$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ffe719d-7b62-3608-b488-f385e0f93231.roa File: 0ffe719d-7b62-3608-b488-f385e0f93231.roa (raw, json) Hash identifier: PsAdGsBEr+qJbhOBhj7/PMzDXjixrp6v4YEp0ssvb4w= Subject key identifier: EF:33:7E:2B:CC:CF:2B:86:A4:7B:A7:54:72:2F:75:B7:79:11:D8:72 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784A8347A4E7419824DA600 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ffe719d-7b62-3608-b488-f385e0f93231.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.19.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:a8:34:7a:4e:74:19:82:4d:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=0c3c9518-3716-44a6-94ef-10c5625df85b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d2:5b:b2:c9:c3:e8:b7:58:a2:97:49:d5:af: df:ec:1d:1a:8e:f3:15:89:59:5d:1d:58:b5:02:bd: 43:a9:99:25:44:f6:dd:8b:51:be:0c:3c:f1:9e:35: fb:2f:a7:35:07:9c:fe:db:65:6d:65:2a:23:58:1c: c7:2d:d1:29:12:23:0f:c5:9b:25:64:dd:b3:22:e3: 0d:c7:70:67:43:97:c4:03:7c:a2:85:3c:98:fd:54: 98:b8:88:0a:31:03:fb:49:86:3e:61:9c:0a:d7:76: 7f:f6:e8:f6:c3:6b:a6:8c:a4:0b:90:0a:88:d7:56: 32:cb:01:1c:f0:0a:39:65:31:c2:91:96:06:89:05: c2:bc:32:1f:f4:97:bc:d5:90:cc:91:72:a4:16:9c: 78:87:19:b6:76:b6:ce:68:28:66:4a:e2:9f:7d:42: e5:a0:f2:f4:96:e9:a0:44:a0:b5:41:32:bc:a0:1e: f2:ee:08:46:82:d0:bc:eb:79:b2:86:23:ea:23:5c: 6d:b2:48:3d:0c:e1:d9:67:9f:0b:42:a7:74:37:54: 49:3e:6d:5d:25:ed:d3:dd:f8:43:4e:ba:9a:a6:74: fa:c8:c5:4a:ae:dd:bf:5f:7d:7b:50:cf:23:f4:ad: b3:13:1f:d4:4c:ff:2f:a3:53:4f:9e:3f:cc:64:15: 40:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:33:7E:2B:CC:CF:2B:86:A4:7B:A7:54:72:2F:75:B7:79:11:D8:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ffe719d-7b62-3608-b488-f385e0f93231.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:db:3c:48:0f:f3:ed:99:42:de:89:f3:7d:09:6a:ee:c0:eb: fc:74:b2:4e:af:b7:42:b8:42:66:fa:46:1e:10:15:20:50:54: b0:0e:6b:47:49:cb:45:1d:f8:7f:63:3d:86:3d:67:62:cd:1c: 81:16:70:48:d6:77:63:de:8b:d2:51:27:68:ed:c7:46:02:57: 3f:a0:4f:81:84:5f:a7:d9:02:20:76:42:3a:e0:ec:e0:c3:b9: 55:77:b9:a8:66:45:ee:cd:70:92:8c:f8:c2:9c:b0:04:84:97: 73:7e:3b:5b:be:84:2a:22:07:2a:54:ad:fb:3f:44:f1:74:97: ad:54:58:dc:45:ba:4f:43:ce:50:09:f4:e7:5a:27:85:bf:4f: 6c:fe:e9:30:14:78:13:28:17:bc:e3:51:4c:cc:be:7a:87:2e: 62:33:20:d0:c1:8b:d9:6a:ce:09:f2:50:ac:1a:7b:96:f5:a6: c1:2c:df:05:a1:b7:b6:49:f2:ca:30:6f:79:4f:c7:eb:56:83: 9d:94:b5:69:b3:49:fa:93:dc:eb:cf:03:01:f8:5f:51:a7:a8: 81:52:0d:e4:c3:58:ce:0f:49:bf:47:f9:97:8d:64:07:2b:19: 06:06:dc:0c:cc:e2:ce:e3:d4:e1:6d:c7:5b:b8:e1:fd:5f:a6: c5:42:93:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhKg0ek50GYJNpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MGMzYzk1MTgtMzcxNi00NGE2LTk0ZWYtMTBjNTYyNWRmODViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNJbssnD6LdYopdJ1a/f7B0ajvMViVldHVi1 Ar1DqZklRPbdi1G+DDzxnjX7L6c1B5z+22VtZSojWBzHLdEpEiMPxZslZN2zIuMN x3BnQ5fEA3yihTyY/VSYuIgKMQP7SYY+YZwK13Z/9uj2w2umjKQLkAqI11YyywEc 8Ao5ZTHCkZYGiQXCvDIf9Je81ZDMkXKkFpx4hxm2drbOaChmSuKffULloPL0lumg RKC1QTK8oB7y7ghGgtC863myhiPqI1xtskg9DOHZZ58LQqd0N1RJPm1dJe3T3fhD TrqapnT6yMVKrt2/X317UM8j9K2zEx/UTP8vo1NPnj/MZBVAFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8zfivMzyuGpHunVHIvdbd5EdhyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGZmZTcxOWQtN2I2Mi0z NjA4LWI0ODgtZjM4NWUwZjkzMjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRMkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfbPEgP8+2ZQt6J830Jau7A6/x0sk6vt0K4Qmb6Rh4QFSBQVLAOa0dJ y0Ud+H9jPYY9Z2LNHIEWcEjWd2Pei9JRJ2jtx0YCVz+gT4GEX6fZAiB2Qjrg7ODD uVV3uahmRe7NcJKM+MKcsASEl3N+O1u+hCoiBypUrfs/RPF0l61UWNxFuk9DzlAJ 9OdaJ4W/T2z+6TAUeBMoF7zjUUzMvnqHLmIzINDBi9lqzgnyUKwae5b1psEs3wWh t7ZJ8sowb3lPx+tWg52UtWmzSfqT3OvPAwH4X1GnqIFSDeTDWM4PSb9H+ZeNZAcr GQYG3AzM4s7j1OFtx1u44f1fpsVCk9M= -----END CERTIFICATE-----Generated at Fri May 9 02:48:53 2025 by rpki-client