$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d0b092a-18c8-31b1-8323-b93d692e541c.roa File: 5d0b092a-18c8-31b1-8323-b93d692e541c.roa (raw, json) Hash identifier: +5zUJA3hl1IqMtv8FtrmOU2KziP/xfuAnYIvZceQeSE= Subject key identifier: A7:F1:74:48:E4:71:2C:22:B0:A4:4A:B7:AC:6C:C8:2F:26:67:DB:EC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784A78221BE93A9D9A37E00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d0b092a-18c8-31b1-8323-b93d692e541c.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.17.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:a7:82:21:be:93:a9:d9:a3:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=45e8fc5f-036a-48e9-9a5c-706137da85c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3e:14:db:b8:5a:97:ce:95:26:12:c1:ef:03: 1a:ea:1b:e8:2a:f5:6c:37:5f:c3:7a:f6:a4:72:9b: b3:73:91:26:ee:08:7f:6a:09:28:1e:b1:8b:ff:7d: f9:fd:b2:5e:30:89:b4:69:18:f7:66:d7:3c:ec:03: 13:9e:8b:4c:05:ed:5e:99:c3:02:79:0d:04:78:77: 9a:1b:20:a9:aa:95:a6:cb:99:0d:be:89:bc:b4:8c: 57:af:88:84:65:65:6e:5c:17:c0:b0:4b:6d:0d:34: eb:27:89:fa:e3:1c:9f:cb:fb:ac:3f:c1:42:85:ce: 50:6c:6a:55:db:26:d6:5b:dc:ee:56:6d:22:b1:b8: 22:53:12:64:88:21:20:ac:8f:68:5d:55:e3:66:94: 74:61:3d:96:14:19:6b:e3:77:e1:25:8d:39:10:72: 44:c1:40:eb:0d:be:ec:f8:6a:5a:f1:b9:c6:63:10: 65:dc:9b:a2:6a:5c:69:27:fa:c9:1c:b1:d1:10:08: 63:a3:c2:5b:da:fd:f3:9d:60:39:ab:e4:84:f4:65: f3:04:a9:92:c8:ec:55:f0:e1:bf:e5:ba:df:73:91: 51:05:42:e7:2e:3e:ac:f7:c2:15:d9:1d:f1:8e:83: 06:af:2d:8d:ba:46:c4:48:1c:0f:a0:70:4f:42:30: 73:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F1:74:48:E4:71:2C:22:B0:A4:4A:B7:AC:6C:C8:2F:26:67:DB:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d0b092a-18c8-31b1-8323-b93d692e541c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:98:dc:bb:5a:23:08:7a:44:c1:df:63:de:17:6a:26:4d:a6: 7a:e4:47:25:10:9c:ff:58:31:4a:27:7c:3b:92:33:fd:a4:e9: a6:fc:b5:55:18:cd:7f:68:65:ce:14:29:94:85:47:a5:70:81: e2:0f:06:4f:f9:ed:1e:50:12:a9:62:59:bd:4f:88:68:48:67: 84:fb:f8:f7:06:5d:51:db:eb:26:a5:e7:74:64:37:a0:bb:57: d2:e9:8e:27:a0:e0:0f:0a:05:62:83:3f:8e:b1:91:c4:89:b0: 3e:82:c6:12:2b:f0:0c:92:1e:a7:86:a2:ab:62:78:7f:11:6d: 70:32:d4:cf:96:66:8a:80:8f:cd:7d:62:2e:2a:b1:a7:a2:df: a0:79:d4:6d:26:22:e0:7e:e9:b3:53:e5:5c:bb:93:ec:e2:9c: f2:46:19:c2:9b:20:f2:46:59:bb:89:ff:9b:39:98:dd:e1:59: e7:6e:30:10:db:b8:cd:f4:52:8b:ca:ad:c4:71:6f:74:d8:7c: 84:45:3c:05:0c:3e:75:8b:e6:4b:be:3b:4e:1a:62:6e:c0:38: f8:1b:6e:c1:e0:c1:a3:65:23:17:a2:11:36:fe:b0:b8:29:90: aa:a3:5a:96:cc:12:46:15:02:af:0a:20:53:08:f3:25:87:5a: d9:67:77:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhKeCIb6TqdmjfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NDVlOGZjNWYtMDM2YS00OGU5LTlhNWMtNzA2MTM3ZGE4NWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj4U27hal86VJhLB7wMa6hvoKvVsN1/Devak cpuzc5Em7gh/agkoHrGL/335/bJeMIm0aRj3Ztc87AMTnotMBe1emcMCeQ0EeHea GyCpqpWmy5kNvom8tIxXr4iEZWVuXBfAsEttDTTrJ4n64xyfy/usP8FChc5QbGpV 2ybWW9zuVm0isbgiUxJkiCEgrI9oXVXjZpR0YT2WFBlr43fhJY05EHJEwUDrDb7s +Gpa8bnGYxBl3JuialxpJ/rJHLHREAhjo8Jb2v3znWA5q+SE9GXzBKmSyOxV8OG/ 5brfc5FRBULnLj6s98IV2R3xjoMGry2NukbESBwPoHBPQjBznwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfxdEjkcSwisKRKt6xsyC8mZ9vsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWQwYjA5MmEtMThjOC0z MWIxLTgzMjMtYjkzZDY5MmU1NDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRFiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOY3LtaIwh6RMHfY94XaiZNpnrkRyUQnP9YMUonfDuSM/2k6ab8tVUY zX9oZc4UKZSFR6VwgeIPBk/57R5QEqliWb1PiGhIZ4T7+PcGXVHb6yal53RkN6C7 V9Lpjieg4A8KBWKDP46xkcSJsD6CxhIr8AySHqeGoqtieH8RbXAy1M+WZoqAj819 Yi4qsaei36B51G0mIuB+6bNT5Vy7k+zinPJGGcKbIPJGWbuJ/5s5mN3hWeduMBDb uM30UovKrcRxb3TYfIRFPAUMPnWL5ku+O04aYm7AOPgbbsHgwaNlIxeiETb+sLgp kKqjWpbMEkYVAq8KIFMI8yWHWtlndys= -----END CERTIFICATE-----Generated at Fri May 9 11:39:09 2025 by rpki-client