$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04d967c9-40ae-30f9-b400-3da52cc0cb9b.roa File: 04d967c9-40ae-30f9-b400-3da52cc0cb9b.roa (raw, json) Hash identifier: Qp4Jkd1Uq2rYd0Sr8U8LK8wln55XdfGknHXS5N8GJTQ= Subject key identifier: A6:DD:5C:F3:78:0C:DD:9E:D0:FD:21:81:BE:5D:BC:3C:EC:29:32:3A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C7FD660AD3A43668669DCF40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04d967c9-40ae-30f9-b400-3da52cc0cb9b.roa Signing time: Wed 05 Feb 2025 11:23:19 +0000 ROA not before: Wed 05 Feb 2025 11:23:19 +0000 ROA not after: Tue 06 May 2025 10:23:19 +0000 asID: 30036 IP address blocks: 173.19.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c7:fd:66:0a:d3:a4:36:68:66:9d:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 5 11:23:19 2025 GMT Not After : May 6 10:23:19 2025 GMT Subject: CN=1ef4f44e-6afd-4f70-8ea7-2a546ca3ac66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b8:9a:f9:ef:3d:8e:dc:5a:2f:b1:dd:16:4c: 62:08:e5:03:77:ab:4a:1f:5a:32:34:a7:22:45:c0: 06:a6:3a:fd:86:c8:64:f3:dd:08:cd:81:3b:c3:ac: c8:72:f7:69:5b:5d:c7:b2:db:8f:1c:81:bd:7d:4d: 9d:80:56:a8:5e:de:ab:a3:f7:94:61:9d:8c:57:88: 4c:df:01:fd:e8:f1:6f:70:e8:61:bf:dd:43:81:95: 82:3d:4f:99:be:b7:77:a5:3d:9b:8a:f9:b1:d4:30: e5:63:c0:c4:29:98:8f:d4:75:c2:88:4f:5e:54:9c: e4:6b:0d:9d:b6:9b:62:3d:7f:11:ee:ee:66:5d:39: 9d:68:a6:04:ce:49:b3:6d:82:bf:fb:df:49:12:8a: b7:d3:6c:ee:26:74:54:e5:dd:16:15:93:82:d6:e5: e9:5e:61:e1:87:5b:b1:20:6f:98:85:96:7d:87:d2: 94:8f:42:df:d4:e4:36:38:bd:cf:dd:72:4b:2a:bf: e8:74:97:d6:67:37:ec:d4:25:26:ff:90:15:cb:04: 7d:da:3c:a5:e4:81:1c:bf:8f:63:5b:b3:9f:84:db: ce:1d:80:7e:75:c7:56:d3:5b:91:58:1b:63:f8:a7: 6d:2e:50:3b:36:9a:e0:bd:01:44:52:78:fd:a1:30: 92:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:DD:5C:F3:78:0C:DD:9E:D0:FD:21:81:BE:5D:BC:3C:EC:29:32:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04d967c9-40ae-30f9-b400-3da52cc0cb9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:01:ca:ee:20:e2:1f:e6:2c:43:10:6f:c0:fb:54:4e:f5:5b: ae:06:8f:77:b4:c8:fc:4f:3d:66:41:e2:c9:a2:59:65:c6:c0: ce:20:55:07:ea:1a:fd:f0:82:38:aa:65:63:ec:2e:d2:57:a2: 29:03:ae:a8:5d:2d:29:05:84:ea:90:8c:b0:a4:84:29:b4:75: 52:bb:b3:bd:7b:58:f0:4b:ee:99:6e:9a:db:74:1c:1e:2b:41: 5b:c7:fe:b3:dc:8e:ec:a6:b2:4f:75:97:14:3a:8b:7b:0b:27: 07:23:f9:f2:c1:0c:87:5f:00:75:8d:28:5f:8d:1b:ed:b7:7f: e5:c3:88:15:b1:27:cd:99:4c:72:cf:3f:d1:e5:f8:66:f6:5d: 86:b5:a4:a6:72:bb:78:c5:a7:13:9c:4a:ed:d7:ad:59:56:bb: 18:bb:1a:32:37:30:fb:5f:1e:ed:0c:12:70:7d:73:9c:61:94: 6b:74:a4:a6:ce:44:ef:3b:6d:2a:7c:3b:ec:82:23:f5:ec:b0: 46:58:ee:53:76:cb:12:fb:57:fe:82:01:42:af:1e:fd:82:e3: 32:bc:22:2b:80:b2:fe:8a:29:74:4b:6c:9b:17:71:50:25:ce: 94:6a:43:1b:7a:75:3a:aa:9f:16:79:4c:98:d7:9c:d4:72:f0: ce:81:16:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjH/WYK06Q2aGadz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNTExMjMxOVoXDTI1MDUwNjEwMjMxOVowLzEtMCsGA1UEAxMk MWVmNGY0NGUtNmFmZC00ZjcwLThlYTctMmE1NDZjYTNhYzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7ia+e89jtxaL7HdFkxiCOUDd6tKH1oyNKci RcAGpjr9hshk890IzYE7w6zIcvdpW13HstuPHIG9fU2dgFaoXt6ro/eUYZ2MV4hM 3wH96PFvcOhhv91DgZWCPU+Zvrd3pT2bivmx1DDlY8DEKZiP1HXCiE9eVJzkaw2d tptiPX8R7u5mXTmdaKYEzkmzbYK/+99JEoq302zuJnRU5d0WFZOC1uXpXmHhh1ux IG+YhZZ9h9KUj0Lf1OQ2OL3P3XJLKr/odJfWZzfs1CUm/5AVywR92jyl5IEcv49j W7OfhNvOHYB+dcdW01uRWBtj+KdtLlA7NprgvQFEUnj9oTCSMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbdXPN4DN2e0P0hgb5dvDzsKTI6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDRkOTY3YzktNDBhZS0z MGY5LWI0MDAtM2RhNTJjYzBjYjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRNqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwByu4g4h/mLEMQb8D7VE71W64Gj3e0yPxPPWZB4smiWWXGwM4gVQfq Gv3wgjiqZWPsLtJXoikDrqhdLSkFhOqQjLCkhCm0dVK7s717WPBL7plumtt0HB4r QVvH/rPcjuymsk91lxQ6i3sLJwcj+fLBDIdfAHWNKF+NG+23f+XDiBWxJ82ZTHLP P9Hl+Gb2XYa1pKZyu3jFpxOcSu3XrVlWuxi7GjI3MPtfHu0MEnB9c5xhlGt0pKbO RO87bSp8O+yCI/XssEZY7lN2yxL7V/6CAUKvHv2C4zK8IiuAsv6KKXRLbJsXcVAl zpRqQxt6dTqqnxZ5TJjXnNRy8M6BFpM= -----END CERTIFICATE-----Generated at Sun Apr 6 05:54:48 2025 by rpki-client