$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e3f1639-f24c-3623-9a90-168231cde9ac.roa File: 3e3f1639-f24c-3623-9a90-168231cde9ac.roa (raw, json) Hash identifier: XLDJBrdSmHSU+Ir/kZiTQo68g/vAGG8Vwpw4b0/7ohg= Subject key identifier: DC:FD:F2:81:87:B0:A8:2B:51:86:36:DD:CD:5A:2A:44:D0:EF:4E:CB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF4620DEC6D7CFC78B5000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e3f1639-f24c-3623-9a90-168231cde9ac.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.17.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:46:20:de:c6:d7:cf:c7:8b:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=828b3bc2-d539-4b35-acfa-e55c085c8af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:54:db:20:ed:5f:79:af:23:53:3e:ee:39:d3: 78:80:77:2b:81:bf:4d:38:c9:fe:00:f6:05:62:f7: 74:d8:db:e7:4b:de:bc:4d:26:07:64:3b:6b:67:18: 18:20:70:c1:c4:a7:e8:10:c3:f8:a1:ad:0f:a6:8a: be:00:4a:7e:bf:d0:16:8e:b6:19:18:e5:4c:0e:39: 78:b8:b8:0f:b9:5e:ee:f5:38:af:ba:34:41:3c:40: 10:c8:96:ed:26:85:6d:47:c8:a2:8b:d7:ad:61:86: af:5d:7d:6f:81:48:d3:89:7c:28:91:15:74:0b:0e: c2:2b:af:3a:e7:f1:27:64:58:6a:98:90:da:f2:f6: 47:72:7e:62:c0:eb:56:5a:ab:5a:fb:58:fd:79:33: 1f:00:76:31:a6:47:30:90:15:aa:46:d6:15:89:2e: 12:da:1b:f0:59:5f:6e:7c:1f:24:ff:72:31:66:a4: 85:f4:f2:eb:64:b1:ac:00:09:80:ed:dd:b5:8a:8e: 30:09:1c:3f:e9:6f:da:19:c0:b3:95:07:4a:75:55: d0:cf:20:8b:88:4c:63:85:50:bd:b7:e5:47:d2:0c: fe:1b:90:36:93:f2:f3:01:c5:90:c6:af:aa:99:b7: 29:55:67:bf:b4:5a:c5:a5:b3:8d:c7:96:dd:bc:79: 91:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:FD:F2:81:87:B0:A8:2B:51:86:36:DD:CD:5A:2A:44:D0:EF:4E:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e3f1639-f24c-3623-9a90-168231cde9ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:8f:5f:42:e8:54:87:11:9d:3c:55:18:33:eb:30:44:89:d3: bc:70:d3:19:21:0d:bb:5a:f2:47:9a:85:0d:c3:f1:9d:4d:13: 70:26:f9:69:9b:60:be:9e:52:60:6e:18:fc:39:61:f2:6c:5c: e7:f1:ba:c3:56:2d:44:f5:4a:dc:c8:64:cc:3a:3c:1b:a0:74: fe:ef:3b:15:99:86:ac:b9:f4:0d:ac:36:23:0e:83:ca:27:7c: a0:18:72:f4:7f:f1:6d:62:68:aa:f9:a7:ae:8b:d5:ce:0d:f3: 46:bd:1f:d5:20:36:c3:0a:d3:2e:80:1f:15:5a:17:bd:06:67: dd:b8:5e:63:ed:0f:96:fb:1f:4c:ba:bc:4a:f6:34:72:26:5e: ec:62:70:ff:e6:85:11:b3:07:06:b9:90:b8:30:e6:5a:89:36: d6:db:86:42:4a:f2:e2:16:a6:64:40:21:2d:d2:e6:8d:f4:25: 01:85:a8:75:6d:ba:56:94:15:b0:e3:41:f6:ac:7c:65:6b:b1: 64:40:d6:4b:01:48:28:c8:e0:d1:d7:a9:b0:d6:35:f7:53:2c: 66:8a:29:f6:15:94:80:b2:a7:83:fc:8d:aa:03:4f:d7:6c:8d: 57:52:2a:68:77:e1:ac:47:e2:91:4e:19:fc:90:43:f4:05:c1: 12:c8:a4:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh70Yg3sbXz8eLUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk ODI4YjNiYzItZDUzOS00YjM1LWFjZmEtZTU1YzA4NWM4YWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilTbIO1fea8jUz7uOdN4gHcrgb9NOMn+APYF Yvd02NvnS968TSYHZDtrZxgYIHDBxKfoEMP4oa0Ppoq+AEp+v9AWjrYZGOVMDjl4 uLgPuV7u9TivujRBPEAQyJbtJoVtR8iii9etYYavXX1vgUjTiXwokRV0Cw7CK686 5/EnZFhqmJDa8vZHcn5iwOtWWqta+1j9eTMfAHYxpkcwkBWqRtYViS4S2hvwWV9u fB8k/3IxZqSF9PLrZLGsAAmA7d21io4wCRw/6W/aGcCzlQdKdVXQzyCLiExjhVC9 t+VH0gz+G5A2k/LzAcWQxq+qmbcpVWe/tFrFpbONx5bdvHmRdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNz98oGHsKgrUYY23c1aKkTQ707LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2UzZjE2MzktZjI0Yy0z NjIzLTlhOTAtMTY4MjMxY2RlOWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6PX0LoVIcRnTxVGDPrMESJ07xw0xkhDbta8keahQ3D8Z1NE3Am+Wmb YL6eUmBuGPw5YfJsXOfxusNWLUT1StzIZMw6PBugdP7vOxWZhqy59A2sNiMOg8on fKAYcvR/8W1iaKr5p66L1c4N80a9H9UgNsMK0y6AHxVaF70GZ924XmPtD5b7H0y6 vEr2NHImXuxicP/mhRGzBwa5kLgw5lqJNtbbhkJK8uIWpmRAIS3S5o30JQGFqHVt ulaUFbDjQfasfGVrsWRA1ksBSCjI4NHXqbDWNfdTLGaKKfYVlICyp4P8jaoDT9ds jVdSKmh34axH4pFOGfyQQ/QFwRLIpLE= -----END CERTIFICATE-----Generated at Fri May 9 08:38:26 2025 by rpki-client