 +0000 ROA not after: Mon 21 Jul 2025 15:43:09 +0000 asID: 174 IP address blocks: 173.232.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:aa:58:90:6e:b7:df:66:fe:70:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Apr 22 15:43:09 2025 GMT Not After : Jul 21 15:43:09 2025 GMT Subject: CN=17c0258a-8583-40f2-ac24-5bcf20f033e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1c:a0:58:bc:9a:2e:52:f6:fc:e8:62:06:7d: 66:54:48:22:c1:cd:06:53:dd:42:b3:78:75:20:a8: 6e:82:49:21:ad:30:db:15:f6:55:97:c7:e0:26:b6: 5f:33:a6:a4:9d:3b:90:3a:35:bf:df:38:d0:1e:bb: a7:49:c1:db:54:19:da:71:ad:0b:b3:16:c1:ed:51: 57:42:0f:9f:5d:33:c6:cb:dd:a5:ea:bd:5e:b5:20: e2:4f:d5:16:53:01:44:7b:a3:2b:b3:1a:a3:ac:12: 4a:bc:bc:9c:d8:ba:25:5e:b9:ab:1b:c9:a3:1c:58: 32:ad:35:b9:86:df:85:d6:a5:96:49:bc:57:dd:ba: 83:2e:3f:6f:cc:ff:45:49:b7:2b:1a:20:c7:79:37: bd:7c:cf:81:3a:39:ad:58:77:1e:74:2b:09:be:04: 89:a4:bb:5f:69:cc:37:8c:13:aa:63:0f:99:18:88: d1:19:d9:02:70:6f:14:e4:ed:72:1b:09:63:31:24: 53:ba:21:04:b9:08:81:4a:90:08:5c:b1:c3:aa:13: 2b:c6:f3:8d:18:bc:6e:48:85:5f:e3:e0:cf:e5:70: 72:65:7c:50:eb:4d:a5:d6:87:c0:be:c8:c9:61:3a: 29:f4:e5:5f:fb:ca:0f:41:b3:35:59:5d:1e:f5:ab: a7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A3:19:BD:88:69:70:30:73:DC:32:D9:18:DF:31:98:73:CD:A3:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/45835583-4460-387f-b1aa-f86276a1384d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:67:3e:dc:64:f4:a4:2b:d7:e2:15:83:68:22:22:05:b6:7a: a0:43:d5:03:5a:52:00:91:dd:3c:40:f3:37:c5:e1:a8:96:4d: 29:b0:58:c9:63:3d:b1:5b:a0:db:e5:0f:b0:6b:3f:68:ad:e9: 9d:cd:37:78:e3:99:4f:a4:0f:b7:fc:73:32:a8:d5:3a:3a:5b: d5:51:ab:15:87:b9:35:6b:7d:cf:d5:b5:9f:65:04:90:c2:2a: dc:9e:44:81:8c:bd:73:9d:4b:6e:a0:11:05:9e:36:f8:74:3b: 79:f1:d9:c6:20:1e:18:81:40:56:3d:97:ee:93:55:71:1b:e4: ff:1a:af:80:3b:3a:e3:1c:0c:b8:af:46:92:eb:42:de:fa:ba: d1:d2:0b:98:02:85:07:20:4c:c3:b4:36:75:e0:e5:90:2e:d3: 49:dc:d7:e8:b6:ca:bb:85:0e:73:77:c9:22:0f:eb:35:69:2b: 66:7a:d0:19:a7:57:c0:57:63:ab:d5:21:24:73:fb:93:f3:ff: d8:91:50:52:cf:d5:60:46:cb:6b:40:a2:d9:0e:72:76:ee:d0: 95:08:9b:c9:d8:03:4a:4a:2f:a9:09:43:fb:1d:52:7f:e0:6a: b9:22:24:cc:f9:f6:e7:51:8c:95:94:b9:7b:2a:e2:45:48:4a: 22:51:ea:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcqliQbrffZv5wm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDQyMjE1NDMwOVoXDTI1MDcyMTE1NDMwOVowLzEtMCsGA1UEAxMk MTdjMDI1OGEtODU4My00MGYyLWFjMjQtNWJjZjIwZjAzM2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhygWLyaLlL2/OhiBn1mVEgiwc0GU91Cs3h1 IKhugkkhrTDbFfZVl8fgJrZfM6aknTuQOjW/3zjQHrunScHbVBnaca0LsxbB7VFX Qg+fXTPGy92l6r1etSDiT9UWUwFEe6MrsxqjrBJKvLyc2LolXrmrG8mjHFgyrTW5 ht+F1qWWSbxX3bqDLj9vzP9FSbcrGiDHeTe9fM+BOjmtWHcedCsJvgSJpLtfacw3 jBOqYw+ZGIjRGdkCcG8U5O1yGwljMSRTuiEEuQiBSpAIXLHDqhMrxvONGLxuSIVf 4+DP5XByZXxQ602l1ofAvsjJYTop9OVf+8oPQbM1WV0e9aunPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2jGb2IaXAwc9wy2RjfMZhzzaPBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNDU4MzU1ODMtNDQ2MC0z ODdmLWIxYWEtZjg2Mjc2YTEzODRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAreiZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERnPtxk9KQr1+IVg2giIgW2eqBD1QNaUgCR3TxA8zfF4aiWTSmwWMlj PbFboNvlD7BrP2it6Z3NN3jjmU+kD7f8czKo1To6W9VRqxWHuTVrfc/VtZ9lBJDC KtyeRIGMvXOdS26gEQWeNvh0O3nx2cYgHhiBQFY9l+6TVXEb5P8ar4A7OuMcDLiv RpLrQt76utHSC5gChQcgTMO0NnXg5ZAu00nc1+i2yruFDnN3ySIP6zVpK2Z60Bmn V8BXY6vVISRz+5Pz/9iRUFLP1WBGy2tAotkOcnbu0JUIm8nYA0pKL6kJQ/sdUn/g arkiJMz59udRjJWUuXsq4kVISiJR6hc= -----END CERTIFICATE-----Generated at Sat Apr 26 13:39:00 2025 by rpki-client