$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4ced087e-6d51-309c-89b8-6ee99b6fba0a.roa File: 4ced087e-6d51-309c-89b8-6ee99b6fba0a.roa (raw, json) Hash identifier: Wer5UEvkCfsOZOF4cgpYo+Nu2ZYSCYOVJmSnh/JGk6s= Subject key identifier: 09:13:9F:CD:4B:87:86:80:55:A4:C3:CF:90:37:8D:E8:9B:73:92:51 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF4DE90CC9E5E440D2CF40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4ced087e-6d51-309c-89b8-6ee99b6fba0a.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.16.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:4d:e9:0c:c9:e5:e4:40:d2:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=a4e0ca9f-e492-4d2f-815b-29c7159eb178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f1:a3:87:a1:20:b0:aa:e5:8c:3b:c3:ec:0f: f7:02:63:fd:d1:ce:4b:f5:81:30:88:f5:58:ed:b7: 8b:bc:a8:b0:ab:da:83:5d:c5:7d:c6:d5:43:a2:19: 9c:c7:5d:6a:4f:ed:aa:a4:40:dd:be:ed:2d:ba:75: 53:87:7f:a2:a9:4e:56:f8:1b:ee:c6:76:ee:cc:82: 01:94:26:b4:51:4c:91:f9:68:43:78:21:f6:87:20: 4f:1d:a3:b3:fb:36:98:02:a2:16:bc:11:8a:ad:1e: 39:ff:e7:fe:af:d7:c7:95:d5:c9:94:4a:7e:7b:97: 89:d0:3b:27:8b:57:62:a3:da:96:c6:74:c6:d8:c4: 76:d7:d8:42:9f:c5:71:a6:4b:5b:f3:cb:2e:7c:e1: 06:de:be:80:53:37:1c:ce:c9:55:90:ae:25:dc:84: 4f:46:ca:f1:66:2c:30:4c:d6:e0:23:e1:a2:6e:01: c1:78:5b:d5:1b:80:54:3f:48:fe:f3:a1:04:dc:74: 67:32:49:e1:e7:44:81:7b:f3:19:c0:b5:25:79:82: 6f:af:f9:af:88:c6:b5:8d:b9:18:54:c3:99:66:4c: 70:bd:b6:a2:a8:73:ae:ac:2a:9e:19:67:8d:cc:76: fc:00:5f:af:2d:20:74:44:10:b9:20:5e:96:97:59: 7a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:13:9F:CD:4B:87:86:80:55:A4:C3:CF:90:37:8D:E8:9B:73:92:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4ced087e-6d51-309c-89b8-6ee99b6fba0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:d6:26:01:a9:dd:a8:15:79:f7:16:c3:45:5d:b4:48:3e:7d: 95:ca:6b:0a:02:3b:de:29:45:9d:e5:b7:51:0a:3c:e8:b4:01: f5:75:73:c2:80:86:a6:2e:cb:f0:44:50:d6:f2:38:5d:d1:fb: 58:db:b3:32:f7:2f:c9:34:e2:8c:b0:49:95:c6:02:be:3e:0f: 23:c3:74:37:c8:ea:3b:96:66:3e:8d:c5:60:85:60:3b:82:90: 31:90:21:9c:6a:af:62:93:f6:07:40:03:bc:fd:cd:49:37:e7: 0e:22:05:c1:4f:b2:fe:95:7d:cc:02:aa:23:7f:e5:23:22:6e: 05:a2:35:61:45:9e:e3:97:c8:c1:25:63:3f:47:26:aa:f4:21: cf:f6:0f:ce:d1:06:01:aa:ac:a2:ad:2d:02:c4:99:d9:44:76: ed:00:3a:3a:9c:a8:44:86:1b:e0:c4:dc:be:38:99:81:a1:69: 7d:f2:aa:98:0b:47:ce:b4:67:88:02:85:aa:d9:6d:8d:2c:6d: fe:3f:41:82:4d:a4:b3:85:72:a7:18:dd:3b:03:f3:33:79:82: 6a:6f:c6:7b:d7:18:91:d4:ec:2a:ae:4c:09:f9:b3:17:1f:d8: 9c:b6:df:09:8d:96:cc:4f:b5:77:46:f2:c9:39:d1:e1:2c:b2: fb:3d:7c:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh703pDMnl5EDSz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk YTRlMGNhOWYtZTQ5Mi00ZDJmLTgxNWItMjljNzE1OWViMTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPGjh6EgsKrljDvD7A/3AmP90c5L9YEwiPVY 7beLvKiwq9qDXcV9xtVDohmcx11qT+2qpEDdvu0tunVTh3+iqU5W+BvuxnbuzIIB lCa0UUyR+WhDeCH2hyBPHaOz+zaYAqIWvBGKrR45/+f+r9fHldXJlEp+e5eJ0Dsn i1dio9qWxnTG2MR219hCn8Vxpktb88sufOEG3r6AUzcczslVkK4l3IRPRsrxZiww TNbgI+GibgHBeFvVG4BUP0j+86EE3HRnMknh50SBe/MZwLUleYJvr/mviMa1jbkY VMOZZkxwvbaiqHOurCqeGWeNzHb8AF+vLSB0RBC5IF6Wl1l61QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkTn81Lh4aAVaTDz5A3jeibc5JRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGNlZDA4N2UtNmQ1MS0z MDljLTg5YjgtNmVlOTliNmZiYTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRCsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7WJgGp3agVefcWw0VdtEg+fZXKawoCO94pRZ3lt1EKPOi0AfV1c8KA hqYuy/BEUNbyOF3R+1jbszL3L8k04oywSZXGAr4+DyPDdDfI6juWZj6NxWCFYDuC kDGQIZxqr2KT9gdAA7z9zUk35w4iBcFPsv6VfcwCqiN/5SMibgWiNWFFnuOXyMEl Yz9HJqr0Ic/2D87RBgGqrKKtLQLEmdlEdu0AOjqcqESGG+DE3L44mYGhaX3yqpgL R860Z4gCharZbY0sbf4/QYJNpLOFcqcY3TsD8zN5gmpvxnvXGJHU7CquTAn5sxcf 2Jy23wmNlsxPtXdG8sk50eEssvs9fJU= -----END CERTIFICATE-----Generated at Thu May 8 23:29:14 2025 by rpki-client