$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/989f7fc1-1eb5-3d2f-91bf-a6e5657ca174.roa File: 989f7fc1-1eb5-3d2f-91bf-a6e5657ca174.roa (raw, json) Hash identifier: WlcIlgH3gUCF30p27Q+MMI0E3cgkgsZLxcbhr2ExTRw= Subject key identifier: 2E:4C:EC:56:EF:43:87:F0:56:96:49:A6:70:89:9F:03:71:9C:54:E6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1CDC08B0F59157165E9A040 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/989f7fc1-1eb5-3d2f-91bf-a6e5657ca174.roa Signing time: Thu 24 Apr 2025 11:53:32 +0000 ROA not before: Thu 24 Apr 2025 11:53:32 +0000 ROA not after: Wed 23 Jul 2025 11:53:32 +0000 asID: 19905 IP address blocks: 173.23.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:cd:c0:8b:0f:59:15:71:65:e9:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 11:53:32 2025 GMT Not After : Jul 23 11:53:32 2025 GMT Subject: CN=bd35d87f-8828-4d62-96be-656d0fcbe24a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:03:55:3f:c9:e8:a4:34:d1:64:52:76:7b:42: 5c:f5:f0:0d:00:c6:52:0c:d7:3a:f9:3a:f0:8a:44: aa:8f:d1:92:7e:20:aa:b5:3e:8b:ef:1d:13:8b:bb: ea:bf:d2:a4:8e:f8:4f:10:7b:ee:ef:b9:2b:21:af: 3c:fb:cb:74:de:50:56:c0:6a:07:dc:43:7b:d1:7e: db:8a:20:40:e2:82:bd:d3:dd:54:cc:9c:96:16:71: 8d:77:d9:58:18:db:31:75:c2:ba:49:01:09:1c:db: c2:80:12:37:d8:a0:15:32:4f:46:da:bf:44:ef:1a: 42:b1:2b:37:0d:74:20:69:0f:97:83:b1:11:0d:ea: 5e:ee:45:70:5f:8c:77:07:c1:1b:b1:db:04:bc:93: 54:62:6b:72:af:9c:8f:d3:cf:5a:f1:03:29:c6:40: 6b:49:d0:55:29:da:ea:b4:37:ca:e4:03:47:44:9a: 45:61:7c:07:af:0e:e9:64:57:88:6e:34:29:d8:17: 8b:37:ed:02:7b:fd:8d:58:fc:86:67:22:9e:a3:e8: ac:f5:de:01:c1:46:3f:0d:22:99:31:f3:86:04:50: 2b:da:39:16:86:44:c5:4f:92:3a:d6:be:2d:7d:82: 8f:b9:cd:d9:b2:1f:c8:0a:76:49:c3:4c:0d:4f:d9: c3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4C:EC:56:EF:43:87:F0:56:96:49:A6:70:89:9F:03:71:9C:54:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/989f7fc1-1eb5-3d2f-91bf-a6e5657ca174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:6f:cc:0f:63:95:ed:1f:8c:28:bb:97:4a:03:05:f8:dd:54: 1c:7c:e4:0a:cc:50:70:0f:8a:36:41:8b:bc:74:08:4c:3a:4f: 9b:eb:7a:2e:f0:b7:92:d0:83:9a:67:c2:bd:11:ca:5b:f8:f7: e6:67:92:c7:de:75:91:61:7a:e0:32:05:72:99:0d:47:98:2b: 38:e3:90:96:11:d6:49:02:5b:38:75:c5:4e:2a:a7:a6:e0:4d: d2:eb:04:a4:a6:68:a3:a2:b3:dd:c0:64:17:0d:9d:c8:2a:38: 30:3e:0e:a3:0f:f3:3a:c6:c4:b6:5f:e7:19:b2:f9:8a:bc:ee: a8:eb:7b:d4:11:11:76:cc:12:d7:08:4c:83:bc:9f:a4:e7:d8: 88:95:52:2e:b6:11:b7:2d:54:3a:78:1d:3a:88:f9:27:3e:66: ee:e2:32:de:04:5f:f0:10:49:7b:17:d2:de:7a:bc:f8:57:83: 72:a9:90:c0:52:18:53:2c:57:2a:04:63:97:b7:37:4d:92:cf: 9d:ee:bd:8b:1c:20:04:23:3a:00:f5:4b:19:5e:dc:34:26:cb: 84:1e:b2:58:54:7a:4f:53:d7:7a:e8:ec:24:ce:98:bb:6c:23: 46:0b:45:d8:b5:65:57:a0:fa:33:b5:9b:72:2f:81:59:e0:38: c2:09:5d:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhzcCLD1kVcWXpoEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDExNTMzMloXDTI1MDcyMzExNTMzMlowLzEtMCsGA1UEAxMk YmQzNWQ4N2YtODgyOC00ZDYyLTk2YmUtNjU2ZDBmY2JlMjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQNVP8nopDTRZFJ2e0Jc9fANAMZSDNc6+Trw ikSqj9GSfiCqtT6L7x0Ti7vqv9KkjvhPEHvu77krIa88+8t03lBWwGoH3EN70X7b iiBA4oK9091UzJyWFnGNd9lYGNsxdcK6SQEJHNvCgBI32KAVMk9G2r9E7xpCsSs3 DXQgaQ+Xg7ERDepe7kVwX4x3B8EbsdsEvJNUYmtyr5yP089a8QMpxkBrSdBVKdrq tDfK5ANHRJpFYXwHrw7pZFeIbjQp2BeLN+0Ce/2NWPyGZyKeo+is9d4BwUY/DSKZ MfOGBFAr2jkWhkTFT5I61r4tfYKPuc3Zsh/ICnZJw0wNT9nDNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5M7FbvQ4fwVpZJpnCJnwNxnFTmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTg5ZjdmYzEtMWViNS0z ZDJmLTkxYmYtYTZlNTY1N2NhMTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRe8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJvzA9jle0fjCi7l0oDBfjdVBx85ArMUHAPijZBi7x0CEw6T5vrei7w t5LQg5pnwr0Rylv49+ZnksfedZFheuAyBXKZDUeYKzjjkJYR1kkCWzh1xU4qp6bg TdLrBKSmaKOis93AZBcNncgqODA+DqMP8zrGxLZf5xmy+Yq87qjre9QREXbMEtcI TIO8n6Tn2IiVUi62EbctVDp4HTqI+Sc+Zu7iMt4EX/AQSXsX0t56vPhXg3KpkMBS GFMsVyoEY5e3N02Sz53uvYscIAQjOgD1Sxle3DQmy4QeslhUek9T13ro7CTOmLts I0YLRdi1ZVeg+jO1m3IvgVngOMIJXQw= -----END CERTIFICATE-----Generated at Wed May 7 03:18:42 2025 by rpki-client