$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c398cd1-871d-3818-8787-5e09aedcda85.roa File: 3c398cd1-871d-3818-8787-5e09aedcda85.roa (raw, json) Hash identifier: U2PoRugcHz1KxZ6Ly1HAGrxjxsece2odpNRjtLcx29o= Subject key identifier: 2D:9F:85:F9:AB:A3:54:B0:F1:4B:0D:59:92:42:FF:F6:98:EE:24:6D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1CD12F3C1496CC5AE718CA4 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c398cd1-871d-3818-8787-5e09aedcda85.roa Signing time: Thu 24 Apr 2025 11:52:10 +0000 ROA not before: Thu 24 Apr 2025 11:52:10 +0000 ROA not after: Wed 23 Jul 2025 11:52:10 +0000 asID: 19905 IP address blocks: 173.17.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:cd:12:f3:c1:49:6c:c5:ae:71:8c:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 11:52:10 2025 GMT Not After : Jul 23 11:52:10 2025 GMT Subject: CN=ee4de062-2327-4a21-b5c3-18a990221acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:28:b6:de:2a:bb:16:34:63:bc:90:39:6b:c5: 8f:0a:77:38:dd:44:1f:fe:03:2a:ef:6b:5d:8a:9b: ef:85:65:66:6d:99:7a:59:2b:4d:97:b9:70:e9:d3: cf:7a:4c:73:40:b4:23:fd:1a:77:e6:eb:f2:49:61: 20:8c:cc:6e:ab:8e:a7:0c:ad:bf:2c:7e:a9:eb:3f: b8:01:d5:ce:5d:45:5c:3e:ab:e9:7f:64:6a:08:a0: 4c:48:95:79:66:0b:03:55:7a:0a:a7:7c:60:70:2c: 2a:6d:e0:9a:7f:ba:9f:01:bd:78:80:2c:1c:e1:d8: bd:3e:80:0d:cf:e4:ef:02:79:47:d2:0a:09:58:2c: 32:8d:30:14:22:d8:fe:78:31:3e:6b:63:8e:88:59: a6:41:01:88:85:66:33:d4:b3:cf:27:55:06:f0:62: b1:5d:49:c3:fb:df:a6:04:a7:6b:45:10:c3:5c:a4: 25:42:fa:72:1d:54:7f:ae:cb:2b:e4:0f:cb:1e:a6: c1:ad:58:32:74:0f:cb:97:5a:dc:98:a0:bc:9f:db: 18:3f:af:25:97:6d:82:6f:81:b1:30:0e:58:c3:ab: 36:62:73:78:c6:27:08:b8:6d:5e:14:4c:4e:65:58: 21:81:f0:b0:be:2c:a3:4b:34:c0:da:96:f9:52:29: 6f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9F:85:F9:AB:A3:54:B0:F1:4B:0D:59:92:42:FF:F6:98:EE:24:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c398cd1-871d-3818-8787-5e09aedcda85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.76.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:68:f2:48:09:49:93:c9:f5:22:f5:ba:3d:a9:da:89:6b:28: 52:81:a7:59:31:e9:80:fc:f9:64:03:89:96:3e:c9:03:2c:b0: d0:4e:06:ab:90:cb:ee:00:66:f8:1c:62:cc:82:37:9d:c6:49: 1f:7d:ac:1b:62:cb:a0:78:60:5a:ac:06:1a:e3:c4:58:6c:2d: 4c:6a:8e:24:19:ce:cb:d3:a5:08:2d:44:ff:18:7e:48:16:a6: 3d:08:fa:ce:e3:95:a1:f3:ee:84:74:47:46:50:87:80:05:39: 3c:63:e8:44:6b:c7:9c:e9:a6:63:59:29:0a:7d:96:c0:f3:05: 9f:f0:38:58:cf:fa:06:a3:6d:7d:4a:9a:35:a2:4d:1b:53:ec: eb:92:2d:f8:48:91:5b:00:e0:60:23:06:d3:25:0c:2a:75:92: f8:d6:01:d9:1b:37:d0:03:98:82:df:af:79:d7:73:00:f4:1f: a8:35:0b:0f:95:84:ff:3e:7f:f5:22:9b:6a:32:f1:5b:75:20: 16:b2:1e:fd:09:9a:14:43:59:3c:57:5c:00:99:9d:74:c4:32: 96:2d:36:91:07:b7:5d:e3:23:bf:3b:0e:b1:40:37:1b:be:cb: 62:76:29:85:1c:04:94:d5:a0:2a:da:8d:cc:c9:30:da:02:5d: a1:bd:7a:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhzRLzwUlsxa5xjKQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDExNTIxMFoXDTI1MDcyMzExNTIxMFowLzEtMCsGA1UEAxMk ZWU0ZGUwNjItMjMyNy00YTIxLWI1YzMtMThhOTkwMjIxYWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyi23iq7FjRjvJA5a8WPCnc43UQf/gMq72td ipvvhWVmbZl6WStNl7lw6dPPekxzQLQj/Rp35uvySWEgjMxuq46nDK2/LH6p6z+4 AdXOXUVcPqvpf2RqCKBMSJV5ZgsDVXoKp3xgcCwqbeCaf7qfAb14gCwc4di9PoAN z+TvAnlH0goJWCwyjTAUItj+eDE+a2OOiFmmQQGIhWYz1LPPJ1UG8GKxXUnD+9+m BKdrRRDDXKQlQvpyHVR/rssr5A/LHqbBrVgydA/Ll1rcmKC8n9sYP68ll22Cb4Gx MA5Yw6s2YnN4xicIuG1eFExOZVghgfCwviyjSzTA2pb5UilvnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2fhfmro1Sw8UsNWZJC//aY7iRtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2MzOThjZDEtODcxZC0z ODE4LTg3ODctNWUwOWFlZGNkYTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRFMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNo8kgJSZPJ9SL1uj2p2olrKFKBp1kx6YD8+WQDiZY+yQMssNBOBquQ y+4AZvgcYsyCN53GSR99rBtiy6B4YFqsBhrjxFhsLUxqjiQZzsvTpQgtRP8YfkgW pj0I+s7jlaHz7oR0R0ZQh4AFOTxj6ERrx5zppmNZKQp9lsDzBZ/wOFjP+gajbX1K mjWiTRtT7OuSLfhIkVsA4GAjBtMlDCp1kvjWAdkbN9ADmILfr3nXcwD0H6g1Cw+V hP8+f/Uim2oy8Vt1IBayHv0JmhRDWTxXXACZnXTEMpYtNpEHt13jI787DrFANxu+ y2J2KYUcBJTVoCrajczJMNoCXaG9esQ= -----END CERTIFICATE-----Generated at Sat May 10 02:22:47 2025 by rpki-client