$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1391cef1-b129-3cf8-9b20-f81e6a35cad6.roa File: 1391cef1-b129-3cf8-9b20-f81e6a35cad6.roa (raw, json) Hash identifier: fzCwrZZrvV2sNxkPtC7dY1H6L8ZC1cTFu7qt36zdsR8= Subject key identifier: 43:89:4B:12:BA:09:A4:2B:55:8C:D5:60:88:E0:27:10:14:5B:D3:D8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849B0C54B8115824B026E222E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1391cef1-b129-3cf8-9b20-f81e6a35cad6.roa Signing time: Tue 29 Apr 2025 20:33:37 +0000 ROA not before: Tue 29 Apr 2025 20:33:37 +0000 ROA not after: Mon 28 Jul 2025 20:33:37 +0000 asID: 19905 IP address blocks: 173.24.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b0:c5:4b:81:15:82:4b:02:6e:22:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 29 20:33:37 2025 GMT Not After : Jul 28 20:33:37 2025 GMT Subject: CN=89aff25d-1015-4e72-bee0-628434881113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3d:27:19:85:e5:dc:30:83:a0:0e:db:f8:e0: 5f:b3:fd:01:8b:78:3f:25:9b:42:6a:d1:d2:51:6a: 5b:82:3e:b9:bb:dc:6d:9c:25:f7:db:b7:2a:90:53: a4:de:02:51:1d:3e:2f:46:f0:b8:44:33:52:bc:8e: 78:d4:02:d6:93:bd:a6:97:96:aa:3a:5e:1b:d8:14: 71:c1:2b:06:14:33:8a:f0:f4:57:d2:8b:e7:f2:82: aa:22:e1:a2:8b:6a:69:99:7b:f0:7d:8d:23:48:31: 21:c4:95:4e:b5:42:11:5b:0b:8d:97:fc:47:ba:ad: 56:f8:00:58:f6:15:62:73:b7:8a:0a:f6:4b:34:1b: 32:0f:a3:fd:17:09:87:67:e7:e8:36:7f:5c:99:82: e3:8e:42:eb:29:56:61:b7:61:8b:c7:b6:49:a0:41: 51:5e:2f:63:cc:a6:9e:e1:3d:ba:5c:d6:47:b2:3e: c1:c3:fc:1c:02:cf:73:75:a4:88:4a:91:b4:ce:40: 23:a4:d1:43:76:fc:69:39:90:d5:d3:b2:8b:78:32: f3:b3:9a:b0:10:f9:7f:7d:82:0c:e6:dd:db:b7:d1: 42:51:bf:e7:e4:29:a2:df:64:70:96:0f:f9:de:aa: 12:d8:eb:ac:92:f9:c6:f9:3b:38:42:36:54:5d:ba: fb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:89:4B:12:BA:09:A4:2B:55:8C:D5:60:88:E0:27:10:14:5B:D3:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1391cef1-b129-3cf8-9b20-f81e6a35cad6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:e8:84:b7:30:8b:ec:39:63:1e:3f:08:ed:f5:46:33:2e:5f: ce:15:cf:46:ed:06:e6:88:29:3b:4f:4c:20:17:14:84:5e:03: 25:61:39:ba:93:5e:89:f0:57:7f:63:d0:d8:ce:67:15:9c:04: d8:43:45:5b:dd:8f:a0:5f:c5:9f:f3:cc:f2:1a:79:5e:04:e0: 49:2b:7c:21:37:5b:f4:3e:8a:32:57:20:de:e1:01:c2:60:e3: b0:aa:be:35:61:0a:15:53:d0:2b:46:bd:9b:90:7b:79:11:dd: 51:86:f7:82:c0:e7:d5:d9:70:ca:32:72:3e:80:d0:59:52:1d: 08:45:4d:f7:74:ba:fa:45:27:cf:23:b9:56:2e:83:0d:d1:f4: e9:fb:b8:ac:e1:38:36:10:a5:d4:da:43:7f:a4:bd:6b:a0:c5: db:d2:87:dc:01:e6:b6:8f:33:5f:f3:6b:79:c1:73:41:c8:1d: f5:ea:0c:b0:23:99:15:98:7c:d1:4c:24:b5:f6:7b:c5:bd:c9: 6b:ee:fc:b8:23:4c:1e:c0:09:f8:9f:99:cc:35:52:8f:25:dc: 7f:2c:11:83:f1:92:80:0d:08:6c:54:1f:c8:e0:c7:a8:88:cf: d9:e3:6c:80:b5:82:f4:36:ea:6f:5f:4a:3d:55:22:6e:61:5b: bb:6b:6a:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmwxUuBFYJLAm4iLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyOTIwMzMzN1oXDTI1MDcyODIwMzMzN1owLzEtMCsGA1UEAxMk ODlhZmYyNWQtMTAxNS00ZTcyLWJlZTAtNjI4NDM0ODgxMTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD0nGYXl3DCDoA7b+OBfs/0Bi3g/JZtCatHS UWpbgj65u9xtnCX327cqkFOk3gJRHT4vRvC4RDNSvI541ALWk72ml5aqOl4b2BRx wSsGFDOK8PRX0ovn8oKqIuGii2ppmXvwfY0jSDEhxJVOtUIRWwuNl/xHuq1W+ABY 9hVic7eKCvZLNBsyD6P9FwmHZ+foNn9cmYLjjkLrKVZht2GLx7ZJoEFRXi9jzKae 4T26XNZHsj7Bw/wcAs9zdaSISpG0zkAjpNFDdvxpOZDV07KLeDLzs5qwEPl/fYIM 5t3bt9FCUb/n5Cmi32Rwlg/53qoS2OuskvnG+Ts4QjZUXbr7qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOJSxK6CaQrVYzVYIjgJxAUW9PYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTM5MWNlZjEtYjEyOS0z Y2Y4LTliMjAtZjgxZTZhMzVjYWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRjGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/ohLcwi+w5Yx4/CO31RjMuX84Vz0btBuaIKTtPTCAXFIReAyVhObqT XonwV39j0NjOZxWcBNhDRVvdj6BfxZ/zzPIaeV4E4EkrfCE3W/Q+ijJXIN7hAcJg 47CqvjVhChVT0CtGvZuQe3kR3VGG94LA59XZcMoycj6A0FlSHQhFTfd0uvpFJ88j uVYugw3R9On7uKzhODYQpdTaQ3+kvWugxdvSh9wB5raPM1/za3nBc0HIHfXqDLAj mRWYfNFMJLX2e8W9yWvu/LgjTB7ACfifmcw1Uo8l3H8sEYPxkoANCGxUH8jgx6iI z9njbIC1gvQ26m9fSj1VIm5hW7tratg= -----END CERTIFICATE-----Generated at Tue May 6 23:37:58 2025 by rpki-client