$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/3b18a822-fde6-3f20-a26e-9b8a1b88e430.roa File: 3b18a822-fde6-3f20-a26e-9b8a1b88e430.roa (raw, json) Hash identifier: ZWOHygOSOy37VD5fWVo7ucQdU5okmbz6xn1dpbbZy8E= Subject key identifier: 47:2B:AA:90:DD:02:FF:D3:03:91:CC:94:77:40:40:8F:E3:81:17:7F Certificate issuer: /CN=c3a944cd-51a8-4d10-ae57-724de26a1d62 Certificate serial: 010D0C9F43285849D6346596BD41724A68BD5700 Authority key identifier: A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/3b18a822-fde6-3f20-a26e-9b8a1b88e430.roa Signing time: Tue 13 May 2025 06:22:23 +0000 ROA not before: Tue 13 May 2025 06:22:23 +0000 ROA not after: Mon 11 Aug 2025 06:22:23 +0000 asID: 25655 IP address blocks: 173.241.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d6:34:65:96:bd:41:72:4a:68:bd:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3a944cd-51a8-4d10-ae57-724de26a1d62 Validity Not Before: May 13 06:22:23 2025 GMT Not After : Aug 11 06:22:23 2025 GMT Subject: CN=1f24f592-c1ba-4042-b90b-f0477685e26a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2a:16:1b:fb:4a:91:0a:a5:28:36:f4:e2:1c: 44:7d:af:a2:27:50:7e:b4:b3:bc:2d:7b:49:f9:00: f9:9d:99:0d:4e:da:6f:16:e9:0f:a0:df:3c:a5:b3: 67:ca:4f:31:0b:14:20:0a:6f:26:83:c7:ab:0c:9a: 81:d8:5e:5b:f7:8e:dd:f3:1d:10:2b:35:83:b2:26: 0a:b1:62:da:b4:8d:a9:0a:f6:dd:2d:30:37:f1:21: 3f:12:e9:a4:13:0a:be:a5:55:d1:32:37:a3:78:90: 68:b0:0f:5c:23:d4:55:f4:14:0b:28:c1:c3:07:74: d7:04:93:61:b6:86:51:c8:fb:ad:68:f1:79:de:78: d9:73:d7:58:71:9b:95:5c:1f:12:05:d7:b5:70:ca: c0:e6:2c:e9:f0:b5:01:14:57:bf:08:74:98:82:63: 00:2d:b3:3b:41:9d:1b:45:9e:4d:42:2e:39:8a:ec: 0d:bf:9e:b1:ba:c0:01:79:8a:3b:55:d0:18:3a:d5: f4:55:08:4f:48:e2:8f:bc:0c:4e:1e:7d:e4:d4:ef: 67:df:f3:c6:64:82:60:6c:84:f3:8c:bc:19:c3:60: 92:4d:09:d4:df:e9:0e:14:15:de:ba:4c:94:b3:53: 2d:7a:8c:11:2d:89:40:8e:fb:11:48:87:64:0b:c2: c9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:2B:AA:90:DD:02:FF:D3:03:91:CC:94:77:40:40:8F:E3:81:17:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/3b18a822-fde6-3f20-a26e-9b8a1b88e430.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl X509v3 Authority Key Identifier: keyid:A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer sbgp-ipAddrBlock: critical IPv4: 173.241.