$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bebe5d07-5cc0-347e-aed7-3205d541fce1.roa File: bebe5d07-5cc0-347e-aed7-3205d541fce1.roa (raw, json) Hash identifier: tMpXNIxJUJyDAfLyldSsWvAA/PvvZC47u16X7MEHqZE= Subject key identifier: CA:21:65:DA:46:EE:1F:A9:04:24:E7:1C:E8:06:5B:11:8E:0D:A7:C5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849B0C54BDE542BEC8573CEC340 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bebe5d07-5cc0-347e-aed7-3205d541fce1.roa Signing time: Tue 29 Apr 2025 20:33:37 +0000 ROA not before: Tue 29 Apr 2025 20:33:37 +0000 ROA not after: Mon 28 Jul 2025 20:33:37 +0000 asID: 30036 IP address blocks: 173.24.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b0:c5:4b:de:54:2b:ec:85:73:ce:c3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 29 20:33:37 2025 GMT Not After : Jul 28 20:33:37 2025 GMT Subject: CN=2553852e-d722-4de8-b55b-f1edf659daea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:32:ec:a8:94:35:cd:29:34:65:80:f3:57:0f: 7a:53:28:88:6e:18:58:79:64:cc:cf:46:2e:fa:c9: af:d3:48:bb:51:b0:4a:fa:d0:0f:22:9b:0f:79:8a: e1:dd:96:59:8d:99:a2:a0:2d:e1:f7:47:dd:99:b8: 87:f6:b8:9b:64:cf:7e:65:2d:72:8c:bc:cb:a4:5d: 6e:cf:7b:be:6e:18:c9:0f:96:ff:cd:28:1c:8c:49: b7:d5:1f:f9:db:93:90:7e:a4:57:58:e0:11:ca:38: cc:3d:30:1d:be:63:62:1e:e4:da:47:33:82:3d:27: b2:54:29:76:f2:56:c8:ba:9e:e7:01:12:81:c7:7d: 5b:14:1f:77:ab:ed:06:d0:69:38:40:22:61:a7:71: 7f:05:d3:4c:28:47:e0:45:37:ff:93:f6:eb:14:83: d0:61:7b:c1:94:49:2f:4c:4b:86:f5:3e:05:40:07: 18:1f:82:90:ff:40:a8:ee:2d:7c:e7:64:cc:8d:a0: 74:27:34:13:62:31:06:aa:fe:94:34:28:1b:90:86: c9:2b:b4:28:35:84:3a:0d:0c:13:a6:a5:cf:af:48: 86:4d:d2:8a:01:87:26:50:5d:4a:58:21:b8:fd:05: 60:61:c5:6a:56:dd:e2:42:fb:ba:8d:dd:e8:59:d5: 9a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:21:65:DA:46:EE:1F:A9:04:24:E7:1C:E8:06:5B:11:8E:0D:A7:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bebe5d07-5cc0-347e-aed7-3205d541fce1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:b1:ef:e1:03:2f:ec:48:7f:ad:3d:71:e2:bf:b4:cd:6a:10: 56:2a:0b:59:4e:4d:11:96:af:4f:f1:29:12:e7:31:2d:ff:c6: cf:9a:fd:61:7c:cf:39:37:d3:cd:da:5d:e9:a8:69:4e:f5:3f: 0b:2d:89:67:8e:87:2b:0b:fe:c2:a7:7e:5c:49:5c:00:a5:fa: 74:ed:c4:d4:8d:67:f8:bf:b6:da:3a:bb:4a:b7:2e:4c:c3:4b: 5e:95:2a:cb:db:17:46:23:a8:02:f6:f4:5c:a8:2e:d9:12:fb: c7:0a:71:73:16:d5:13:f4:91:82:8d:a9:48:e5:e7:1b:48:f0: 66:b1:7e:88:3a:e1:94:25:05:82:39:6e:aa:fa:63:a7:10:6f: f9:88:dc:da:41:6f:d7:a7:05:e5:e0:39:38:f3:0a:63:99:0e: ae:2a:98:21:2c:ae:c9:17:85:53:f6:d0:08:ff:ff:d0:95:8c: c8:45:6a:6e:c7:e3:1f:61:06:03:61:94:96:59:b0:f0:40:68: e1:c6:a4:fe:9d:7d:d5:39:95:d5:a4:33:c5:ef:f8:73:0e:92: b9:05:ef:1e:12:4a:1b:7b:9a:d9:fd:b2:23:2f:e3:4e:7e:a5: 3e:8b:a9:a4:43:63:fc:f8:08:ec:17:69:ef:f7:4a:0f:e2:41: 65:e5:85:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmwxUveVCvshXPOw0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyOTIwMzMzN1oXDTI1MDcyODIwMzMzN1owLzEtMCsGA1UEAxMk MjU1Mzg1MmUtZDcyMi00ZGU4LWI1NWItZjFlZGY2NTlkYWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTLsqJQ1zSk0ZYDzVw96UyiIbhhYeWTMz0Yu +smv00i7UbBK+tAPIpsPeYrh3ZZZjZmioC3h90fdmbiH9ribZM9+ZS1yjLzLpF1u z3u+bhjJD5b/zSgcjEm31R/525OQfqRXWOARyjjMPTAdvmNiHuTaRzOCPSeyVCl2 8lbIup7nARKBx31bFB93q+0G0Gk4QCJhp3F/BdNMKEfgRTf/k/brFIPQYXvBlEkv TEuG9T4FQAcYH4KQ/0Co7i1852TMjaB0JzQTYjEGqv6UNCgbkIbJK7QoNYQ6DQwT pqXPr0iGTdKKAYcmUF1KWCG4/QVgYcVqVt3iQvu6jd3oWdWaFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMohZdpG7h+pBCTnHOgGWxGODafFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmViZTVkMDctNWNjMC0z NDdlLWFlZDctMzIwNWQ1NDFmY2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRjGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqx7+EDL+xIf609ceK/tM1qEFYqC1lOTRGWr0/xKRLnMS3/xs+a/WF8 zzk3083aXemoaU71PwstiWeOhysL/sKnflxJXACl+nTtxNSNZ/i/tto6u0q3LkzD S16VKsvbF0YjqAL29FyoLtkS+8cKcXMW1RP0kYKNqUjl5xtI8Gaxfog64ZQlBYI5 bqr6Y6cQb/mI3NpBb9enBeXgOTjzCmOZDq4qmCEsrskXhVP20Aj//9CVjMhFam7H 4x9hBgNhlJZZsPBAaOHGpP6dfdU5ldWkM8Xv+HMOkrkF7x4SSht7mtn9siMv405+ pT6LqaRDY/z4COwXae/3Sg/iQWXlhXA= -----END CERTIFICATE-----Generated at Thu May 8 23:30:01 2025 by rpki-client