$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdeeff8b-e99c-36bb-adc8-c206890065e5.roa File: cdeeff8b-e99c-36bb-adc8-c206890065e5.roa (raw, json) Hash identifier: x1wr2tfPtmF+AZqmCjIirzr93ZYfx9s5nP2//4TeJ/0= Subject key identifier: F1:FA:BA:C0:0C:79:0B:9F:89:57:23:A1:C0:75:B0:B5:F8:C5:74:60 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784A5049805D5176BDA9B00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdeeff8b-e99c-36bb-adc8-c206890065e5.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.17.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:a5:04:98:05:d5:17:6b:da:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=5e730515-b4c2-4b2c-a696-ad76d3853f7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:09:a9:35:00:c2:22:08:aa:a3:06:78:9d:bd: b8:8f:6e:cb:b8:3c:61:ef:9d:d0:71:56:23:97:ad: d3:99:46:73:e6:f0:74:ef:3d:88:00:a1:0b:ac:22: 65:55:be:b4:23:72:8b:59:1e:bd:ec:bc:1e:1c:e0: c2:77:8f:db:16:02:e9:ed:9c:23:d3:5d:74:4d:26: 2b:69:37:79:02:79:68:7e:9b:1a:a8:77:bc:b2:17: a6:73:68:a4:3b:f2:98:6f:8e:28:d0:b3:bc:8b:60: 04:99:38:10:33:3d:47:15:ba:93:bc:11:1c:f7:35: 53:c4:01:47:7e:09:c2:f8:22:c1:e9:11:90:a4:e6: 6e:5a:cc:d2:e2:03:5b:29:46:a6:b3:53:f0:4b:6a: e8:4d:b7:0b:25:e4:48:10:c4:57:e6:8d:14:b0:63: 6f:1c:33:19:59:a6:ba:64:ad:66:96:53:1a:40:45: b6:77:7e:c2:84:0c:6f:fb:ea:5f:40:7a:92:6f:ec: 55:8e:90:ae:42:fc:bf:43:fa:39:65:75:51:90:51: 74:86:a7:2a:f5:5e:58:d4:f4:9f:36:81:93:b4:62: b2:2d:77:02:83:67:39:b5:9c:5f:4f:98:33:ee:bb: 81:df:95:3e:a9:e6:5d:10:1f:ad:6b:51:73:12:be: a6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:FA:BA:C0:0C:79:0B:9F:89:57:23:A1:C0:75:B0:B5:F8:C5:74:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdeeff8b-e99c-36bb-adc8-c206890065e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:40:4b:5b:c2:1e:51:fe:2b:81:d0:8e:61:c1:5b:4f:e9:62: 77:88:3d:f7:50:94:17:09:10:7f:2a:f7:a3:93:ea:df:09:aa: 76:65:f3:64:51:0a:bf:3b:d5:d9:b8:1b:b1:27:6c:03:d2:e3: 8c:c8:46:38:7a:ee:c5:d4:b7:7c:b2:55:be:c6:d3:25:96:fd: 7d:73:70:34:96:0d:62:7e:46:fe:f4:3d:a5:aa:78:82:38:08: ae:cd:59:b5:a1:3b:82:d1:c2:d0:07:67:59:c4:9e:3c:64:93: 58:24:d0:1c:78:09:5b:a3:50:57:c3:f8:94:aa:c1:ad:15:43: f0:8b:65:07:e8:5d:f7:76:3f:8b:1c:c8:fb:5b:58:95:33:31: 1c:7e:31:c8:d4:ce:c7:95:7a:eb:ff:0e:5a:54:6f:6b:38:2b: 08:a9:ad:7c:1d:5b:92:19:f2:1b:fd:20:ae:2c:7d:bc:1e:c8: d1:11:75:a5:9c:a5:d3:f4:27:f9:93:63:a2:f5:9f:9c:1d:7a: bb:04:aa:e0:52:a7:0a:0f:ec:41:aa:04:05:1a:de:1f:77:6c: f4:ae:3d:b3:cf:30:cf:74:77:30:39:28:4c:63:7e:da:5d:d1: a6:2d:3f:b4:96:c4:b7:6a:a2:2b:32:f2:fd:9a:94:75:d9:ee: 7d:64:78:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhKUEmAXVF2vamwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NWU3MzA1MTUtYjRjMi00YjJjLWE2OTYtYWQ3NmQzODUzZjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgmpNQDCIgiqowZ4nb24j27LuDxh753QcVYj l63TmUZz5vB07z2IAKELrCJlVb60I3KLWR697LweHODCd4/bFgLp7Zwj0110TSYr aTd5AnlofpsaqHe8shemc2ikO/KYb44o0LO8i2AEmTgQMz1HFbqTvBEc9zVTxAFH fgnC+CLB6RGQpOZuWszS4gNbKUams1PwS2roTbcLJeRIEMRX5o0UsGNvHDMZWaa6 ZK1mllMaQEW2d37ChAxv++pfQHqSb+xVjpCuQvy/Q/o5ZXVRkFF0hqcq9V5Y1PSf NoGTtGKyLXcCg2c5tZxfT5gz7ruB35U+qeZdEB+ta1FzEr6mmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPH6usAMeQufiVcjocB1sLX4xXRgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2RlZWZmOGItZTk5Yy0z NmJiLWFkYzgtYzIwNjg5MDA2NWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRGsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtAS1vCHlH+K4HQjmHBW0/pYneIPfdQlBcJEH8q96OT6t8JqnZl82RR Cr871dm4G7EnbAPS44zIRjh67sXUt3yyVb7G0yWW/X1zcDSWDWJ+Rv70PaWqeII4 CK7NWbWhO4LRwtAHZ1nEnjxkk1gk0Bx4CVujUFfD+JSqwa0VQ/CLZQfoXfd2P4sc yPtbWJUzMRx+McjUzseVeuv/DlpUb2s4KwiprXwdW5IZ8hv9IK4sfbweyNERdaWc pdP0J/mTY6L1n5wdersEquBSpwoP7EGqBAUa3h93bPSuPbPPMM90dzA5KExjftpd 0aYtP7SWxLdqoisy8v2alHXZ7n1keNA= -----END CERTIFICATE-----Generated at Fri May 9 21:30:39 2025 by rpki-client