$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/3a0f091a-389d-3b3e-9644-f38a94d40195.roa File: 3a0f091a-389d-3b3e-9644-f38a94d40195.roa (raw, json) Hash identifier: iHiihCrum87bDU7QxadRWRm+waFb4dxIqKan1GWRNn8= Subject key identifier: 04:E1:5A:F5:A2:1C:30:30:BB:68:D7:F6:6E:39:51:FF:65:92:47:7B Certificate issuer: /CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279 Certificate serial: 010D0C9F432858497AD9B064A17475F65E7AC180 Authority key identifier: C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/3a0f091a-389d-3b3e-9644-f38a94d40195.roa Signing time: Thu 10 Apr 2025 13:00:59 +0000 ROA not before: Thu 10 Apr 2025 13:00:59 +0000 ROA not after: Wed 09 Jul 2025 13:00:59 +0000 asID: 46562 IP address blocks: 173.0.73.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7a:d9:b0:64:a1:74:75:f6:5e:7a:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279 Validity Not Before: Apr 10 13:00:59 2025 GMT Not After : Jul 9 13:00:59 2025 GMT Subject: CN=b9c67ee1-7f98-44b3-8ec9-f78865ae5e55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ab:d8:ca:fd:25:b4:0e:1c:d1:b9:f9:f5:6f: 6b:bd:cf:d0:87:f0:bc:88:41:26:a0:48:8f:a3:5f: b4:db:b3:1a:21:e7:c6:c8:cd:4c:76:29:3c:e6:97: 02:a1:4f:16:0a:3e:7b:36:f4:0d:28:81:ca:2f:37: 86:af:16:c7:38:d2:df:ff:c4:26:f9:69:46:c8:3d: c4:1e:16:22:4b:23:61:60:6a:98:07:00:7d:bb:57: ee:92:4e:7c:f3:1e:ce:18:db:6d:6d:7f:e1:51:a6: 1f:58:cc:db:35:28:d5:6f:ce:91:eb:da:d7:fb:21: 2f:42:1b:1a:b1:2f:79:ab:77:9d:3d:cf:c9:e9:fd: 97:29:f4:f9:1c:0a:2c:11:78:8d:07:db:8b:a8:10: a2:e0:5c:5e:37:e1:68:9a:b5:b1:6e:a7:d9:cf:37: 53:5a:49:e9:54:5f:49:39:9a:ae:12:d3:1c:5f:b1: f0:32:29:fa:64:35:f9:95:e2:53:ab:e1:8e:76:01: de:cf:3b:19:dd:b0:26:50:cd:73:6c:71:c4:b4:07: 71:cd:75:ab:e4:59:f5:20:37:e7:c2:00:5c:08:f6: 0c:ea:14:e7:72:9b:f8:de:5d:33:59:ef:dd:29:9e: 31:cf:74:66:77:7c:06:62:b9:dd:57:a7:a5:29:46: 8e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E1:5A:F5:A2:1C:30:30:BB:68:D7:F6:6E:39:51:FF:65:92:47:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/3a0f091a-389d-3b3e-9644-f38a94d40195.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl X509v3 Authority Key Identifier: keyid:C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer sbgp-ipAddrBlock: critical IPv4: 173.0.