$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/9bff8e2a-4cf2-3a3e-b821-eb2d5f0da19c.roa File: 9bff8e2a-4cf2-3a3e-b821-eb2d5f0da19c.roa (raw, json) Hash identifier: HdM/X1yhL8w0hUjFbasJJNr3bPL5MEMJUna6nPbOIzA= Subject key identifier: A8:2E:61:23:24:D0:72:65:0F:80:41:C7:60:C3:82:BA:AA:0F:8D:C7 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F43285849AFB7AC87AA58194119B3954C Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/9bff8e2a-4cf2-3a3e-b821-eb2d5f0da19c.roa Signing time: Tue 29 Apr 2025 11:30:22 +0000 ROA not before: Tue 29 Apr 2025 11:30:22 +0000 ROA not after: Mon 28 Jul 2025 11:30:22 +0000 asID: 174 IP address blocks: 173.232.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:b7:ac:87:aa:58:19:41:19:b3:95:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Apr 29 11:30:22 2025 GMT Not After : Jul 28 11:30:22 2025 GMT Subject: CN=d901c276-a5d1-4e46-8f67-a28a6e63b8a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a8:de:5e:66:15:f8:9a:ef:ed:25:c9:e2:de: 63:31:58:05:d7:c6:47:bc:ce:00:e3:cd:2c:bd:b8: 34:b5:8b:89:fa:bf:aa:84:04:78:0d:76:a5:6f:9e: 68:e8:05:0e:3e:5b:19:b8:d2:5c:78:ee:cc:f8:cb: b3:e7:b7:7f:58:35:41:5b:a7:b2:64:b9:42:db:ef: 12:53:3d:33:a3:37:0b:16:a7:d6:38:fa:b5:a7:d0: 5e:d6:e9:93:a1:75:06:13:45:57:b4:10:d1:1a:ca: 24:6e:22:33:e6:81:36:f1:97:af:7b:db:3b:13:d7: 7b:32:9b:1f:6b:17:78:a0:61:b3:f7:50:e5:70:90: aa:25:e8:e3:29:25:91:3b:84:df:42:05:fd:63:5a: 7e:bd:e5:e6:2f:d2:ac:d8:1e:26:5e:36:d4:f5:4b: da:44:92:a2:9a:9c:6c:51:0d:0d:c5:27:f0:4c:f5: 0d:32:a1:8a:29:d5:c2:8d:f5:03:2f:da:87:33:eb: f9:aa:93:39:df:1a:44:56:35:37:c7:74:db:b0:b8: 57:1e:46:e4:77:78:96:23:5d:e5:7e:53:6f:4b:71: 9c:ab:9a:83:fb:e6:cc:90:9f:83:b4:2c:ca:dc:8d: b9:4e:67:09:fd:3c:8d:a7:f5:43:22:f1:26:4d:10: 47:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2E:61:23:24:D0:72:65:0F:80:41:C7:60:C3:82:BA:AA:0F:8D:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/9bff8e2a-4cf2-3a3e-b821-eb2d5f0da19c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.183.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:1b:54:72:e4:c1:5e:8c:f5:9a:da:fd:c3:31:da:e9:52:e1: ee:43:48:95:a3:9e:0a:48:16:25:5b:ad:0b:25:4f:6f:dd:c9: d8:27:32:7c:d7:5a:4b:8d:ba:e2:e4:2e:01:0a:29:57:f5:d0: f2:f1:0d:8f:05:80:97:51:cd:41:68:d2:af:cc:21:73:ac:e9: 6b:20:3d:d7:2f:8c:35:24:21:e9:ea:f0:0b:6c:94:8c:56:82: 79:f0:e6:01:ef:0b:99:cd:69:88:f5:6e:5f:73:24:3e:f3:78: c8:c4:b1:be:72:12:27:69:66:5a:03:21:e1:65:fa:7f:d4:93: b6:5a:47:78:f7:c3:40:c4:d0:36:3b:ef:a9:66:f7:2f:45:54: 96:b6:1d:11:65:4f:8f:0e:91:37:55:3e:a8:6a:0d:55:de:ee: 63:85:9c:8c:13:ac:0a:80:5b:a4:2e:a5:c0:1d:b7:4c:df:3d: 84:24:80:fe:cb:e0:f5:6f:80:6f:f1:3a:6c:72:df:a9:a1:cb: 0b:77:5a:87:47:2e:fe:35:8a:15:04:60:a9:66:c9:11:d2:83: 8c:8e:02:fb:63:b0:43:2a:3c:2c:5c:d3:fb:6f:7e:5f:27:b3: 92:da:11:d1:4f:73:48:35:be:f0:39:d7:7b:9b:72:1f:f9:7b: c4:b7:8d:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmvt6yHqlgZQRmzlUwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDQyOTExMzAyMloXDTI1MDcyODExMzAyMlowLzEtMCsGA1UEAxMk ZDkwMWMyNzYtYTVkMS00ZTQ2LThmNjctYTI4YTZlNjNiOGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6jeXmYV+Jrv7SXJ4t5jMVgF18ZHvM4A480s vbg0tYuJ+r+qhAR4DXalb55o6AUOPlsZuNJceO7M+Muz57d/WDVBW6eyZLlC2+8S Uz0zozcLFqfWOPq1p9Be1umToXUGE0VXtBDRGsokbiIz5oE28Zeve9s7E9d7Mpsf axd4oGGz91DlcJCqJejjKSWRO4TfQgX9Y1p+veXmL9Ks2B4mXjbU9UvaRJKimpxs UQ0NxSfwTPUNMqGKKdXCjfUDL9qHM+v5qpM53xpEVjU3x3TbsLhXHkbkd3iWI13l flNvS3Gcq5qD++bMkJ+DtCzK3I25TmcJ/TyNp/VDIvEmTRBHzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKguYSMk0HJlD4BBx2DDgrqqD43HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvOWJmZjhlMmEtNGNmMi0z YTNlLWI4MjEtZWIyZDVmMGRhMTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArei3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8bVHLkwV6M9Zra/cMx2ulS4e5DSJWjngpIFiVbrQslT2/dydgnMnzX WkuNuuLkLgEKKVf10PLxDY8FgJdRzUFo0q/MIXOs6WsgPdcvjDUkIenq8AtslIxW gnnw5gHvC5nNaYj1bl9zJD7zeMjEsb5yEidpZloDIeFl+n/Uk7ZaR3j3w0DE0DY7 76lm9y9FVJa2HRFlT48OkTdVPqhqDVXe7mOFnIwTrAqAW6QupcAdt0zfPYQkgP7L 4PVvgG/xOmxy36mhywt3WodHLv41ihUEYKlmyRHSg4yOAvtjsEMqPCxc0/tvfl8n s5LaEdFPc0g1vvA513ubch/5e8S3jdI= -----END CERTIFICATE-----Generated at Thu May 1 01:26:43 2025 by rpki-client