$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d3423c42-0777-371a-82d7-800c36f0e32f.roa File: d3423c42-0777-371a-82d7-800c36f0e32f.roa (raw, json) Hash identifier: oLko6KNgE+X7tXBLH2HHxck/ZuBr5MstlSSdxOwLqps= Subject key identifier: 79:EF:14:0C:9F:72:FB:28:2F:E5:53:38:45:A6:00:E8:A4:33:92:45 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF5739CB0954B0A8758680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d3423c42-0777-371a-82d7-800c36f0e32f.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.19.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:57:39:cb:09:54:b0:a8:75:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=39ddf2ed-6559-45d5-b712-87aea70ed58e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2d:be:9f:27:b4:98:5f:47:f9:e9:35:09:d6: 64:c4:91:0e:22:19:6a:17:2f:ea:dd:5c:35:28:07: af:f5:42:60:c4:fc:22:46:5b:50:d7:5a:ef:85:f6: 94:d7:55:c7:c8:f2:e4:90:c0:f2:da:1e:5d:72:27: 8e:9d:2f:c4:62:6d:c3:0f:a2:1d:46:18:f3:af:24: a7:b4:6a:44:23:29:9a:89:4f:4e:32:8d:3c:6b:d3: d8:55:4c:73:1f:5b:f8:e8:21:2c:0f:14:1f:bf:52: 03:1b:b7:09:e7:5b:77:8b:c3:00:d4:06:05:14:f5: a2:b0:bc:38:01:5f:89:10:2a:05:7a:c3:07:a5:a5: c1:e6:bb:37:4b:67:1c:33:99:0d:4c:48:2f:48:e5: 1d:f6:da:4e:a6:ed:d0:85:39:dd:d8:3a:3d:2c:b0: 29:4b:89:cc:a6:87:4e:fb:2e:fa:b3:ee:45:9c:a9: 38:9f:8a:cf:b2:50:17:00:27:8d:08:67:18:ed:02: 11:8b:73:55:88:4f:37:96:4c:6a:c3:1a:5f:f8:40: 1f:7b:0d:bb:8e:2b:2d:51:25:12:39:80:95:f1:25: 5f:63:8d:c6:77:57:1c:ff:11:9e:0f:a6:0c:98:0f: 61:a5:40:95:d7:f2:db:26:fe:a9:5d:6f:dd:2f:2f: d8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:EF:14:0C:9F:72:FB:28:2F:E5:53:38:45:A6:00:E8:A4:33:92:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d3423c42-0777-371a-82d7-800c36f0e32f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:de:35:81:d9:84:35:f9:c7:fd:74:6b:dd:5d:c1:90:36:0c: 5e:25:0c:d2:e5:85:8d:9a:7a:e7:d4:0f:88:a5:82:9c:a6:36: 8a:af:46:dd:ca:79:38:d2:3d:f2:7d:8b:54:88:03:b1:9a:1a: f2:ad:0c:14:83:1a:d2:2c:48:50:2c:03:0e:f9:d3:00:cd:37: 82:94:f8:c9:df:88:53:54:85:a3:e8:51:47:72:d3:3c:8f:3e: 08:73:d2:b9:07:c9:c3:6f:3f:f0:50:8b:7f:6e:d7:21:71:88: 08:e9:eb:4e:0a:ee:01:77:0b:7a:f2:42:ec:5f:2e:9c:af:69: 03:b2:04:fc:88:93:70:8a:3b:a4:c0:98:62:d4:2d:32:10:0d: d3:c8:25:0a:1b:6f:47:68:5f:03:23:35:d0:5a:58:c4:0e:dd: 9b:8a:2d:24:58:98:ff:96:14:a8:9a:be:ec:0c:cf:41:0f:65: 25:47:0d:b2:f3:ad:d6:2b:11:a4:c4:90:f1:5d:7a:1c:f0:22: 07:14:84:d2:75:e8:7d:b5:a8:d5:ad:4f:a9:ac:be:21:b2:ef: 95:6e:bc:23:51:77:ed:0c:59:92:1c:8e:4b:30:c2:28:27:77: f1:61:52:34:bd:19:4b:ed:5f:24:51:17:b1:2e:f0:60:dc:60: a9:23:e3:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh71c5ywlUsKh1hoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk MzlkZGYyZWQtNjU1OS00NWQ1LWI3MTItODdhZWE3MGVkNThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC2+nye0mF9H+ek1CdZkxJEOIhlqFy/q3Vw1 KAev9UJgxPwiRltQ11rvhfaU11XHyPLkkMDy2h5dcieOnS/EYm3DD6IdRhjzrySn tGpEIymaiU9OMo08a9PYVUxzH1v46CEsDxQfv1IDG7cJ51t3i8MA1AYFFPWisLw4 AV+JECoFesMHpaXB5rs3S2ccM5kNTEgvSOUd9tpOpu3QhTnd2Do9LLApS4nMpodO +y76s+5FnKk4n4rPslAXACeNCGcY7QIRi3NViE83lkxqwxpf+EAfew27jistUSUS OYCV8SVfY43Gd1cc/xGeD6YMmA9hpUCV1/LbJv6pXW/dLy/YrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHnvFAyfcvsoL+VTOEWmAOikM5JFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDM0MjNjNDItMDc3Ny0z NzFhLTgyZDctODAwYzM2ZjBlMzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRNtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDeNYHZhDX5x/10a91dwZA2DF4lDNLlhY2aeufUD4ilgpymNoqvRt3K eTjSPfJ9i1SIA7GaGvKtDBSDGtIsSFAsAw750wDNN4KU+MnfiFNUhaPoUUdy0zyP Pghz0rkHycNvP/BQi39u1yFxiAjp604K7gF3C3ryQuxfLpyvaQOyBPyIk3CKO6TA mGLULTIQDdPIJQobb0doXwMjNdBaWMQO3ZuKLSRYmP+WFKiavuwMz0EPZSVHDbLz rdYrEaTEkPFdehzwIgcUhNJ16H21qNWtT6msviGy75VuvCNRd+0MWZIcjkswwign d/FhUjS9GUvtXyRRF7Eu8GDcYKkj4yE= -----END CERTIFICATE-----Generated at Thu May 8 23:30:05 2025 by rpki-client