$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b04f3667-170e-38b0-90e2-b80e9d9eddb3.roa File: b04f3667-170e-38b0-90e2-b80e9d9eddb3.roa (raw, json) Hash identifier: HGVoi11ymIzoKU0Ymv7NyIPlfBDwWpaJB1Mw3D12tkM= Subject key identifier: C9:5D:19:C3:8D:B3:DD:1C:28:A4:7E:31:3B:E3:3C:71:76:28:CE:B1 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F43285849AFB9DB17512159D92BE8CB40 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b04f3667-170e-38b0-90e2-b80e9d9eddb3.roa Signing time: Tue 29 Apr 2025 11:34:46 +0000 ROA not before: Tue 29 Apr 2025 11:34:46 +0000 ROA not after: Mon 28 Jul 2025 11:34:46 +0000 asID: 174 IP address blocks: 173.232.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:af:b9:db:17:51:21:59:d9:2b:e8:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Apr 29 11:34:46 2025 GMT Not After : Jul 28 11:34:46 2025 GMT Subject: CN=855b947b-7fd1-40ec-8424-4d55d92dfc5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:91:4b:7b:6a:31:aa:f6:78:4c:64:e7:d9:dd: 49:08:be:0d:5e:df:a6:44:6b:0a:37:48:8b:82:d4: 36:66:b5:b7:12:a6:d0:0c:af:52:d9:3b:ce:b5:88: c9:fe:eb:a3:db:28:e5:46:9f:8b:02:77:05:c2:ba: 03:8c:49:ee:c0:3c:e8:1e:9f:d7:f3:6c:f1:14:5d: ba:c6:c0:af:f8:fe:32:88:2c:a2:2d:03:d0:64:e7: 23:c4:5f:3c:28:b0:2c:f3:5e:54:2e:72:22:92:05: c8:00:44:c6:13:d2:a5:f7:86:b1:ae:17:72:e5:90: 53:7e:7b:ac:56:e8:f8:77:37:00:08:21:e4:fd:e7: 2d:ff:5b:64:41:26:77:9d:b1:4d:93:f8:f7:d3:25: df:62:79:47:c8:ef:cb:91:f7:26:64:ec:bd:9c:56: c7:a9:b4:9e:39:4f:5f:fe:b9:1a:45:33:a4:63:4d: 0c:75:4a:d1:ab:72:27:f7:62:d5:8f:ef:50:75:63: e1:45:a1:5f:ab:62:7c:e1:2c:97:6c:42:01:84:83: 07:71:34:2b:23:f9:cd:f3:2e:c5:7c:47:8b:68:19: ed:a5:13:ae:98:f5:5d:5a:35:8f:b8:ee:66:ad:f4: 86:0a:20:25:90:0d:a0:5a:35:d3:c1:3a:2e:8f:4e: 50:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:5D:19:C3:8D:B3:DD:1C:28:A4:7E:31:3B:E3:3C:71:76:28:CE:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b04f3667-170e-38b0-90e2-b80e9d9eddb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:23:d3:f6:d6:a4:49:59:0c:33:72:9e:75:ad:95:53:d6:16: d7:11:76:d6:89:2a:4f:5f:5f:2b:88:82:fb:fb:10:27:ac:bf: ec:56:16:7c:50:d3:fb:4f:35:fd:81:fe:6f:fb:77:62:4c:b2: 16:d2:a9:b9:8c:bc:92:f8:3c:40:22:7c:a4:b3:bf:25:24:5b: 9b:25:af:99:86:c2:71:02:9f:ec:9d:52:f8:88:e5:bc:4e:86: 3a:1b:11:cb:a5:98:e8:4b:5a:68:52:ba:3d:d7:31:43:1d:3c: 96:7f:60:3b:04:91:5c:75:7e:d2:06:35:d0:fa:47:8b:e7:e3: 43:90:63:58:a5:0b:aa:18:80:9e:6b:5c:97:32:64:cb:a2:b0: d4:9d:ec:d9:fa:3d:62:a1:cd:2d:40:d5:2c:00:2c:cb:5d:25: 35:91:f0:f3:84:c4:17:cd:52:f2:f1:e5:a3:5d:f9:c1:bc:22: 81:f1:e4:80:44:79:15:b0:24:c9:4c:8c:e4:fa:04:b4:0f:e0: 3e:73:1a:80:ed:e5:cf:25:d5:a0:59:33:be:34:f3:c9:af:2e: 71:d7:cf:19:03:f3:3b:db:57:9e:95:4b:11:6c:2c:03:11:08: 71:71:45:f8:36:b7:55:67:79:e6:e3:64:e4:63:8d:22:cb:5e: 22:fa:34:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmvudsXUSFZ2Svoy0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDQyOTExMzQ0NloXDTI1MDcyODExMzQ0NlowLzEtMCsGA1UEAxMk ODU1Yjk0N2ItN2ZkMS00MGVjLTg0MjQtNGQ1NWQ5MmRmYzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpFLe2oxqvZ4TGTn2d1JCL4NXt+mRGsKN0iL gtQ2ZrW3EqbQDK9S2TvOtYjJ/uuj2yjlRp+LAncFwroDjEnuwDzoHp/X82zxFF26 xsCv+P4yiCyiLQPQZOcjxF88KLAs815ULnIikgXIAETGE9Kl94axrhdy5ZBTfnus Vuj4dzcACCHk/ect/1tkQSZ3nbFNk/j30yXfYnlHyO/LkfcmZOy9nFbHqbSeOU9f /rkaRTOkY00MdUrRq3In92LVj+9QdWPhRaFfq2J84SyXbEIBhIMHcTQrI/nN8y7F fEeLaBntpROumPVdWjWPuO5mrfSGCiAlkA2gWjXTwTouj05Q3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMldGcONs90cKKR+MTvjPHF2KM6xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYjA0ZjM2NjctMTcwZS0z OGIwLTkwZTItYjgwZTlkOWVkZGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAreg/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwj0/bWpElZDDNynnWtlVPWFtcRdtaJKk9fXyuIgvv7ECesv+xWFnxQ 0/tPNf2B/m/7d2JMshbSqbmMvJL4PEAifKSzvyUkW5slr5mGwnECn+ydUviI5bxO hjobEculmOhLWmhSuj3XMUMdPJZ/YDsEkVx1ftIGNdD6R4vn40OQY1ilC6oYgJ5r XJcyZMuisNSd7Nn6PWKhzS1A1SwALMtdJTWR8POExBfNUvLx5aNd+cG8IoHx5IBE eRWwJMlMjOT6BLQP4D5zGoDt5c8l1aBZM74088mvLnHXzxkD8zvbV56VSxFsLAMR CHFxRfg2t1VneebjZORjjSLLXiL6NLk= -----END CERTIFICATE-----Generated at Thu May 1 06:48:21 2025 by rpki-client