$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4c12ceb0-0dfa-3dfc-9380-1c91f44e47be.roa File: 4c12ceb0-0dfa-3dfc-9380-1c91f44e47be.roa (raw, json) Hash identifier: g+Y0GBKxjsSxdsVFNt9F7tM3totAghJyVD/oX6l/IqQ= Subject key identifier: 5B:57:92:0B:5E:7B:49:B7:76:F9:CD:14:93:46:D5:11:53:13:DB:55 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784A29901957241F11A0400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4c12ceb0-0dfa-3dfc-9380-1c91f44e47be.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.23.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:a2:99:01:95:72:41:f1:1a:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=2cbaf887-3767-4b2a-9fd2-12db4195b0eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e9:a0:7e:c0:fb:02:74:65:60:bf:cd:71:1e: 73:97:ac:54:02:a6:73:54:b3:d2:a5:e0:43:b0:84: bc:84:26:62:87:87:d2:fb:25:d7:07:29:d7:89:6c: 43:15:2f:ef:47:bd:77:75:70:f8:b7:90:d1:a0:40: 4d:1f:5c:09:c6:15:c4:91:56:bd:35:b6:1a:ba:59: 2c:16:26:64:e9:8a:83:77:6f:48:83:9d:0a:b7:eb: e7:34:9c:0f:e6:ae:7c:f8:cd:51:9e:9c:8e:c8:29: 12:13:0a:16:9e:5c:ba:56:aa:8d:98:2b:2e:e6:cb: cd:06:58:ff:ba:e0:af:87:46:e6:38:57:87:6c:52: 15:32:c5:62:91:57:0e:5f:46:9c:ce:22:ea:74:f9: ff:a3:c0:de:e1:fb:39:08:94:4f:a2:11:b8:d9:04: 57:ae:70:1d:d0:1a:9b:59:76:34:35:c4:19:76:d6: c8:fc:c2:fb:a8:40:f1:3c:54:73:3b:44:ec:b5:be: e2:5a:bc:d3:4e:87:44:a2:8f:31:34:8f:ea:cf:d6: 85:28:25:86:00:d4:bd:d0:81:e8:9f:57:9b:82:1f: 3d:8b:d9:e7:5f:e2:e7:35:d4:2f:d8:b6:df:6c:38: ca:02:1c:31:68:14:76:b6:ac:be:79:41:13:7d:43: 12:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:57:92:0B:5E:7B:49:B7:76:F9:CD:14:93:46:D5:11:53:13:DB:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4c12ceb0-0dfa-3dfc-9380-1c91f44e47be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:8b:01:32:13:e8:58:7d:00:92:d2:88:1e:36:0d:d0:38:89: 23:0e:d0:ac:29:f5:90:e3:a3:54:cc:ce:1b:d9:c4:c3:19:3a: bb:74:b6:cc:64:cb:54:c1:02:e4:e0:93:c0:a4:94:39:29:73: 5f:83:7e:64:e7:88:8f:ad:d4:26:41:d9:40:87:70:51:08:4b: d5:56:c8:51:72:88:49:c1:19:1b:d1:f0:4d:66:19:26:7f:91: ba:8e:b5:db:3d:63:b6:25:9e:18:e6:5b:e5:89:09:4a:c9:65: 68:69:e2:7f:9f:1c:2b:33:d2:0e:57:e3:9a:2c:6e:a3:1a:ba: b6:c5:9b:55:a4:6e:16:a9:95:0a:dd:fa:78:b7:79:89:c0:7d: 2e:5c:f2:de:e9:cd:f7:23:30:07:fd:98:5e:e0:8e:8f:96:01: 79:a9:42:75:37:49:23:be:6a:2d:38:19:89:1c:f2:dd:70:a8: 2e:40:33:c7:b7:d5:93:df:c2:e6:62:06:74:1a:03:c2:35:a8: 1b:bc:b5:90:81:80:ed:30:2c:20:f6:fe:d9:46:f1:c5:ef:b9: 0d:0b:b6:85:a9:79:69:a8:67:69:fd:b7:71:31:17:5c:e7:df: f5:78:c3:a0:f8:d7:cf:93:ac:2e:75:fd:90:fb:db:a9:01:1b: 5c:2a:12:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhKKZAZVyQfEaBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MmNiYWY4ODctMzc2Ny00YjJhLTlmZDItMTJkYjQxOTViMGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOmgfsD7AnRlYL/NcR5zl6xUAqZzVLPSpeBD sIS8hCZih4fS+yXXBynXiWxDFS/vR713dXD4t5DRoEBNH1wJxhXEkVa9NbYaulks FiZk6YqDd29Ig50Kt+vnNJwP5q58+M1RnpyOyCkSEwoWnly6VqqNmCsu5svNBlj/ uuCvh0bmOFeHbFIVMsVikVcOX0acziLqdPn/o8De4fs5CJRPohG42QRXrnAd0Bqb WXY0NcQZdtbI/ML7qEDxPFRzO0Tstb7iWrzTTodEoo8xNI/qz9aFKCWGANS90IHo n1ebgh89i9nnX+LnNdQv2LbfbDjKAhwxaBR2tqy+eUETfUMSQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtXkgtee0m3dvnNFJNG1RFTE9tVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGMxMmNlYjAtMGRmYS0z ZGZjLTkzODAtMWM5MWY0NGU0N2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRcQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmLATIT6Fh9AJLSiB42DdA4iSMO0Kwp9ZDjo1TMzhvZxMMZOrt0tsxk y1TBAuTgk8CklDkpc1+DfmTniI+t1CZB2UCHcFEIS9VWyFFyiEnBGRvR8E1mGSZ/ kbqOtds9Y7YlnhjmW+WJCUrJZWhp4n+fHCsz0g5X45osbqMaurbFm1WkbhaplQrd +ni3eYnAfS5c8t7pzfcjMAf9mF7gjo+WAXmpQnU3SSO+ai04GYkc8t1wqC5AM8e3 1ZPfwuZiBnQaA8I1qBu8tZCBgO0wLCD2/tlG8cXvuQ0LtoWpeWmoZ2n9t3ExF1zn 3/V4w6D418+TrC51/ZD726kBG1wqEg8= -----END CERTIFICATE-----Generated at Fri May 9 08:42:36 2025 by rpki-client