$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eb851eb0-54ca-3e4a-a8ce-2af5e5b5ff1e.roa File: eb851eb0-54ca-3e4a-a8ce-2af5e5b5ff1e.roa (raw, json) Hash identifier: eFi/klK6Ec/kozTsTTXyPQNQ1sfWeIEcHsdpC428Agw= Subject key identifier: D8:D3:1D:50:75:C3:FC:F2:0E:A1:8D:FB:0D:30:BA:4F:04:0E:D6:48 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784A2FC2C6F980C868CCAE0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eb851eb0-54ca-3e4a-a8ce-2af5e5b5ff1e.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.24.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:a2:fc:2c:6f:98:0c:86:8c:ca:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=9edc4ad1-f356-496b-b5d3-86e65575f322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:6e:35:08:44:12:da:64:70:b8:bd:b8:13:2e: 40:21:97:6b:d4:80:c9:7c:fd:0d:a2:22:d6:bd:04: 18:43:30:d3:3d:4a:63:69:ce:6b:4e:6b:a3:d4:ca: e9:91:53:46:24:37:40:64:d9:0c:73:1a:57:eb:2f: 17:4e:6e:2b:4e:be:13:45:17:b2:ef:3f:9c:05:39: c1:47:22:98:a1:bf:73:9b:e5:77:87:6b:fa:0e:52: e1:59:bb:7a:ab:ea:56:36:b0:83:3a:82:cd:f3:32: e0:21:6d:9d:9c:51:c6:34:37:cb:9e:3e:b4:94:5b: 9e:0e:0c:c0:26:cf:9a:b5:3e:ef:84:02:f2:21:2d: b0:57:97:5f:55:9c:31:cf:23:9d:71:2e:68:5b:ce: ae:d5:5c:23:46:a1:be:8c:4f:1d:a4:55:db:11:ce: b5:c4:d5:81:e6:4f:2c:14:e1:5d:df:d1:8f:af:30: cc:10:0f:37:b3:6f:c7:f9:6a:a3:dc:ae:9f:af:37: dc:f7:9e:1d:8e:ad:b5:53:66:2d:87:32:ef:10:73: 3b:0c:7a:95:7a:03:e8:e8:5d:a0:89:03:29:06:68: ca:e0:10:e8:78:04:5d:64:c7:93:c8:ef:c0:03:84: 3c:79:7f:90:44:ba:f4:f6:16:04:86:7d:4a:a5:8d: 17:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D3:1D:50:75:C3:FC:F2:0E:A1:8D:FB:0D:30:BA:4F:04:0E:D6:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eb851eb0-54ca-3e4a-a8ce-2af5e5b5ff1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:fd:e3:01:cd:af:d5:93:9d:8c:af:c2:32:b5:22:48:4c:86: d9:80:d3:39:66:81:90:ce:49:32:3e:ef:46:35:94:4c:52:5d: 1c:b6:62:34:a3:5a:58:fc:aa:04:d7:cf:3d:03:7a:40:f6:77: c8:bc:a0:09:54:ff:c9:e6:af:c1:66:a0:64:21:43:33:02:0f: ed:7b:2a:b7:fd:d1:a2:79:62:cb:f4:10:ff:e5:d6:e5:b2:37: d0:92:c3:a4:36:35:46:5b:d6:42:67:74:20:06:b0:99:12:86: 7f:3e:42:99:2a:21:6e:01:37:bf:07:08:6c:95:7b:e8:0c:5a: 70:a6:ea:b0:85:e8:e9:e3:1e:90:cd:db:72:05:09:5f:a7:71: 5c:e8:00:7d:cf:79:be:61:d8:fd:5f:9c:68:f0:18:1b:62:99: 0e:ad:cf:28:66:7c:5d:3d:70:94:a8:e4:22:9b:27:a9:cb:66: 97:a6:01:4e:b4:42:e6:23:58:dc:4b:b1:03:78:0c:0f:26:69: 5a:21:be:f2:ea:1c:ed:a9:d7:a2:35:2a:39:45:8d:49:2e:12: 98:35:1c:be:4d:4f:c6:ef:51:e5:ab:01:20:93:3b:90:61:38: 0d:a1:c5:ef:bd:13:59:c9:19:e9:1c:cd:e8:be:3f:26:85:cd: 10:0f:b8:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhKL8LG+YDIaMyuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OWVkYzRhZDEtZjM1Ni00OTZiLWI1ZDMtODZlNjU1NzVmMzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6W41CEQS2mRwuL24Ey5AIZdr1IDJfP0NoiLW vQQYQzDTPUpjac5rTmuj1MrpkVNGJDdAZNkMcxpX6y8XTm4rTr4TRRey7z+cBTnB RyKYob9zm+V3h2v6DlLhWbt6q+pWNrCDOoLN8zLgIW2dnFHGNDfLnj60lFueDgzA Js+atT7vhALyIS2wV5dfVZwxzyOdcS5oW86u1VwjRqG+jE8dpFXbEc61xNWB5k8s FOFd39GPrzDMEA83s2/H+Wqj3K6frzfc954djq21U2YthzLvEHM7DHqVegPo6F2g iQMpBmjK4BDoeARdZMeTyO/AA4Q8eX+QRLr09hYEhn1KpY0XQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjTHVB1w/zyDqGN+w0wuk8EDtZIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWI4NTFlYjAtNTRjYS0z ZTRhLWE4Y2UtMmFmNWU1YjVmZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRioMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH794wHNr9WTnYyvwjK1IkhMhtmA0zlmgZDOSTI+70Y1lExSXRy2YjSj Wlj8qgTXzz0DekD2d8i8oAlU/8nmr8FmoGQhQzMCD+17Krf90aJ5Ysv0EP/l1uWy N9CSw6Q2NUZb1kJndCAGsJkShn8+QpkqIW4BN78HCGyVe+gMWnCm6rCF6OnjHpDN 23IFCV+ncVzoAH3Peb5h2P1fnGjwGBtimQ6tzyhmfF09cJSo5CKbJ6nLZpemAU60 QuYjWNxLsQN4DA8maVohvvLqHO2p16I1KjlFjUkuEpg1HL5NT8bvUeWrASCTO5Bh OA2hxe+9E1nJGekczei+PyaFzRAPuBA= -----END CERTIFICATE-----Generated at Fri May 9 14:23:07 2025 by rpki-client