$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/963e3efe-e16b-3101-9c10-58fdc48b8689.roa File: 963e3efe-e16b-3101-9c10-58fdc48b8689.roa (raw, json) Hash identifier: 5cci7NUDYql1reP3yftXyxdQ0/QQ3oaOaFToU3ISplQ= Subject key identifier: 78:9B:17:90:FD:4E:7A:3D:59:37:23:D8:30:D1:EA:BF:5E:2B:35:7C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA4473772CED72FE096380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/963e3efe-e16b-3101-9c10-58fdc48b8689.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.24.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:44:73:77:2c:ed:72:fe:09:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=a0a35798-777f-4b98-a542-8519e8740317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:cd:60:d8:7c:11:cf:dc:79:e0:94:49:1a:65: 1f:a5:4e:3d:e5:be:eb:32:7e:16:bb:3d:d9:bb:6c: 45:33:e3:0a:2d:63:67:5e:45:9d:a0:62:63:bc:97: 85:80:6f:3e:83:ce:19:e4:2b:de:f4:22:71:76:f5: 4b:3c:09:9b:57:88:60:18:be:40:58:b7:ec:e1:29: a7:c1:8d:13:48:48:aa:44:5c:01:5f:e3:47:e8:3d: c1:cd:f3:d6:94:9f:f8:95:41:e2:69:1f:13:30:39: fb:13:87:be:82:c6:65:de:56:f6:26:b5:75:5d:a8: 7f:4a:fa:ee:a6:eb:b8:68:d8:54:61:fc:03:07:03: 2d:3d:0b:d0:3f:3a:3e:9b:f7:23:e0:db:11:7d:25: b5:c0:5d:2a:c8:80:23:e2:a6:e0:90:4d:72:dc:7f: 7b:2c:d7:af:06:60:e1:8a:2f:f2:26:ed:f9:32:6f: 1e:24:ac:40:5c:2b:32:5a:50:51:84:b3:3f:79:56: 3a:c5:df:f4:5c:35:7f:08:09:fa:9f:95:26:b5:41: 22:c5:6b:84:34:ea:e0:20:6e:a5:b7:42:b5:bf:b3: 5c:eb:56:01:54:6f:8f:d5:30:84:c6:82:5f:b7:0e: 0f:d4:ed:4f:51:33:f8:07:8b:59:84:c4:85:23:c4: 5d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:9B:17:90:FD:4E:7A:3D:59:37:23:D8:30:D1:EA:BF:5E:2B:35:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/963e3efe-e16b-3101-9c10-58fdc48b8689.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:2d:db:75:90:d5:15:a4:f6:0d:c9:85:2c:20:2d:39:ad:d1: 2e:56:51:ea:fe:99:8e:97:94:09:9f:1a:54:91:2d:0e:5a:4b: 19:ba:67:27:36:4b:b0:1b:c0:1a:af:0b:4b:95:9c:6a:f6:bf: bb:f8:c9:91:2f:ce:7a:fc:b6:65:db:9b:34:02:d6:5e:3c:0b: 1d:82:92:29:24:92:f8:d6:d0:b1:d2:b4:f1:3d:9f:a2:43:01: f2:19:6b:7d:4b:df:0a:e9:6b:56:cf:66:ee:1e:f9:1a:9a:8c: 78:e1:65:12:f5:06:3c:cf:56:b9:92:af:80:94:2b:5b:26:2c: 9d:38:32:8c:71:24:ab:ab:58:af:21:cc:33:c6:8b:eb:17:f4: 21:79:3e:22:9b:07:0a:52:de:63:4d:fa:79:b9:52:c2:c2:89: 62:50:4a:41:ff:6d:c7:d0:13:62:cd:a0:07:75:8b:9c:1f:e3: ee:fe:83:77:ec:45:ae:d8:a4:60:ef:eb:3e:20:5c:c1:ab:65: 31:f8:8f:4b:ad:51:8c:40:ec:7f:75:ab:b2:32:53:05:d5:d6: bb:ce:f5:79:55:28:c2:cf:e6:6b:08:05:0c:97:d2:c6:e5:98: 81:e9:23:ea:28:f8:ff:f9:2c:6b:32:3f:81:54:8e:74:af:ee: b6:4b:bc:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkukRzdyztcv4JY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YTBhMzU3OTgtNzc3Zi00Yjk4LWE1NDItODUxOWU4NzQwMzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg81g2HwRz9x54JRJGmUfpU495b7rMn4Wuz3Z u2xFM+MKLWNnXkWdoGJjvJeFgG8+g84Z5Cve9CJxdvVLPAmbV4hgGL5AWLfs4Smn wY0TSEiqRFwBX+NH6D3BzfPWlJ/4lUHiaR8TMDn7E4e+gsZl3lb2JrV1Xah/Svru puu4aNhUYfwDBwMtPQvQPzo+m/cj4NsRfSW1wF0qyIAj4qbgkE1y3H97LNevBmDh ii/yJu35Mm8eJKxAXCsyWlBRhLM/eVY6xd/0XDV/CAn6n5UmtUEixWuENOrgIG6l t0K1v7Nc61YBVG+P1TCExoJftw4P1O1PUTP4B4tZhMSFI8RdAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHibF5D9Tno9WTcj2DDR6r9eKzV8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTYzZTNlZmUtZTE2Yi0z MTAxLTljMTAtNThmZGM0OGI4Njg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRjZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4t23WQ1RWk9g3JhSwgLTmt0S5WUer+mY6XlAmfGlSRLQ5aSxm6Zyc2 S7AbwBqvC0uVnGr2v7v4yZEvznr8tmXbmzQC1l48Cx2CkikkkvjW0LHStPE9n6JD AfIZa31L3wrpa1bPZu4e+RqajHjhZRL1BjzPVrmSr4CUK1smLJ04MoxxJKurWK8h zDPGi+sX9CF5PiKbBwpS3mNN+nm5UsLCiWJQSkH/bcfQE2LNoAd1i5wf4+7+g3fs Ra7YpGDv6z4gXMGrZTH4j0utUYxA7H91q7IyUwXV1rvO9XlVKMLP5msIBQyX0sbl mIHpI+oo+P/5LGsyP4FUjnSv7rZLvLs= -----END CERTIFICATE-----Generated at Fri May 9 07:18:30 2025 by rpki-client