$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0008b286-d1ed-3de6-be71-3021b21bd60d.roa File: 0008b286-d1ed-3de6-be71-3021b21bd60d.roa (raw, json) Hash identifier: XoSR9U1KFJ15z1GJOqq3akk/cxNAJqHo4LwiniJRJDs= Subject key identifier: C4:C0:00:65:3E:53:72:C4:C8:CE:7E:01:10:6F:C4:B8:F0:35:A5:2F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA2E5CC8DB088C39CB5840 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0008b286-d1ed-3de6-be71-3021b21bd60d.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.17.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:2e:5c:c8:db:08:8c:39:cb:58:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=2522798c-df9f-4f43-a664-e4d6680c82cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:62:98:f5:65:43:42:a0:b0:a4:68:38:ee:d9: 99:61:b8:fb:eb:20:69:69:e0:4e:c4:30:ef:2f:ea: f4:15:9f:f3:38:51:e4:a6:2f:54:4a:69:32:f1:b3: 2b:40:3b:23:65:38:b3:7a:2f:e9:45:8c:78:97:d7: 40:54:50:92:70:92:7d:67:12:05:5a:4c:a6:4e:54: bf:54:5a:78:0e:7b:11:09:3a:46:eb:30:77:c8:69: fc:de:5d:de:2b:b1:ee:11:fb:eb:19:57:c2:7d:02: 2d:00:1a:3e:ea:3d:0e:48:47:cf:72:79:7c:3b:f9: 21:8a:6a:0f:22:f8:84:43:71:e0:e3:71:2f:f5:31: c1:d0:c9:6e:44:c0:b4:e5:91:99:c1:80:7b:3c:33: 53:c0:97:a7:24:53:1a:8c:ae:5b:a6:0b:e9:1a:64: f8:c2:ea:df:4f:74:19:f2:31:c6:f6:59:9b:16:14: 24:10:ed:34:71:c7:6f:6c:aa:2b:7b:9a:c9:44:6c: 4e:b4:db:87:c2:3d:f5:35:b8:7f:06:a8:4f:2b:3d: 1f:04:f6:bd:81:91:1e:4d:74:b5:d4:d4:76:0c:e8: 8e:2e:15:3e:93:e6:09:2a:6e:7d:ea:8c:4d:77:a7: c2:a3:97:95:4a:b7:fd:6c:a9:d4:b8:d5:1d:82:84: c7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C0:00:65:3E:53:72:C4:C8:CE:7E:01:10:6F:C4:B8:F0:35:A5:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0008b286-d1ed-3de6-be71-3021b21bd60d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:8a:3e:8d:ef:46:89:d1:06:47:b0:af:b3:bf:6c:d2:76:04: 2e:53:11:41:d4:2c:bd:c7:e4:8a:80:2c:1a:99:c0:3b:75:60: 53:58:fc:51:73:b7:93:b7:2b:6b:f5:7c:22:9f:8c:4d:c2:a0: 63:19:5a:8d:50:21:9c:f0:9d:43:12:89:05:eb:6b:ea:fd:d6: 08:a4:d9:04:1f:03:45:25:d7:b2:ec:74:c5:1f:f2:f4:7b:73: 2e:ec:df:bd:50:f4:e5:a0:d0:e1:a1:d0:cc:b7:2f:fd:68:dc: 82:09:44:64:de:da:fb:90:eb:84:4e:95:21:20:f9:5a:6e:e7: 5d:42:c1:e2:4d:c9:98:07:e3:2f:17:12:d0:f4:c1:dd:bf:20: 79:7f:ef:d6:d3:8f:88:59:45:f6:52:88:88:b5:1d:08:24:32: f6:27:1e:a7:49:ba:a9:5b:e0:11:a2:dd:bb:12:ab:19:2f:d8: 16:d9:fd:93:2f:0f:89:8d:b7:a7:18:11:c1:bf:1e:9b:61:4f: 22:96:64:03:19:fe:1d:be:b8:54:54:0d:d8:96:71:a8:79:c4: 78:a7:4a:be:f3:bd:ae:fe:b7:65:4e:ef:a0:14:44:f9:3f:25: 5a:16:34:0e:bb:c6:5e:ab:89:24:cf:af:43:57:35:76:65:54: 5a:15:2c:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkui5cyNsIjDnLWEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MjUyMjc5OGMtZGY5Zi00ZjQzLWE2NjQtZTRkNjY4MGM4MmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGKY9WVDQqCwpGg47tmZYbj76yBpaeBOxDDv L+r0FZ/zOFHkpi9USmky8bMrQDsjZTizei/pRYx4l9dAVFCScJJ9ZxIFWkymTlS/ VFp4DnsRCTpG6zB3yGn83l3eK7HuEfvrGVfCfQItABo+6j0OSEfPcnl8O/khimoP IviEQ3Hg43Ev9THB0MluRMC05ZGZwYB7PDNTwJenJFMajK5bpgvpGmT4wurfT3QZ 8jHG9lmbFhQkEO00ccdvbKore5rJRGxOtNuHwj31Nbh/BqhPKz0fBPa9gZEeTXS1 1NR2DOiOLhU+k+YJKm596oxNd6fCo5eVSrf9bKnUuNUdgoTHKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTAAGU+U3LEyM5+ARBvxLjwNaUvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDAwOGIyODYtZDFlZC0z ZGU2LWJlNzEtMzAyMWIyMWJkNjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRFuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGKPo3vRonRBkewr7O/bNJ2BC5TEUHULL3H5IqALBqZwDt1YFNY/FFz t5O3K2v1fCKfjE3CoGMZWo1QIZzwnUMSiQXra+r91gik2QQfA0Ul17LsdMUf8vR7 cy7s371Q9OWg0OGh0My3L/1o3IIJRGTe2vuQ64ROlSEg+Vpu511CweJNyZgH4y8X EtD0wd2/IHl/79bTj4hZRfZSiIi1HQgkMvYnHqdJuqlb4BGi3bsSqxkv2BbZ/ZMv D4mNt6cYEcG/HpthTyKWZAMZ/h2+uFRUDdiWcah5xHinSr7zva7+t2VO76AURPk/ JVoWNA67xl6riSTPr0NXNXZlVFoVLGk= -----END CERTIFICATE-----Generated at Sun Jun 8 09:05:51 2025 by rpki-client