$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cba16be4-1fd4-3fc5-8150-a4d5c9ed26f9.roa File: cba16be4-1fd4-3fc5-8150-a4d5c9ed26f9.roa (raw, json) Hash identifier: 583UwrQpo7kvNwqp0xIqWSqlpmr7uqOPzrMCnKFZ1Dg= Subject key identifier: 75:4B:E1:86:5F:81:77:51:73:1B:78:4E:C4:30:EA:44:82:B6:DD:9D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF5A6E007CD5D3BA07F100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cba16be4-1fd4-3fc5-8150-a4d5c9ed26f9.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.24.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:5a:6e:00:7c:d5:d3:ba:07:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=88f2a564-f108-4248-bc9f-b9af9d84ac6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:19:a6:f7:d3:74:f0:28:09:bb:4c:d4:ed:58: ff:ae:2a:4c:8a:1e:fd:7f:13:37:19:d8:2c:e8:68: 62:27:e5:0e:34:a2:7c:5c:28:67:a0:2d:ac:54:18: cb:90:ed:14:84:6b:8f:c0:24:8c:9b:d3:64:98:6d: e1:78:54:1f:ed:90:9e:7f:d0:62:2e:eb:54:11:b1: 53:bd:1b:4e:a7:81:a6:d3:55:3b:08:26:25:14:e2: 7a:88:e3:d0:93:3d:e4:d5:a7:98:29:8b:3a:f7:c6: 12:b9:70:13:1d:f1:aa:57:ff:ef:d3:f8:b1:85:70: a9:88:97:7f:54:8a:d6:c9:8f:3f:73:39:78:13:98: 8b:52:19:30:38:29:ea:f4:88:9d:7d:90:52:f4:96: c3:1a:d6:8e:b7:97:5e:ad:1e:d0:d4:a9:aa:b1:50: 3c:81:bb:c4:52:88:c9:e2:a4:37:13:1a:28:7d:ef: da:83:a5:84:83:37:34:3f:19:e2:99:8d:43:98:ae: 8e:d2:0e:9a:17:41:51:2d:9a:8e:df:ba:bd:7c:85: 29:54:6a:31:c4:78:cc:81:5d:17:94:aa:a4:4f:90: d5:33:dd:76:75:05:ef:33:71:73:4a:34:85:fa:89: 4d:6a:30:71:11:7d:62:7e:07:49:a3:7e:88:20:69: f3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:4B:E1:86:5F:81:77:51:73:1B:78:4E:C4:30:EA:44:82:B6:DD:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cba16be4-1fd4-3fc5-8150-a4d5c9ed26f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:33:f1:df:30:0e:45:05:dc:cc:e6:bd:c3:47:ec:a6:af:1f: 01:83:96:6d:ea:a2:f9:8f:51:df:19:27:10:2b:34:35:29:30: 11:95:3a:35:02:80:16:e3:99:90:c1:56:c3:b0:f2:a3:14:e1: b3:2d:77:b9:bd:7a:14:e7:08:f1:28:bc:5d:e2:74:6a:c3:92: b7:e0:af:3e:d8:4f:d4:62:0a:ff:73:22:b3:ce:20:50:7b:6d: 9f:86:b5:6c:a5:69:44:e9:4d:66:7a:b4:1e:3e:66:bf:7d:a7: b2:4d:78:92:11:57:1f:03:79:10:68:23:c8:87:53:0a:8b:05: f3:ba:d0:17:92:10:9c:50:7e:eb:af:20:22:c9:18:fd:42:02: 6b:89:44:00:be:2e:1b:e2:54:50:0e:10:8c:ac:38:1c:37:cd: 3e:c6:e9:fa:bd:1f:a9:7f:35:ca:63:6d:35:49:62:1f:52:0d: a7:23:5c:c9:c8:97:26:92:85:94:d5:6f:44:07:c3:d2:07:4f: f1:a4:96:b5:a3:c3:c8:56:92:64:7b:3c:c4:e9:b3:b5:3f:55: 8a:d5:94:92:36:40:c7:8f:9c:18:5f:57:84:32:57:13:2e:70: f4:8e:29:bc:c3:b9:7d:37:e9:1f:78:f6:10:5f:4a:09:9c:35: 22:e1:36:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh71puAHzV07oH8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk ODhmMmE1NjQtZjEwOC00MjQ4LWJjOWYtYjlhZjlkODRhYzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBmm99N08CgJu0zU7Vj/ripMih79fxM3Gdgs 6GhiJ+UONKJ8XChnoC2sVBjLkO0UhGuPwCSMm9NkmG3heFQf7ZCef9BiLutUEbFT vRtOp4Gm01U7CCYlFOJ6iOPQkz3k1aeYKYs698YSuXATHfGqV//v0/ixhXCpiJd/ VIrWyY8/czl4E5iLUhkwOCnq9IidfZBS9JbDGtaOt5derR7Q1KmqsVA8gbvEUojJ 4qQ3Exoofe/ag6WEgzc0PxnimY1DmK6O0g6aF0FRLZqO37q9fIUpVGoxxHjMgV0X lKqkT5DVM912dQXvM3FzSjSF+olNajBxEX1ifgdJo36IIGnzcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVL4YZfgXdRcxt4TsQw6kSCtt2dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2JhMTZiZTQtMWZkNC0z ZmM1LTgxNTAtYTRkNWM5ZWQyNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0z8d8wDkUF3MzmvcNH7KavHwGDlm3qovmPUd8ZJxArNDUpMBGVOjUC gBbjmZDBVsOw8qMU4bMtd7m9ehTnCPEovF3idGrDkrfgrz7YT9RiCv9zIrPOIFB7 bZ+GtWylaUTpTWZ6tB4+Zr99p7JNeJIRVx8DeRBoI8iHUwqLBfO60BeSEJxQfuuv ICLJGP1CAmuJRAC+LhviVFAOEIysOBw3zT7G6fq9H6l/NcpjbTVJYh9SDacjXMnI lyaShZTVb0QHw9IHT/GklrWjw8hWkmR7PMTps7U/VYrVlJI2QMePnBhfV4QyVxMu cPSOKbzDuX036R949hBfSgmcNSLhNnc= -----END CERTIFICATE-----Generated at Fri May 9 08:37:28 2025 by rpki-client