$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2ddb1a1-8014-3f91-bcb4-27294e1d20f3.roa File: a2ddb1a1-8014-3f91-bcb4-27294e1d20f3.roa (raw, json) Hash identifier: KkppfDM6I6aYXpFGvD70QG7V4xolxJBGSZDfw6W0yak= Subject key identifier: B5:65:53:53:A2:60:25:09:97:D8:BD:76:E0:15:37:20:66:8F:CD:27 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784AC95878883B4C7FCABC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2ddb1a1-8014-3f91-bcb4-27294e1d20f3.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.17.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ac:95:87:88:83:b4:c7:fc:ab:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=24050619-2f7d-4363-976e-b1a097004336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:af:a8:27:80:07:ea:83:ef:fd:d6:a0:91:9d: fa:71:dc:da:6f:12:69:3d:4d:34:c4:aa:14:bf:93: d2:d0:b8:94:bb:1c:19:84:b0:96:35:78:00:c2:ac: bc:50:e3:bd:c5:44:9c:55:26:e9:7d:43:42:ac:c5: d2:e5:fa:d5:c3:36:09:1e:ed:9b:4b:77:94:5b:19: 01:9b:bf:56:1a:ce:ad:87:25:70:73:f0:a7:92:f5: c7:93:ad:ac:a3:7e:88:d3:fd:00:15:11:fc:d5:b1: 00:6c:d9:97:fa:a9:85:bb:64:c2:e3:b9:b2:4c:4b: 1c:c7:d7:88:76:8a:47:00:cb:02:6d:ab:1a:0b:a0: 5f:57:cf:a4:94:88:68:3b:fc:43:b0:49:2d:c5:6e: 7e:ca:85:7b:b6:a9:d1:b0:7f:77:2a:8d:3c:ea:3a: 1f:80:fd:48:34:4c:00:a8:31:ae:07:a1:74:3a:49: 9f:84:c3:63:58:90:2e:39:93:68:47:a2:17:95:6f: 65:4f:f0:21:c4:a5:03:0a:35:bd:35:25:f1:68:dd: e6:67:36:af:d9:5d:56:4c:55:62:8e:95:d6:dd:2f: 35:db:31:b7:4d:16:bb:be:8d:ef:4f:ae:14:6e:87: d8:21:13:5a:c5:39:8e:47:3d:ae:3d:6a:fd:89:24: b3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:65:53:53:A2:60:25:09:97:D8:BD:76:E0:15:37:20:66:8F:CD:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2ddb1a1-8014-3f91-bcb4-27294e1d20f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:a1:86:f7:d3:2b:89:38:ae:75:af:74:2e:ae:73:f1:62:dc: b0:ea:a6:74:f1:d2:b0:72:95:92:22:4c:eb:43:87:d6:82:98: e4:3a:fe:4b:69:31:9d:55:2b:e4:a1:5a:bd:70:0d:e3:2f:1b: fa:9a:dc:59:ec:10:2b:09:03:c7:5d:bf:7a:4f:8c:2f:86:f3: c2:7c:7a:4f:da:34:a9:09:d6:fc:d8:0c:02:e8:7f:22:ef:85: 86:5f:02:17:93:ad:5d:c5:9b:d5:6a:17:fa:f5:61:4b:d4:e1: 90:02:2a:d3:f3:9b:9e:40:d7:ba:9b:8b:d3:c8:07:df:ed:0b: 17:5a:71:08:67:d1:26:71:b2:99:00:1b:fd:44:27:08:77:a5: 78:94:a1:a4:66:da:09:85:55:9d:77:8b:2e:07:99:a0:b6:71: c1:dc:a1:69:d2:b2:68:30:36:4f:88:18:31:9c:d0:e3:fd:31: fe:47:a7:58:3f:97:cf:f8:1d:02:ee:cf:f6:ab:d4:96:de:c2: 12:fd:97:4c:48:8c:c2:d9:31:a2:2c:7a:18:d2:ad:a2:63:91: ce:4a:a0:85:22:8b:4a:77:15:b3:75:d9:6e:78:7a:da:26:c8: 24:5b:59:bd:8a:6f:63:6b:8e:f1:93:96:f4:10:13:e4:60:ba: a3:2e:2c:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhKyVh4iDtMf8q8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MjQwNTA2MTktMmY3ZC00MzYzLTk3NmUtYjFhMDk3MDA0MzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhq+oJ4AH6oPv/dagkZ36cdzabxJpPU00xKoU v5PS0LiUuxwZhLCWNXgAwqy8UOO9xUScVSbpfUNCrMXS5frVwzYJHu2bS3eUWxkB m79WGs6thyVwc/CnkvXHk62so36I0/0AFRH81bEAbNmX+qmFu2TC47myTEscx9eI dopHAMsCbasaC6BfV8+klIhoO/xDsEktxW5+yoV7tqnRsH93Ko086jofgP1INEwA qDGuB6F0OkmfhMNjWJAuOZNoR6IXlW9lT/AhxKUDCjW9NSXxaN3mZzav2V1WTFVi jpXW3S812zG3TRa7vo3vT64UbofYIRNaxTmORz2uPWr9iSSzNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVlU1OiYCUJl9i9duAVNyBmj80nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTJkZGIxYTEtODAxNC0z ZjkxLWJjYjQtMjcyOTRlMWQyMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRGIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIShhvfTK4k4rnWvdC6uc/Fi3LDqpnTx0rBylZIiTOtDh9aCmOQ6/ktp MZ1VK+ShWr1wDeMvG/qa3FnsECsJA8ddv3pPjC+G88J8ek/aNKkJ1vzYDALofyLv hYZfAheTrV3Fm9VqF/r1YUvU4ZACKtPzm55A17qbi9PIB9/tCxdacQhn0SZxspkA G/1EJwh3pXiUoaRm2gmFVZ13iy4HmaC2ccHcoWnSsmgwNk+IGDGc0OP9Mf5Hp1g/ l8/4HQLuz/ar1JbewhL9l0xIjMLZMaIsehjSraJjkc5KoIUii0p3FbN12W54etom yCRbWb2Kb2NrjvGTlvQQE+RguqMuLO4= -----END CERTIFICATE-----Generated at Fri May 9 11:57:16 2025 by rpki-client