$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/96a6e7d9-82e1-3dd1-a0de-0ebfd6a67237.roa File: 96a6e7d9-82e1-3dd1-a0de-0ebfd6a67237.roa (raw, json) Hash identifier: ICRhyEoxX8E0XTwzmK3y41QuBn4WVO32mdZNKJoNpx8= Subject key identifier: 20:41:E7:45:D7:7F:6E:DC:C9:D1:00:86:DC:C1:B6:C2:A7:75:2B:EC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA42451375C40781F179E0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/96a6e7d9-82e1-3dd1-a0de-0ebfd6a67237.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.17.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:42:45:13:75:c4:07:81:f1:79:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=6bffafe2-4006-400f-b14b-1a94ff0416c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:73:18:58:9e:06:e0:11:64:e5:d3:b5:4f:4e: c4:03:16:26:d3:af:87:0a:07:fd:9b:08:a9:e5:aa: ea:fb:82:e2:96:4f:e6:e0:fa:8e:1c:98:f7:69:86: 0a:36:9a:33:52:7b:0f:1b:16:93:c1:99:9f:7f:e7: 9f:ce:fb:8c:e8:2f:b9:52:13:d2:38:39:20:1a:ea: fb:9b:81:f0:82:1c:34:64:aa:1c:5c:aa:1e:50:00: 72:55:6b:d6:3f:66:7a:04:3f:a3:26:97:21:18:55: ac:43:f0:78:6e:59:d0:f4:65:4f:39:87:0f:27:d4: a2:5f:16:6c:f5:35:5d:35:be:31:eb:62:81:1c:e0: 75:80:ba:71:05:de:fb:7b:e1:cd:38:b7:00:fe:e0: fa:9f:d8:9e:44:c5:cb:d5:06:e6:25:5f:56:4f:04: c1:f7:94:6f:67:83:d8:71:c8:df:e6:1f:16:66:a5: c4:24:f0:40:2c:60:19:54:35:f7:b8:82:62:ee:8c: 6c:78:89:06:a5:c2:f5:60:cc:54:13:6f:ae:bb:c0: ef:bb:03:e8:82:36:d2:12:4d:6d:79:a4:82:21:f2: e8:04:b4:72:bb:6e:55:2e:68:77:81:ce:d5:71:c2: a0:f3:88:7d:8f:dd:b2:fe:68:8b:c2:da:ce:33:4b: c9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:41:E7:45:D7:7F:6E:DC:C9:D1:00:86:DC:C1:B6:C2:A7:75:2B:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/96a6e7d9-82e1-3dd1-a0de-0ebfd6a67237.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:8a:ed:67:79:3c:64:46:35:58:23:78:3d:2c:5e:d0:1f:b4: 03:74:53:2f:80:3d:d5:8d:65:42:69:1e:7f:46:9a:15:30:5d: b2:6c:3c:3f:17:88:a1:f1:13:4f:28:e7:42:e0:89:6c:5a:bf: 7d:d3:70:92:bf:55:93:a7:0f:f8:79:74:77:1a:6c:08:45:28: 92:3a:f4:49:c7:0c:27:ae:6b:e4:ee:b4:47:a2:c3:26:9e:bc: be:fa:5d:f4:65:86:a2:1a:7e:d6:fa:1a:8e:94:56:f3:7e:3c: 38:c2:69:26:b7:e9:88:d6:54:0f:d2:ec:9a:aa:9e:ec:24:5c: be:f8:d8:d6:c4:c1:9e:69:1f:8b:85:cd:70:c0:34:e1:d9:ab: 2a:de:2c:c8:5b:67:a4:c4:6c:79:28:79:34:4c:dc:1f:fa:36: 7c:ff:d6:f4:97:83:ca:91:e5:57:b0:f3:ba:07:99:30:05:5f: 8f:90:e1:b8:f1:1b:f5:da:a6:ab:fe:5d:1d:66:75:41:15:19: 47:28:3e:a3:2f:c7:d8:b5:cf:4c:27:c4:5a:60:dd:ae:f3:f1: 3b:01:2f:66:7e:c2:a0:b1:7c:9a:c5:51:90:6a:50:94:5d:3d: bd:5c:1d:84:b2:7b:ed:fc:fd:42:57:cc:76:e5:6d:99:77:f0: 7a:f3:65:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkukJFE3XEB4HxeeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NmJmZmFmZTItNDAwNi00MDBmLWIxNGItMWE5NGZmMDQxNmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHMYWJ4G4BFk5dO1T07EAxYm06+HCgf9mwip 5arq+4Lilk/m4PqOHJj3aYYKNpozUnsPGxaTwZmff+efzvuM6C+5UhPSODkgGur7 m4Hwghw0ZKocXKoeUAByVWvWP2Z6BD+jJpchGFWsQ/B4blnQ9GVPOYcPJ9SiXxZs 9TVdNb4x62KBHOB1gLpxBd77e+HNOLcA/uD6n9ieRMXL1QbmJV9WTwTB95RvZ4PY ccjf5h8WZqXEJPBALGAZVDX3uIJi7oxseIkGpcL1YMxUE2+uu8DvuwPogjbSEk1t eaSCIfLoBLRyu25VLmh3gc7VccKg84h9j92y/miLwtrOM0vJTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBB50XXf27cydEAhtzBtsKndSvsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTZhNmU3ZDktODJlMS0z ZGQxLWEwZGUtMGViZmQ2YTY3MjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArREuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqK7Wd5PGRGNVgjeD0sXtAftAN0Uy+APdWNZUJpHn9GmhUwXbJsPD8X iKHxE08o50LgiWxav33TcJK/VZOnD/h5dHcabAhFKJI69EnHDCeua+TutEeiwyae vL76XfRlhqIaftb6Go6UVvN+PDjCaSa36YjWVA/S7JqqnuwkXL742NbEwZ5pH4uF zXDANOHZqyreLMhbZ6TEbHkoeTRM3B/6Nnz/1vSXg8qR5Vew87oHmTAFX4+Q4bjx G/Xapqv+XR1mdUEVGUcoPqMvx9i1z0wnxFpg3a7z8TsBL2Z+wqCxfJrFUZBqUJRd Pb1cHYSye+38/UJXzHblbZl38HrzZVI= -----END CERTIFICATE-----Generated at Sun Jun 29 22:26:06 2025 by rpki-client