$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c96de5af-9329-311c-8cbc-b3224c238471.roa File: c96de5af-9329-311c-8cbc-b3224c238471.roa (raw, json) Hash identifier: 5LDxBMEi/M8tWo8F9Tnj1O5WkpGQ/8iwUhom3jgNjqc= Subject key identifier: 62:3F:CE:33:52:75:40:59:50:9C:DC:42:48:E4:92:89:C4:04:30:46 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C493F6CBA6DFE940B22480 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c96de5af-9329-311c-8cbc-b3224c238471.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.16.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:93:f6:cb:a6:df:e9:40:b2:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=999416e7-ca12-4c4f-86b7-945a8eda21bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e3:fc:5c:8c:ac:71:6b:d8:ac:45:9e:a6:b3: de:ab:1e:f5:db:2a:7c:6f:a0:3a:8f:8f:42:44:26: ee:21:aa:0c:83:7c:ba:20:94:8d:28:a2:24:cc:dd: 7a:24:39:55:58:90:e5:9c:72:ff:7a:a9:b1:fb:28: f3:0b:24:a9:6e:bc:66:73:42:e5:0a:23:e5:e2:af: c6:4b:d9:b1:1e:c7:d4:1f:8c:b8:1c:39:83:d6:d6: d6:b6:fd:3d:13:ff:ac:20:e8:67:42:96:fa:b7:79: 01:a0:ef:14:a4:4f:85:0e:49:c2:26:69:49:27:27: a2:95:10:67:27:eb:f1:2b:cc:2d:1b:aa:51:29:9a: a4:0c:f1:64:71:22:9a:84:48:57:58:f1:6d:df:95: 70:5c:b6:6c:31:c7:a3:2e:d8:fc:8b:0b:1f:91:33: 9c:4c:54:ce:9e:b4:18:81:a5:b7:5d:aa:7f:c0:35: 0a:72:f3:7d:68:55:4b:48:f3:cb:9c:77:bc:56:97: 20:3e:65:e6:34:37:f1:ec:8a:02:e0:a8:e0:58:2e: 7e:fe:29:bf:c7:5b:94:42:2e:9d:77:7c:c9:aa:f2: 40:3e:9c:5c:43:02:79:cd:a8:e5:74:72:2f:47:6d: e2:fd:b6:71:e9:ed:a4:0e:0f:25:35:a7:6e:77:83: 7a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:3F:CE:33:52:75:40:59:50:9C:DC:42:48:E4:92:89:C4:04:30:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c96de5af-9329-311c-8cbc-b3224c238471.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:f3:4f:bb:4c:b1:53:80:be:b7:42:3a:66:a0:06:60:f7:db: 88:20:c0:d9:b1:fd:55:56:c9:16:23:41:21:a7:ba:cf:67:d1: 1e:82:59:57:e4:9a:9c:4b:8e:14:ab:c3:13:10:da:4d:8d:25: 33:50:f6:b5:7b:3f:0f:bf:4c:e4:69:3a:c7:f1:60:3f:c7:ec: 9a:fe:2c:ea:7d:5d:f4:91:d6:f3:77:8e:81:21:f8:e2:f2:80: 42:24:18:6b:a8:71:aa:30:c3:d3:22:a0:c9:7d:a4:82:e7:26: 59:f8:3b:07:02:f1:1f:f8:e0:e3:1b:95:ca:14:ab:bd:9d:3f: 59:47:e3:0c:cf:0b:9a:06:15:a0:67:ea:9b:f9:90:ff:2f:40: 53:90:77:da:07:0a:58:cf:7c:44:4d:79:c7:e3:28:bf:87:ec: 63:64:df:e0:6c:d9:21:f2:c6:94:9c:90:fb:13:a0:37:af:80: 93:1f:83:b7:07:52:a8:fa:a7:7b:c7:79:00:53:64:a9:08:3b: de:b5:47:9e:55:d2:a3:79:fe:ae:b7:9f:98:15:f7:82:a4:c4: 34:31:08:64:7e:73:85:6b:eb:11:5d:5f:a6:36:6f:a7:a7:ce: d9:99:7b:41:f9:f4:f9:2a:9d:3f:da:00:04:c9:28:e6:a3:1c: 5c:a6:45:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxJP2y6bf6UCyJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk OTk5NDE2ZTctY2ExMi00YzRmLTg2YjctOTQ1YThlZGEyMWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uP8XIyscWvYrEWeprPeqx712yp8b6A6j49C RCbuIaoMg3y6IJSNKKIkzN16JDlVWJDlnHL/eqmx+yjzCySpbrxmc0LlCiPl4q/G S9mxHsfUH4y4HDmD1tbWtv09E/+sIOhnQpb6t3kBoO8UpE+FDknCJmlJJyeilRBn J+vxK8wtG6pRKZqkDPFkcSKahEhXWPFt35VwXLZsMcejLtj8iwsfkTOcTFTOnrQY gaW3Xap/wDUKcvN9aFVLSPPLnHe8VpcgPmXmNDfx7IoC4KjgWC5+/im/x1uUQi6d d3zJqvJAPpxcQwJ5zajldHIvR23i/bZx6e2kDg8lNadud4N6fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGI/zjNSdUBZUJzcQkjkkonEBDBGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzk2ZGU1YWYtOTMyOS0z MTFjLThjYmMtYjMyMjRjMjM4NDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRC9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTzT7tMsVOAvrdCOmagBmD324ggwNmx/VVWyRYjQSGnus9n0R6CWVfk mpxLjhSrwxMQ2k2NJTNQ9rV7Pw+/TORpOsfxYD/H7Jr+LOp9XfSR1vN3joEh+OLy gEIkGGuocaoww9MioMl9pILnJln4OwcC8R/44OMblcoUq72dP1lH4wzPC5oGFaBn 6pv5kP8vQFOQd9oHCljPfERNecfjKL+H7GNk3+Bs2SHyxpSckPsToDevgJMfg7cH Uqj6p3vHeQBTZKkIO961R55V0qN5/q63n5gV94KkxDQxCGR+c4Vr6xFdX6Y2b6en ztmZe0H59PkqnT/aAATJKOajHFymRaI= -----END CERTIFICATE-----Generated at Fri May 9 00:38:19 2025 by rpki-client