$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/065745b9-75a2-38ea-b51f-df2787a4a0e1.roa File: 065745b9-75a2-38ea-b51f-df2787a4a0e1.roa (raw, json) Hash identifier: 1ZLqjHBUcL6v6NvKCwinL48Hj5IarvK1svufjVWYsEc= Subject key identifier: A3:07:55:31:D2:65:63:62:38:09:E4:E4:16:7B:29:D3:BB:B1:DD:51 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1CD8B1C3BA7411D060C9580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/065745b9-75a2-38ea-b51f-df2787a4a0e1.roa Signing time: Thu 24 Apr 2025 11:53:07 +0000 ROA not before: Thu 24 Apr 2025 11:53:07 +0000 ROA not after: Wed 23 Jul 2025 11:53:07 +0000 asID: 19905 IP address blocks: 173.17.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:cd:8b:1c:3b:a7:41:1d:06:0c:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 11:53:07 2025 GMT Not After : Jul 23 11:53:07 2025 GMT Subject: CN=9f0197ee-af42-4d76-9754-3af9176e9b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c3:db:ff:92:95:25:51:f3:4a:48:bd:bd:d2: 30:99:dc:b7:4b:29:6c:a3:ad:ad:e8:3d:1f:ac:b5: 58:7e:f7:b0:32:cb:9d:1e:b6:49:88:05:dc:61:d6: 61:94:da:2e:b8:9f:51:aa:93:5e:a6:a0:ab:c7:12: f3:b0:58:19:f4:37:f5:e5:f0:87:ad:0e:60:f4:79: fc:e1:45:80:45:09:1c:3f:9a:00:56:25:58:5c:90: 26:6a:4a:4e:33:48:d9:5d:65:e7:6b:65:be:21:d5: 7a:53:4a:4e:60:a0:ef:88:c0:67:07:94:05:af:5e: 19:12:92:61:7a:ea:87:f1:53:e3:dd:de:6b:19:55: 10:8f:2f:c3:ed:5e:55:58:d4:2b:cf:59:a4:83:57: 20:0d:26:83:02:ad:3e:cb:ee:11:dc:88:47:21:ed: e1:6d:31:4b:61:5a:99:69:cd:fd:ad:70:fb:b6:bf: c4:66:07:94:59:42:a5:ec:e7:d6:73:d8:93:68:0e: f4:d9:57:d0:2b:03:98:cc:b5:97:a8:2e:60:44:2f: 1d:42:12:b3:8f:36:73:33:d3:57:ed:a4:fb:9d:5b: ed:31:a2:ed:2a:b0:09:cb:c8:3f:05:e6:34:84:00: 8f:59:ab:2b:fe:42:7b:1a:92:d6:5c:90:11:bf:e3: 99:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:07:55:31:D2:65:63:62:38:09:E4:E4:16:7B:29:D3:BB:B1:DD:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/065745b9-75a2-38ea-b51f-df2787a4a0e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:db:92:51:2a:cc:a7:be:5b:b7:66:35:b6:cc:d0:eb:94:ef: a8:0c:0d:70:78:d9:be:4c:d2:06:71:29:8f:ac:6f:fa:b6:1b: 68:ce:e1:2d:b8:c1:6d:da:c2:37:cc:3f:8f:33:91:74:de:d5: 12:39:b6:28:d2:25:7b:f0:08:0b:58:d8:b8:0d:9d:e6:3e:91: b7:b3:57:4d:1c:ed:68:c9:de:4d:ba:af:d5:68:cd:f9:a7:be: 43:3a:69:6a:b9:31:38:e0:7a:39:b0:c0:7e:99:29:30:61:bd: f7:b1:bf:f2:eb:bc:32:d8:ad:19:08:f2:e0:ce:5a:19:41:b5: e4:97:2e:1e:fd:4a:10:b7:d0:7d:d3:df:b2:3e:e2:f1:fe:24: 0f:96:f1:54:c8:4c:f3:a2:e9:5c:22:6d:6b:af:00:15:07:bb: a9:0d:27:d2:59:e7:80:68:a0:bc:c6:1b:2a:46:31:4b:c1:30: 47:15:7e:1c:b3:91:66:d6:02:85:3e:32:a0:b1:8e:2d:87:49: ce:51:7f:21:be:69:78:b5:0b:c2:2b:57:47:aa:2a:8d:b6:75: e5:2c:53:cd:57:af:78:68:01:6b:59:dd:f4:07:4c:9f:b0:20: 54:a0:77:44:25:8f:ca:06:27:35:42:af:94:6b:34:66:8b:a0: a0:e1:3b:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhzYscO6dBHQYMlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDExNTMwN1oXDTI1MDcyMzExNTMwN1owLzEtMCsGA1UEAxMk OWYwMTk3ZWUtYWY0Mi00ZDc2LTk3NTQtM2FmOTE3NmU5YjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssPb/5KVJVHzSki9vdIwmdy3Sylso62t6D0f rLVYfvewMsudHrZJiAXcYdZhlNouuJ9RqpNepqCrxxLzsFgZ9Df15fCHrQ5g9Hn8 4UWARQkcP5oAViVYXJAmakpOM0jZXWXna2W+IdV6U0pOYKDviMBnB5QFr14ZEpJh euqH8VPj3d5rGVUQjy/D7V5VWNQrz1mkg1cgDSaDAq0+y+4R3IhHIe3hbTFLYVqZ ac39rXD7tr/EZgeUWUKl7OfWc9iTaA702VfQKwOYzLWXqC5gRC8dQhKzjzZzM9NX 7aT7nVvtMaLtKrAJy8g/BeY0hACPWasr/kJ7GpLWXJARv+OZQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMHVTHSZWNiOAnk5BZ7KdO7sd1RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDY1NzQ1YjktNzVhMi0z OGVhLWI1MWYtZGYyNzg3YTRhMGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvbklEqzKe+W7dmNbbM0OuU76gMDXB42b5M0gZxKY+sb/q2G2jO4S24 wW3awjfMP48zkXTe1RI5tijSJXvwCAtY2LgNneY+kbezV00c7WjJ3k26r9Vozfmn vkM6aWq5MTjgejmwwH6ZKTBhvfexv/LrvDLYrRkI8uDOWhlBteSXLh79ShC30H3T 37I+4vH+JA+W8VTITPOi6VwibWuvABUHu6kNJ9JZ54BooLzGGypGMUvBMEcVfhyz kWbWAoU+MqCxji2HSc5RfyG+aXi1C8IrV0eqKo22deUsU81Xr3hoAWtZ3fQHTJ+w IFSgd0Qlj8oGJzVCr5RrNGaLoKDhOw4= -----END CERTIFICATE-----Generated at Sun Jun 29 18:20:47 2025 by rpki-client