$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/051495a0-a8c9-3396-ab17-885e8adc3a55.roa File: 051495a0-a8c9-3396-ab17-885e8adc3a55.roa (raw, json) Hash identifier: 12myU9jy/Vp5+mAvHVAExdzwkwHNptharaptx0XxgLc= Subject key identifier: D6:56:85:17:58:0E:28:D0:12:F2:4E:22:0D:C3:EE:FA:17:E8:C7:85 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C7F71368B00785466D0292C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/051495a0-a8c9-3396-ab17-885e8adc3a55.roa Signing time: Wed 05 Feb 2025 11:10:35 +0000 ROA not before: Wed 05 Feb 2025 11:10:35 +0000 ROA not after: Tue 06 May 2025 10:10:35 +0000 asID: 30036 IP address blocks: 173.19.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c7:f7:13:68:b0:07:85:46:6d:02:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 5 11:10:35 2025 GMT Not After : May 6 10:10:35 2025 GMT Subject: CN=fc66a2a1-7d2f-41ce-823b-3e49c07dd232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:af:a0:90:a7:cf:af:38:3a:67:a6:d4:69:27: c0:c3:bd:99:64:d7:cc:3a:ea:58:53:a2:ba:9e:e2: 83:a1:e0:e9:a7:1a:d1:28:fe:30:03:59:6c:75:31: 74:de:f8:49:80:33:ca:e5:af:54:3a:f1:07:5d:80: 18:bb:29:8d:f6:96:7a:2c:24:96:24:56:19:85:97: 61:14:d1:0b:b4:76:40:ba:6d:74:45:bd:7e:b7:ab: a6:73:31:50:56:af:dd:59:dd:3d:ec:88:e6:10:98: d4:3e:77:01:f2:b1:5d:e1:72:dc:67:0d:f7:f5:11: d4:5d:8b:66:a9:6c:ee:a9:5d:b9:80:1a:5e:af:42: ce:a4:87:2c:9f:9c:be:35:be:c1:e8:83:7a:14:07: 0e:e6:d1:c6:05:a6:1f:fc:2b:86:27:d5:23:1e:00: 1f:41:cd:bb:9d:0d:1b:ac:71:9f:27:e9:ca:b5:85: 3e:b0:24:95:8c:80:87:e6:50:a7:a0:03:48:95:42: 98:57:fa:25:b9:6c:2d:68:0c:3a:44:00:d5:de:b2: 07:94:c6:69:b3:a1:46:b2:34:be:fc:d6:ae:f2:d3: 84:b4:55:89:c0:d5:61:bf:2b:11:d0:73:d7:8b:03: bc:dd:79:d5:e6:99:be:d3:01:c5:ff:35:e6:10:74: e3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:56:85:17:58:0E:28:D0:12:F2:4E:22:0D:C3:EE:FA:17:E8:C7:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/051495a0-a8c9-3396-ab17-885e8adc3a55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:e4:7f:6f:2e:04:8b:8f:cf:5e:0b:40:99:9f:e5:75:3d:1a: b2:a1:e2:fd:f3:f0:25:e3:fb:5b:20:ae:c6:09:39:35:f1:3f: 9f:58:c9:f2:c8:11:7c:86:95:e8:87:41:4c:63:b3:60:b9:02: 80:d7:78:2b:1f:64:8e:03:63:ee:58:c0:60:01:e7:0e:21:8b: cd:bd:43:77:06:ea:a7:8a:e6:e9:a4:cd:36:87:cb:2a:55:66: 4e:e1:41:52:e9:fa:57:74:50:86:25:5d:56:27:25:ea:dc:dd: 3d:77:9e:3a:f0:7d:72:fc:c2:06:48:dc:dd:e2:dd:7d:a5:ef: 0e:60:62:e2:6c:30:ff:57:a7:76:64:3e:43:7b:8d:83:3b:58: 34:56:75:8f:fb:12:ea:3d:b4:52:32:04:b5:31:d5:cd:93:1d: 58:7a:18:21:7f:d2:71:5a:a1:fb:70:2c:dd:dc:ca:c9:a1:3c: 6d:8d:00:77:90:61:e8:b0:49:b1:67:50:b0:78:e5:f0:62:68: ac:97:2d:5a:2b:cf:a5:7a:a5:a3:c0:5f:d5:2a:67:9e:f9:f9: a9:e7:89:b4:a6:60:c4:0f:bb:62:bb:ea:f8:ba:f8:94:00:3e: 89:c3:75:fc:9d:f4:8c:e8:f2:3f:ba:fa:3a:fb:dc:bd:3e:32: 78:0b:88:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjH9xNosAeFRm0CksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNTExMTAzNVoXDTI1MDUwNjEwMTAzNVowLzEtMCsGA1UEAxMk ZmM2NmEyYTEtN2QyZi00MWNlLTgyM2ItM2U0OWMwN2RkMjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16+gkKfPrzg6Z6bUaSfAw72ZZNfMOupYU6K6 nuKDoeDppxrRKP4wA1lsdTF03vhJgDPK5a9UOvEHXYAYuymN9pZ6LCSWJFYZhZdh FNELtHZAum10Rb1+t6umczFQVq/dWd097IjmEJjUPncB8rFd4XLcZw339RHUXYtm qWzuqV25gBper0LOpIcsn5y+Nb7B6IN6FAcO5tHGBaYf/CuGJ9UjHgAfQc27nQ0b rHGfJ+nKtYU+sCSVjICH5lCnoANIlUKYV/oluWwtaAw6RADV3rIHlMZps6FGsjS+ /Nau8tOEtFWJwNVhvysR0HPXiwO83XnV5pm+0wHF/zXmEHTj1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZWhRdYDijQEvJOIg3D7voX6MeFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDUxNDk1YTAtYThjOS0z Mzk2LWFiMTctODg1ZThhZGMzYTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRNCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXkf28uBIuPz14LQJmf5XU9GrKh4v3z8CXj+1sgrsYJOTXxP59YyfLI EXyGleiHQUxjs2C5AoDXeCsfZI4DY+5YwGAB5w4hi829Q3cG6qeK5umkzTaHyypV Zk7hQVLp+ld0UIYlXVYnJerc3T13njrwfXL8wgZI3N3i3X2l7w5gYuJsMP9Xp3Zk PkN7jYM7WDRWdY/7Euo9tFIyBLUx1c2THVh6GCF/0nFaoftwLN3cysmhPG2NAHeQ YeiwSbFnULB45fBiaKyXLVorz6V6paPAX9UqZ575+annibSmYMQPu2K76vi6+JQA PonDdfyd9Izo8j+6+jr73L0+MngLiIE= -----END CERTIFICATE-----Generated at Sun Apr 6 05:56:49 2025 by rpki-client