$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa File: a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa (raw, json) Hash identifier: 7Otrf4iJPtHS9Z7MhOsyPQt4OgO++1EmgYizAM66IwM= Subject key identifier: 9C:4A:F5:E7:9E:4B:6D:C4:C5:5D:13:F3:26:0F:21:47:67:61:73:D8 Certificate issuer: /CN=3b24522b-8239-4bb9-9845-1e01e28aa452 Certificate serial: 010D0C9F432858499829D00FB812B66D2EE44D40 Authority key identifier: A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 32854 IP address blocks: 169.197.172.0/24 maxlen: 24 169.197.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:d0:0f:b8:12:b6:6d:2e:e4:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b24522b-8239-4bb9-9845-1e01e28aa452 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=898c3bdf-c439-472f-a934-e58409933789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:37:4d:32:35:a1:c0:20:c3:69:f9:c1:4d:73: 4a:df:33:fa:8b:05:f8:15:b1:8d:f5:44:42:e6:6b: 4e:42:3e:a6:15:c6:4d:25:c6:90:f9:ec:22:66:99: 8c:1f:0e:2a:c9:a0:8b:93:25:d9:04:02:a2:95:c1: aa:b4:64:1d:43:7e:b4:82:a4:3b:29:d9:92:81:f8: d9:f7:70:cc:ac:07:fa:98:4b:c5:23:d6:14:a7:b1: 59:e9:57:03:b7:17:ba:e0:bc:5f:f0:d5:68:fc:48: 72:42:8f:63:a8:64:ac:eb:ea:5d:b2:d6:d1:36:60: 17:3a:e3:b2:71:dc:a7:99:80:f3:09:c1:c4:87:b5: 6b:e5:5f:65:b3:f4:10:9a:d4:90:fe:1b:19:26:0a: 8d:d0:fb:19:0a:da:46:60:45:dd:07:95:82:5c:ff: 7c:c7:8b:a7:fc:ca:67:20:21:91:76:6a:73:a7:eb: 6d:6b:e9:39:0c:6e:b1:db:97:d1:3c:96:91:77:86: 6f:50:54:96:c8:c5:88:f4:8c:8a:40:8d:70:bb:db: 04:27:d9:80:26:53:aa:b7:36:9a:c2:9b:90:8c:73: 29:48:3b:ef:97:f4:a8:4d:b3:ea:63:32:bc:10:9c: 3f:9b:1d:f2:f3:49:7d:76:7c:88:3f:55:7c:4b:02: 2c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:4A:F5:E7:9E:4B:6D:C4:C5:5D:13:F3:26:0F:21:47:67:61:73:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.crl X509v3 Authority Key Identifier: keyid:A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer sbgp-ipAddrBlock: critical IPv4: 169.197.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:06:a3:1c:88:77:b5:55:db:35:fb:27:95:d1:3a:0b:f1:28: 16:f8:15:64:f6:49:a9:bd:49:ce:3a:eb:fd:20:b3:49:38:2e: 7a:f9:1c:8c:62:92:41:79:a7:b3:b8:38:d5:69:fd:51:d6:38: 44:20:51:8b:59:44:12:2d:89:10:9e:80:b6:7d:bf:ea:6f:0b: e4:ff:b9:09:a9:71:d3:f3:08:5d:68:c6:26:5f:26:18:2b:4c: b8:89:68:03:5c:0e:06:fe:60:1d:b3:7b:cd:a6:ca:e8:44:69: 7a:b6:e8:c2:f3:d1:30:d4:3e:2a:a4:3e:15:cb:01:94:df:23: 57:13:c3:8c:0a:8c:0c:af:81:36:07:97:7c:d9:7a:b8:7b:12: 9e:9a:4f:0a:66:7a:eb:f5:ed:02:af:28:52:90:98:63:e2:f3: 34:31:d5:1d:5f:6b:75:be:9a:95:4d:f7:bb:a9:41:c5:da:65: 92:d1:a5:48:ad:39:b4:a1:4d:39:24:df:48:07:98:85:2c:31: 53:37:30:9c:58:38:05:fe:6a:f9:8c:c1:f8:66:9d:c8:e1:88: c1:7b:bb:bc:c4:24:63:fe:b4:b2:a3:71:4f:b9:77:00:39:d8: 3a:86:d9:5f:c1:89:93:a7:d8:1a:50:35:b8:9b:64:fc:ca:db: c2:88:0d:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdAPuBK2bS7kTUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2IyNDUyMmItODIzOS00YmI5LTk4NDUtMWUwMWUyOGFh NDUyMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk ODk4YzNiZGYtYzQzOS00NzJmLWE5MzQtZTU4NDA5OTMzNzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDdNMjWhwCDDafnBTXNK3zP6iwX4FbGN9URC 5mtOQj6mFcZNJcaQ+ewiZpmMHw4qyaCLkyXZBAKilcGqtGQdQ360gqQ7KdmSgfjZ 93DMrAf6mEvFI9YUp7FZ6VcDtxe64Lxf8NVo/EhyQo9jqGSs6+pdstbRNmAXOuOy cdynmYDzCcHEh7Vr5V9ls/QQmtSQ/hsZJgqN0PsZCtpGYEXdB5WCXP98x4un/Mpn ICGRdmpzp+tta+k5DG6x25fRPJaRd4ZvUFSWyMWI9IyKQI1wu9sEJ9mAJlOqtzaa wpuQjHMpSDvvl/SoTbPqYzK8EJw/mx3y80l9dnyIP1V8SwIsYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxK9eeeS23ExV0T8yYPIUdnYXPYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zYjI0 NTIyYi04MjM5LTRiYjktOTg0NS0xZTAxZTI4YWE0NTIvYTMyNzhmZDgtOTY5Yi0z ZDdhLWI3YzEtZTVmNGFhYmEwNzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2IyNDUyMmItODIzOS00YmI5LTk4 NDUtMWUwMWUyOGFhNDUyLzNiMjQ1MjJiLTgyMzktNGJiOS05ODQ1LTFlMDFlMjhh YTQ1Mi5jcmwwHwYDVR0jBBgwFoAUoAL1aNmuD2MRURVEAh0dW/5OsNIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zYjI0NTIyYi04MjM5LTRiYjktOTg0NS0xZTAx ZTI4YWE0NTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqcWsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwGoxyId7VV2zX7J5XROgvxKBb4FWT2Sam9Sc466/0gs0k4Lnr5HIxi kkF5p7O4ONVp/VHWOEQgUYtZRBItiRCegLZ9v+pvC+T/uQmpcdPzCF1oxiZfJhgr TLiJaANcDgb+YB2ze82myuhEaXq26MLz0TDUPiqkPhXLAZTfI1cTw4wKjAyvgTYH l3zZerh7Ep6aTwpmeuv17QKvKFKQmGPi8zQx1R1fa3W+mpVN97upQcXaZZLRpUit ObShTTkk30gHmIUsMVM3MJxYOAX+avmMwfhmncjhiMF7u7zEJGP+tLKjcU+5dwA5 2DqG2V/BiZOn2BpQNbibZPzK28KIDZ4= -----END CERTIFICATE-----Generated at Fri May 9 01:55:05 2025 by rpki-client