$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/00e5be3c-6018-35ab-b4ad-bc4a13f5e9a4.roa File: 00e5be3c-6018-35ab-b4ad-bc4a13f5e9a4.roa (raw, json) Hash identifier: vFmknGD3X9vr/NQiD887WUuwfBQwvVGggxBhOVr5AZY= Subject key identifier: 46:F4:A2:94:26:4D:A2:AC:95:05:E2:CF:50:A1:F1:9C:22:A8:CF:18 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848B736377E17CC04EB61F91F80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/00e5be3c-6018-35ab-b4ad-bc4a13f5e9a4.roa Signing time: Thu 30 Jan 2025 11:09:03 +0000 ROA not before: Thu 30 Jan 2025 11:09:03 +0000 ROA not after: Wed 30 Apr 2025 10:09:03 +0000 asID: 30036 IP address blocks: 173.17.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:36:37:7e:17:cc:04:eb:61:f9:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 30 11:09:03 2025 GMT Not After : Apr 30 10:09:03 2025 GMT Subject: CN=a826c14d-53d7-4226-ac09-bec8292c8029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:56:ed:5b:89:a4:49:05:e5:a6:c5:f7:90:1b: b1:9e:42:b6:52:db:e9:48:17:ff:99:f5:ee:4a:d2: 9d:23:aa:43:4b:7b:f1:63:00:87:fd:d9:2d:1b:38: ee:a2:b3:b2:d8:7a:e0:d2:78:5f:08:9d:b3:06:4f: 74:7a:6b:96:d8:f9:52:81:12:1d:41:8a:ac:05:2a: a5:47:e8:98:66:bb:51:01:13:48:fc:ac:18:51:8d: a1:4d:fa:31:ba:13:a3:36:a3:67:c8:4b:c3:ec:83: 8e:ba:cc:c7:b8:06:e7:7e:dd:92:64:22:95:1f:ef: c6:35:d8:4b:e5:dc:18:16:d8:73:59:6a:0a:8c:88: 91:32:0e:f2:0d:bc:36:1d:3c:cf:f6:46:c3:37:7f: 7e:26:c9:54:96:93:18:61:d7:c8:56:79:05:63:71: 0b:bb:64:10:46:7e:f5:80:1a:63:a4:22:55:fc:02: f1:7d:d2:77:7d:e3:d3:f5:34:eb:3a:d2:22:5d:16: 55:0a:32:47:5d:d6:35:0a:3c:8e:e1:71:df:55:e6: a8:1e:3e:94:9e:82:0c:b3:c7:88:13:e0:dc:2c:4d: fc:ab:6f:44:37:83:5a:2d:7a:68:fa:ed:3e:83:5a: 34:33:15:7c:22:00:7a:c2:53:51:d8:a2:de:f8:ed: 15:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F4:A2:94:26:4D:A2:AC:95:05:E2:CF:50:A1:F1:9C:22:A8:CF:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/00e5be3c-6018-35ab-b4ad-bc4a13f5e9a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:dd:1d:86:cd:5c:07:7d:f4:0e:3e:27:b1:b8:45:d9:60:8f: 82:e7:fd:fa:94:79:4c:c1:7f:45:dd:30:59:c8:85:89:0f:88: bc:d8:ba:f1:a5:ec:63:77:ad:07:96:b1:66:b6:2c:79:d0:49: a8:bc:c1:69:ea:80:50:76:71:84:e8:75:93:6c:39:b7:8b:f3: a3:a8:7c:6e:52:ad:dd:e1:ec:1b:be:f3:ea:52:82:01:f3:bf: ba:2e:21:41:02:45:84:eb:da:15:74:7b:99:37:a3:cb:61:eb: d6:42:f5:cb:56:46:85:05:77:44:0e:29:c6:6b:39:cc:9a:50: a8:bd:6e:d1:8a:d3:c1:86:75:00:ae:84:98:10:d7:d1:cd:a0: 4f:dc:fd:62:1d:87:83:73:cc:d0:da:ab:df:97:27:ef:ef:ea: a0:32:74:75:80:ec:e6:21:1b:68:5a:9a:c4:8c:ff:c9:28:8a: 5f:f4:6b:20:74:27:c7:6f:e3:cd:1a:ed:99:28:17:19:25:41: e4:21:20:0f:71:9c:aa:ab:25:ea:2c:46:b8:99:10:29:bd:d3: 5e:4d:75:6d:41:91:67:c1:be:12:85:1a:8c:4d:f1:79:6c:be: 52:38:63:af:5f:62:45:5a:77:43:de:4d:65:e2:1c:7a:ac:0d: 86:7f:c5:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3Njd+F8wE62H5H4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDEzMDExMDkwM1oXDTI1MDQzMDEwMDkwM1owLzEtMCsGA1UEAxMk YTgyNmMxNGQtNTNkNy00MjI2LWFjMDktYmVjODI5MmM4MDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlbtW4mkSQXlpsX3kBuxnkK2UtvpSBf/mfXu StKdI6pDS3vxYwCH/dktGzjuorOy2Hrg0nhfCJ2zBk90emuW2PlSgRIdQYqsBSql R+iYZrtRARNI/KwYUY2hTfoxuhOjNqNnyEvD7IOOuszHuAbnft2SZCKVH+/GNdhL 5dwYFthzWWoKjIiRMg7yDbw2HTzP9kbDN39+JslUlpMYYdfIVnkFY3ELu2QQRn71 gBpjpCJV/ALxfdJ3fePT9TTrOtIiXRZVCjJHXdY1CjyO4XHfVeaoHj6UnoIMs8eI E+DcLE38q29EN4NaLXpo+u0+g1o0MxV8IgB6wlNR2KLe+O0VKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEb0opQmTaKslQXiz1Ch8ZwiqM8YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDBlNWJlM2MtNjAxOC0z NWFiLWI0YWQtYmM0YTEzZjVlOWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvdHYbNXAd99A4+J7G4Rdlgj4Ln/fqUeUzBf0XdMFnIhYkPiLzYuvGl 7GN3rQeWsWa2LHnQSai8wWnqgFB2cYTodZNsObeL86OofG5Srd3h7Bu+8+pSggHz v7ouIUECRYTr2hV0e5k3o8th69ZC9ctWRoUFd0QOKcZrOcyaUKi9btGK08GGdQCu hJgQ19HNoE/c/WIdh4NzzNDaq9+XJ+/v6qAydHWA7OYhG2hamsSM/8koil/0ayB0 J8dv480a7ZkoFxklQeQhIA9xnKqrJeosRriZECm9015NdW1BkWfBvhKFGoxN8Xls vlI4Y69fYkVad0PeTWXiHHqsDYZ/xXw= -----END CERTIFICATE-----Generated at Sun Apr 6 05:53:13 2025 by rpki-client