$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/10fccbb3-eb5e-366d-8e38-5f2e0780379a.roa File: 10fccbb3-eb5e-366d-8e38-5f2e0780379a.roa (raw, json) Hash identifier: PewkP92gN4yH5rir+n7DGqFp9mDzr1Wj6OsKMfh7R90= Subject key identifier: DD:53:5E:80:6C:DF:59:7E:AB:DA:54:4B:4A:3F:DC:86:19:03:3B:36 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C7FDCF375D27F6F45EF74B40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/10fccbb3-eb5e-366d-8e38-5f2e0780379a.roa Signing time: Wed 05 Feb 2025 11:24:09 +0000 ROA not before: Wed 05 Feb 2025 11:24:09 +0000 ROA not after: Tue 06 May 2025 10:24:09 +0000 asID: 30036 IP address blocks: 173.23.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c7:fd:cf:37:5d:27:f6:f4:5e:f7:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 5 11:24:09 2025 GMT Not After : May 6 10:24:09 2025 GMT Subject: CN=f1048dc1-1cc2-4eb3-a855-5238b74b9a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8c:b3:79:00:2b:45:a3:15:73:1f:03:98:b8: 3b:a9:da:34:67:ed:96:99:c5:31:e8:89:2b:aa:92: a2:de:b1:65:49:0e:ae:93:e0:25:fc:65:17:7f:a0: 9a:eb:d3:50:75:78:71:7a:a3:70:87:2a:f9:7d:06: bd:1f:17:33:db:f4:4d:98:5e:b4:2a:6f:10:6a:1d: 98:0c:25:dc:c7:77:00:d6:ce:e4:63:2c:61:13:fe: a2:5f:23:bd:a5:f0:b5:39:10:da:c7:7b:85:3a:fe: 18:61:2b:88:35:96:47:b4:8f:bb:83:9d:82:f0:c6: fd:43:e0:14:46:66:14:dc:13:4d:52:77:ee:77:2c: 29:d7:4f:c9:fa:7a:63:cf:f7:0f:c8:ca:b1:ea:14: 03:e1:54:58:01:f7:b3:a6:64:b7:f0:7a:e8:a3:34: 4f:02:84:dd:39:d9:5a:c2:cf:ca:bf:f5:8d:47:58: 10:6d:75:41:51:32:fc:2c:b0:26:73:e7:aa:c7:25: 16:3f:d1:56:78:46:be:76:60:ce:ae:5a:a7:ba:78: 21:f6:da:72:fc:da:d1:ef:bc:a5:c1:3d:11:01:6d: bb:c5:aa:46:42:63:23:2f:43:7a:48:16:e5:c8:ea: 0b:e9:6c:15:aa:fd:48:64:10:e4:9e:34:14:7b:30: 29:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:53:5E:80:6C:DF:59:7E:AB:DA:54:4B:4A:3F:DC:86:19:03:3B:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/10fccbb3-eb5e-366d-8e38-5f2e0780379a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:cb:6c:0c:b9:ca:f4:1d:a2:4b:77:45:84:0c:9d:97:87:0a: 5c:af:1e:f0:3c:12:f0:e2:46:36:25:35:68:14:a2:15:65:74: 3f:f8:49:dc:58:83:46:b9:f0:b7:be:ec:f0:16:c1:38:7c:1c: 9d:a2:27:99:fa:4d:9b:cf:3f:79:f3:9d:f4:f2:4a:b5:e3:c2: b7:51:ef:57:35:6a:95:0c:07:ec:aa:9d:d1:bb:05:b8:95:4f: bc:f1:2a:5b:4a:46:00:11:17:b2:8e:1f:10:5d:b6:f6:8e:1a: be:45:bd:09:9c:56:28:f1:d1:11:2b:74:fc:2a:41:68:d5:d3: 53:a8:20:84:be:0c:aa:0a:78:bd:57:2b:f5:97:8a:5a:63:30: 3d:ac:59:40:d4:e4:9e:ab:5e:6c:67:ee:f0:8e:78:7e:50:b9: 86:f2:a2:35:d6:d3:89:66:cb:87:aa:ce:92:3e:c0:99:a3:b1: c5:4f:80:ed:99:09:f8:86:b9:78:8a:c9:e4:7b:1a:df:76:89: dd:74:a2:af:ca:cc:04:be:2d:96:0e:80:50:35:02:97:45:e2: 9b:22:d5:b8:6a:6a:94:0f:ec:33:a3:1c:85:43:7f:59:89:d4: 12:c1:35:08:c2:56:8c:85:2d:53:46:df:f2:ad:56:5a:cd:d2: d6:7b:4c:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjH/c83XSf29F73S0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNTExMjQwOVoXDTI1MDUwNjEwMjQwOVowLzEtMCsGA1UEAxMk ZjEwNDhkYzEtMWNjMi00ZWIzLWE4NTUtNTIzOGI3NGI5YTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoyzeQArRaMVcx8DmLg7qdo0Z+2WmcUx6Ikr qpKi3rFlSQ6uk+Al/GUXf6Ca69NQdXhxeqNwhyr5fQa9Hxcz2/RNmF60Km8Qah2Y DCXcx3cA1s7kYyxhE/6iXyO9pfC1ORDax3uFOv4YYSuINZZHtI+7g52C8Mb9Q+AU RmYU3BNNUnfudywp10/J+npjz/cPyMqx6hQD4VRYAfezpmS38HroozRPAoTdOdla ws/Kv/WNR1gQbXVBUTL8LLAmc+eqxyUWP9FWeEa+dmDOrlqnungh9tpy/NrR77yl wT0RAW27xapGQmMjL0N6SBblyOoL6WwVqv1IZBDknjQUezAp7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1TXoBs31l+q9pUS0o/3IYZAzs2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTBmY2NiYjMtZWI1ZS0z NjZkLThlMzgtNWYyZTA3ODAzNzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRe7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7LbAy5yvQdokt3RYQMnZeHClyvHvA8EvDiRjYlNWgUohVldD/4SdxY g0a58Le+7PAWwTh8HJ2iJ5n6TZvPP3nznfTySrXjwrdR71c1apUMB+yqndG7BbiV T7zxKltKRgARF7KOHxBdtvaOGr5FvQmcVijx0RErdPwqQWjV01OoIIS+DKoKeL1X K/WXilpjMD2sWUDU5J6rXmxn7vCOeH5QuYbyojXW04lmy4eqzpI+wJmjscVPgO2Z CfiGuXiKyeR7Gt92id10oq/KzAS+LZYOgFA1ApdF4psi1bhqapQP7DOjHIVDf1mJ 1BLBNQjCVoyFLVNG3/KtVlrN0tZ7TOA= -----END CERTIFICATE-----Generated at Sun Apr 6 05:57:05 2025 by rpki-client