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:1d:47:55:23:48:40:1c:02:69:60:53:be:f0:50:70:31:46: b2:2c:6f:27:c6:6d:41:83:8a:ea:9d:83:30:f9:9b:79:5a:c1: 2b:0d:00:b5:dc:a7:4f:7c:cf:65:6e:f1:30:2e:44:1b:d9:25: 95:c3:89:e0:23:19:c8:24:28:bc:eb:fa:81:e3:f5:75:ec:8e: 19:62:0c:9b:67:e4:b2:ff:6e:7f:ad:21:b1:50:0d:f4:d5:9a: a3:9a:79:7c:92:8c:99:7a:f7:db:c5:eb:97:1a:28:74:f2:b4: 76:3b:18:7b:3f:5f:7c:6d:3d:4d:d7:3e:3c:a6:f6:5c:bb:e1: 25:ad:bc:af:44:e4:2d:0a:6b:93:66:90:f2:c0:a3:96:f9:e1: 3f:df:5c:42:66:b1:a7:66:e2:0f:0e:3b:b7:ec:62:d9:b2:63: 88:eb:dc:54:4e:b0:d8:42:f5:04:61:76:63:3f:ce:f3:7b:18: 53:cf:b3:1f:3d:62:ef:92:08:90:91:94:60:db:f3:48:00:83: 1b:3d:c8:b7:aa:02:3f:b4:5d:cf:1c:3a:89:76:d4:73:54:00: 47:ea:cb:4e:87:96:6b:1b:db:82:81:02:0d:75:64:db:ba:83: 9e:db:69:1b:2e:a9:3b:18:fc:da:d3:49:a0:ca:56:7e:00:dc: 8f:ee:80:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnWNGWWvUFySmi9VwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNhOTQ0Y2QtNTFhOC00ZDEwLWFlNTctNzI0ZGUyNmEx ZDYyMB4XDTI1MDUxMzA2MjIyM1oXDTI1MDgxMTA2MjIyM1owLzEtMCsGA1UEAxMk MWYyNGY1OTItYzFiYS00MDQyLWI5MGItZjA0Nzc2ODVlMjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyoWG/tKkQqlKDb04hxEfa+iJ1B+tLO8LXtJ +QD5nZkNTtpvFukPoN88pbNnyk8xCxQgCm8mg8erDJqB2F5b947d8x0QKzWDsiYK sWLatI2pCvbdLTA38SE/EumkEwq+pVXRMjejeJBosA9cI9RV9BQLKMHDB3TXBJNh toZRyPutaPF53njZc9dYcZuVXB8SBde1cMrA5izp8LUBFFe/CHSYgmMALbM7QZ0b RZ5NQi45iuwNv56xusABeYo7VdAYOtX0VQhPSOKPvAxOHn3k1O9n3/PGZIJgbITz jLwZw2CSTQnU3+kOFBXeukyUs1MteowRLYlAjvsRSIdkC8LJ0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcrqpDdAv/TA5HMlHdAQI/jgRd/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jM2E5 NDRjZC01MWE4LTRkMTAtYWU1Ny03MjRkZTI2YTFkNjIvM2IxOGE4MjItZmRlNi0z ZjIwLWEyNmUtOWI4YTFiODhlNDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzNhOTQ0Y2QtNTFhOC00ZDEwLWFl NTctNzI0ZGUyNmExZDYyL2MzYTk0NGNkLTUxYTgtNGQxMC1hZTU3LTcyNGRlMjZh MWQ2Mi5jcmwwHwYDVR0jBBgwFoAUqGCfuRfF6i7M/i9bQ1PRwl+tfbUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jM2E5NDRjZC01MWE4LTRkMTAtYWU1Ny03MjRk ZTI2YTFkNjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfGZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQdR1UjSEAcAmlgU77wUHAxRrIsbyfGbUGDiuqdgzD5m3lawSsNALXc p098z2Vu8TAuRBvZJZXDieAjGcgkKLzr+oHj9XXsjhliDJtn5LL/bn+tIbFQDfTV mqOaeXySjJl699vF65caKHTytHY7GHs/X3xtPU3XPjym9ly74SWtvK9E5C0Ka5Nm kPLAo5b54T/fXEJmsadm4g8OO7fsYtmyY4jr3FROsNhC9QRhdmM/zvN7GFPPsx89 Yu+SCJCRlGDb80gAgxs9yLeqAj+0Xc8cOol21HNUAEfqy06Hlmsb24KBAg11ZNu6 g57baRsuqTsY/NrTSaDKVn4A3I/ugJY= -----END CERTIFICATE-----Generated at Tue May 13 13:17:28 2025 by rpki-client