$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ffe719d-7b62-3608-b488-f385e0f93231.roa File: 0ffe719d-7b62-3608-b488-f385e0f93231.roa (raw, json) Hash identifier: ftH9tmavQndnhKegSdWCJNJBS7wy01Mf6FYep+13uEw= Subject key identifier: 5A:E8:C1:B1:91:B9:E6:CB:78:B5:F7:B6:47:7C:F7:77:33:93:F4:B5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C7F658EC055318DDAA791740 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ffe719d-7b62-3608-b488-f385e0f93231.roa Signing time: Wed 05 Feb 2025 11:09:06 +0000 ROA not before: Wed 05 Feb 2025 11:09:06 +0000 ROA not after: Tue 06 May 2025 10:09:06 +0000 asID: 30036 IP address blocks: 173.19.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c7:f6:58:ec:05:53:18:dd:aa:79:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 5 11:09:06 2025 GMT Not After : May 6 10:09:06 2025 GMT Subject: CN=5edac1a8-6af7-47b0-b2cb-dd715265a7de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3e:de:83:f5:35:c1:3e:83:bf:0f:5b:4b:0f: 83:5b:b2:ac:2c:69:04:76:b3:78:4b:e6:78:b9:91: aa:ca:ea:a5:35:47:b1:ce:a4:b5:66:97:c5:1f:38: 57:ff:51:0d:bb:45:a2:7a:a1:05:60:eb:9c:04:0f: 82:e8:fe:66:d9:e4:19:9e:47:cc:e0:3a:2a:10:3f: c0:37:9d:5c:e1:f9:c7:de:f0:5a:9c:3d:4d:0e:53: 3a:fe:be:5e:46:8f:23:06:23:2f:0b:6e:e9:fb:ed: 28:89:a3:22:62:97:0b:dd:86:c1:ef:47:d2:c2:45: e0:3a:ee:20:6d:80:0a:78:40:ee:5a:1b:be:d8:55: c0:6d:48:bf:f9:ec:84:f4:a1:35:4a:71:50:2e:9e: f4:7f:04:d1:b0:55:54:7f:c8:57:23:af:dc:3c:fa: f4:43:25:51:c1:39:1e:b9:51:8c:ca:6c:82:1a:d6: 99:79:cf:d3:7b:76:22:bf:0e:4b:bc:15:6c:ae:a8: 2f:90:32:14:18:3f:b3:c9:10:8b:f7:20:60:86:04: f5:67:55:d5:4e:13:10:3c:bb:1c:49:c5:88:f1:c2: 20:ad:3a:e2:20:66:f8:5d:20:47:bb:c0:15:40:40: 95:aa:07:6d:48:d6:05:08:7d:8f:ee:de:d1:e1:ec: 6b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E8:C1:B1:91:B9:E6:CB:78:B5:F7:B6:47:7C:F7:77:33:93:F4:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ffe719d-7b62-3608-b488-f385e0f93231.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:61:31:28:22:b0:2d:9f:43:b6:42:2a:de:16:77:07:3e:c4: f2:33:bf:48:3d:96:24:61:b6:01:f9:5d:f3:a6:73:72:96:04: 50:9b:6c:34:c3:da:46:f9:81:4e:cc:03:f2:cd:a9:3e:e2:de: 88:c2:cb:a8:92:b3:33:10:78:ee:ea:56:a0:83:bc:2b:2a:6c: 40:3d:96:6c:52:29:08:f5:41:76:bb:42:f3:14:cf:87:fd:75: 3a:4a:20:91:83:23:74:d1:13:95:44:63:f0:c7:65:4c:f8:0c: ff:b5:43:d4:30:ea:4e:96:38:5e:fb:52:63:9a:ab:07:a6:5f: c1:cf:52:82:85:b4:48:ab:0d:79:f4:5e:cf:f5:4e:bf:ae:69: 5b:e7:d3:e3:eb:ea:df:47:75:b2:49:ae:0a:2a:17:71:a4:12: 6a:b9:3f:2e:36:a0:39:04:28:a6:94:a5:97:1f:21:f3:16:ad: 1a:02:72:82:c7:99:46:c5:e8:be:5f:12:69:c3:9b:69:1e:dd: 0f:0f:d8:56:dc:8a:04:07:19:d4:1a:bc:6f:48:22:8c:43:22: d1:36:89:b0:6a:98:95:86:39:a8:ea:f9:b4:15:91:26:07:23: e0:41:59:f0:3b:18:cd:6b:2d:99:38:28:68:b5:39:be:cd:ea: 40:57:89:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjH9ljsBVMY3ap5F0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNTExMDkwNloXDTI1MDUwNjEwMDkwNlowLzEtMCsGA1UEAxMk NWVkYWMxYTgtNmFmNy00N2IwLWIyY2ItZGQ3MTUyNjVhN2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj7eg/U1wT6Dvw9bSw+DW7KsLGkEdrN4S+Z4 uZGqyuqlNUexzqS1ZpfFHzhX/1ENu0WieqEFYOucBA+C6P5m2eQZnkfM4DoqED/A N51c4fnH3vBanD1NDlM6/r5eRo8jBiMvC27p++0oiaMiYpcL3YbB70fSwkXgOu4g bYAKeEDuWhu+2FXAbUi/+eyE9KE1SnFQLp70fwTRsFVUf8hXI6/cPPr0QyVRwTke uVGMymyCGtaZec/Te3Yivw5LvBVsrqgvkDIUGD+zyRCL9yBghgT1Z1XVThMQPLsc ScWI8cIgrTriIGb4XSBHu8AVQECVqgdtSNYFCH2P7t7R4exr2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrowbGRuebLeLX3tkd893czk/S1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGZmZTcxOWQtN2I2Mi0z NjA4LWI0ODgtZjM4NWUwZjkzMjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRMkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABphMSgisC2fQ7ZCKt4Wdwc+xPIzv0g9liRhtgH5XfOmc3KWBFCbbDTD 2kb5gU7MA/LNqT7i3ojCy6iSszMQeO7qVqCDvCsqbEA9lmxSKQj1QXa7QvMUz4f9 dTpKIJGDI3TRE5VEY/DHZUz4DP+1Q9Qw6k6WOF77UmOaqwemX8HPUoKFtEirDXn0 Xs/1Tr+uaVvn0+Pr6t9HdbJJrgoqF3GkEmq5Py42oDkEKKaUpZcfIfMWrRoCcoLH mUbF6L5fEmnDm2ke3Q8P2FbcigQHGdQavG9IIoxDItE2ibBqmJWGOajq+bQVkSYH I+BBWfA7GM1rLZk4KGi1Ob7N6kBXiT0= -----END CERTIFICATE-----Generated at Sun Apr 6 06:01:28 2025 by rpki-client