$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/acfc9443-2366-31a2-830e-078ce1478269.roa File: acfc9443-2366-31a2-830e-078ce1478269.roa (raw, json) Hash identifier: ZmrLQEjuKJO1eCTXsUeW/A8mGewEPSwVtZh6KXTFq7o= Subject key identifier: 4A:4C:05:FA:35:D9:9A:A1:34:B8:DD:23:CF:56:DC:84:95:06:E2:F8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF4A93CABBB2AB69070020 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/acfc9443-2366-31a2-830e-078ce1478269.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.17.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:4a:93:ca:bb:b2:ab:69:07:00:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=457c889f-4912-47b5-8766-12444d260f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:82:15:8a:97:f7:95:e1:05:49:53:3e:90:52: 2f:f5:79:20:3e:e0:2a:fb:f8:eb:b7:d6:8f:ac:c9: 83:3a:d4:11:3c:97:40:de:4b:93:5d:20:4e:aa:bf: 86:0a:c0:36:e2:ec:68:c1:3e:8d:ba:c1:9b:f8:0c: 36:bd:13:bc:c9:d1:69:6e:78:29:48:5b:08:c0:5d: 5f:1e:f3:49:7a:fc:b5:62:2c:67:9f:f6:6b:03:e5: cf:3d:c8:36:5d:12:a7:73:e9:9a:13:f0:7b:26:f3: 82:0b:42:84:b0:a7:0f:c8:12:a9:36:37:5f:46:b5: 45:19:b3:11:ee:e0:28:a4:cb:12:e7:51:fe:36:72: 5a:ff:62:46:44:91:08:1e:b3:c5:bc:c2:ca:50:fe: 75:97:e9:3e:b0:3e:77:64:1c:0d:61:17:e0:62:87: 0f:21:a2:32:f7:cd:a0:4f:32:29:f8:d3:81:d0:d0: e5:a3:27:19:8e:d7:29:89:e7:0f:a3:d0:1d:43:6d: 27:a1:8b:0a:ac:73:7a:98:ee:cc:45:7f:57:ef:94: 1f:84:aa:3f:5b:74:02:82:24:00:3b:49:6d:39:49: 1c:44:b3:a1:51:d5:9b:fe:ed:52:a0:a2:6d:0f:ed: 07:55:67:48:0d:30:a4:69:21:b4:db:ad:91:0b:e1: 6a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:4C:05:FA:35:D9:9A:A1:34:B8:DD:23:CF:56:DC:84:95:06:E2:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/acfc9443-2366-31a2-830e-078ce1478269.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:f2:3b:d8:45:48:34:fb:af:9a:f2:e7:38:86:9d:f7:14:7d: 96:7e:94:4c:e0:d9:ff:40:aa:b1:03:e7:7b:c4:5d:ea:2a:9e: eb:17:c0:a9:82:0f:a2:ae:b4:e3:7f:c7:8a:cd:8a:4a:41:72: 57:ab:da:82:c1:f1:8a:36:e3:05:99:f1:a3:18:e2:e4:d1:2a: 68:33:b5:1d:53:90:f6:8e:05:82:f7:2a:86:3b:25:89:33:cc: 8d:6a:d9:1e:a6:21:32:92:5a:74:63:e3:09:1b:d9:67:29:3a: da:37:81:b5:48:3b:44:03:1d:4c:79:b4:f5:d9:46:2e:65:c0: 93:f3:80:47:b1:38:dc:7a:65:cb:06:0a:1a:e1:23:e0:fb:0e: 21:e5:3a:87:36:51:7e:bd:27:d5:15:f9:88:fc:6b:d9:63:ee: d8:c0:12:d1:b3:07:ec:c2:7c:39:8f:29:df:ed:a4:80:a4:c7: 76:52:2f:95:8c:fe:3e:d5:ca:78:fa:a5:79:e4:7a:b7:9f:cb: d6:b6:07:bb:56:9a:f7:4d:b7:a0:e1:29:0b:3a:fa:b5:66:c9: ac:70:4a:01:71:a8:5e:af:c8:e1:c9:ba:2e:c1:6b:f8:1c:f9: d5:ff:9f:89:e1:d7:f4:fd:28:8d:90:41:f4:87:e5:0d:23:f9: 6a:3d:b6:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh70qTyruyq2kHACAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk NDU3Yzg4OWYtNDkxMi00N2I1LTg3NjYtMTI0NDRkMjYwZjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYIVipf3leEFSVM+kFIv9XkgPuAq+/jrt9aP rMmDOtQRPJdA3kuTXSBOqr+GCsA24uxowT6NusGb+Aw2vRO8ydFpbngpSFsIwF1f HvNJevy1Yixnn/ZrA+XPPcg2XRKnc+maE/B7JvOCC0KEsKcPyBKpNjdfRrVFGbMR 7uAopMsS51H+NnJa/2JGRJEIHrPFvMLKUP51l+k+sD53ZBwNYRfgYocPIaIy982g TzIp+NOB0NDloycZjtcpiecPo9AdQ20noYsKrHN6mO7MRX9X75QfhKo/W3QCgiQA O0ltOUkcRLOhUdWb/u1SoKJtD+0HVWdIDTCkaSG0262RC+Fq5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpMBfo12ZqhNLjdI89W3ISVBuL4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWNmYzk0NDMtMjM2Ni0z MWEyLTgzMGUtMDc4Y2UxNDc4MjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEryO9hFSDT7r5ry5ziGnfcUfZZ+lEzg2f9AqrED53vEXeoqnusXwKmC D6KutON/x4rNikpBcler2oLB8Yo24wWZ8aMY4uTRKmgztR1TkPaOBYL3KoY7JYkz zI1q2R6mITKSWnRj4wkb2WcpOto3gbVIO0QDHUx5tPXZRi5lwJPzgEexONx6ZcsG ChrhI+D7DiHlOoc2UX69J9UV+Yj8a9lj7tjAEtGzB+zCfDmPKd/tpICkx3ZSL5WM /j7Vynj6pXnkerefy9a2B7tWmvdNt6DhKQs6+rVmyaxwSgFxqF6vyOHJui7Ba/gc +dX/n4nh1/T9KI2QQfSH5Q0j+Wo9tjo= -----END CERTIFICATE-----Generated at Sun May 11 01:42:04 2025 by rpki-client