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:b1:be:f7:fd:9b:07:c4:d9:45:6f:a2:24:03:8a:bc:1c:9e: 47:ff:45:e1:3d:1f:37:96:64:28:3d:2f:aa:7b:8a:e4:ce:a2: 93:bd:76:bc:20:84:7e:bc:5d:c7:d7:74:4e:a9:2a:dd:ee:bf: 36:8a:e7:90:78:e1:71:9e:33:e8:2f:67:b1:59:48:ee:8a:77: 63:80:6b:57:2f:67:c3:3d:01:30:36:34:16:ec:7f:06:3e:e4: a5:78:f7:b7:44:9e:15:8e:37:cf:a8:0b:52:62:92:59:ca:ef: 9f:ca:d6:87:82:6c:f4:3f:fe:41:5d:b2:25:08:be:f6:d4:09: 6e:06:65:2c:f1:2f:81:ed:6d:14:a2:f6:8d:73:60:a1:8b:66: e9:65:07:4b:2c:bb:c0:36:46:ca:36:18:cc:6f:e9:d4:5a:3e: 55:42:e7:98:9f:5b:e5:f8:3f:a2:ff:e6:00:20:97:81:2d:54: 15:bf:b5:e1:51:2c:37:ff:e0:9f:c8:6a:f6:c3:eb:7e:d4:54: 7a:7b:7c:50:ff:a6:59:d4:e7:20:f5:38:a4:81:88:7a:31:36: 32:16:2d:1e:56:99:10:d2:ce:d5:5d:4a:8d:e5:4e:3b:38:4f: 75:bf:bd:10:0d:7a:d3:b4:f9:67:99:32:32:5f:e5:2f:e2:43: 15:14:fb:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl62bBkoXR19l56wYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDUzMjNkYWMtYTE1ZC00ZjgyLWE3MGItMzBlMWE0Y2Ex Mjc5MB4XDTI1MDQxMDEzMDA1OVoXDTI1MDcwOTEzMDA1OVowLzEtMCsGA1UEAxMk YjljNjdlZTEtN2Y5OC00NGIzLThlYzktZjc4ODY1YWU1ZTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqvYyv0ltA4c0bn59W9rvc/Qh/C8iEEmoEiP o1+027MaIefGyM1Mdik85pcCoU8WCj57NvQNKIHKLzeGrxbHONLf/8Qm+WlGyD3E HhYiSyNhYGqYBwB9u1fukk588x7OGNttbX/hUaYfWMzbNSjVb86R69rX+yEvQhsa sS95q3edPc/J6f2XKfT5HAosEXiNB9uLqBCi4FxeN+FomrWxbqfZzzdTWknpVF9J OZquEtMcX7HwMin6ZDX5leJTq+GOdgHezzsZ3bAmUM1zbHHEtAdxzXWr5Fn1IDfn wgBcCPYM6hTncpv43l0zWe/dKZ4xz3Rmd3wGYrndV6elKUaODwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAThWvWiHDAwu2jX9m45Uf9lkkd7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNTMy M2RhYy1hMTVkLTRmODItYTcwYi0zMGUxYTRjYTEyNzkvM2EwZjA5MWEtMzg5ZC0z YjNlLTk2NDQtZjM4YTk0ZDQwMTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDUzMjNkYWMtYTE1ZC00ZjgyLWE3 MGItMzBlMWE0Y2ExMjc5L2Q1MzIzZGFjLWExNWQtNGY4Mi1hNzBiLTMwZTFhNGNh MTI3OS5jcmwwHwYDVR0jBBgwFoAUyDY3c/UqyujL65IZblyvIFXxGr4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNTMyM2RhYy1hMTVkLTRmODItYTcwYi0zMGUx YTRjYTEyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArQBJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMCxvvf9mwfE2UVvoiQDirwcnkf/ReE9HzeWZCg9L6p7iuTOopO9drwg hH68XcfXdE6pKt3uvzaK55B44XGeM+gvZ7FZSO6Kd2OAa1cvZ8M9ATA2NBbsfwY+ 5KV497dEnhWON8+oC1JiklnK75/K1oeCbPQ//kFdsiUIvvbUCW4GZSzxL4HtbRSi 9o1zYKGLZullB0ssu8A2Rso2GMxv6dRaPlVC55ifW+X4P6L/5gAgl4EtVBW/teFR LDf/4J/IavbD637UVHp7fFD/plnU5yD1OKSBiHoxNjIWLR5WmRDSztVdSo3lTjs4 T3W/vRANetO0+WeZMjJf5S/iQxUU+9U= -----END CERTIFICATE-----Generated at Sat Apr 26 13:15:43 2025 by rpki-client