$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/17b60825-7f8d-34d1-bae1-1270c806af11.roa File: 17b60825-7f8d-34d1-bae1-1270c806af11.roa (raw, json) Hash identifier: Z5x5jXZkdiqo5Ec74Kg3wyGOP7dB6PLzq9/pWPz7eF8= Subject key identifier: 38:7B:00:33:91:F1:CC:D5:62:23:F2:4D:7A:11:84:36:8E:52:00:E2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C2634EF0C9D12306DF5CF760 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/17b60825-7f8d-34d1-bae1-1270c806af11.roa Signing time: Mon 03 Feb 2025 11:13:48 +0000 ROA not before: Mon 03 Feb 2025 11:13:48 +0000 ROA not after: Sun 04 May 2025 10:13:48 +0000 asID: 30036 IP address blocks: 173.22.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:63:4e:f0:c9:d1:23:06:df:5c:f7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 3 11:13:48 2025 GMT Not After : May 4 10:13:48 2025 GMT Subject: CN=65cf4b73-ebba-4aa0-9ea7-e113dab01cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e1:3f:ad:da:e0:8b:8c:20:32:8a:d7:b5:87: 9d:b5:35:ed:85:f7:5f:6c:7d:6e:3c:dd:69:ae:a4: 1b:5d:f9:10:84:5e:57:82:88:d1:54:fa:46:20:ab: 06:43:9a:ab:96:d8:37:c9:5c:20:91:cc:31:73:36: 3f:43:78:60:c6:fe:f9:10:53:59:cd:0a:7f:99:49: 85:af:53:1a:59:f3:5f:24:97:bf:f5:04:be:c5:84: 01:f9:0e:69:e7:70:f7:15:e0:ec:e8:c7:25:32:61: 2f:47:a8:2b:58:e6:99:9a:95:ad:5a:8a:f3:44:81: c4:ff:0b:50:37:4d:26:69:c0:5a:50:02:1a:c6:6e: 0b:0e:9f:9a:94:16:9c:74:d9:11:2c:32:95:21:43: 71:86:c2:22:00:84:b2:4a:45:f6:98:77:a8:70:0d: 53:b0:75:bc:14:01:26:2d:5d:ed:5e:2d:fa:a8:36: 51:87:d9:19:99:d3:11:15:38:63:2a:ad:0d:91:53: ea:2b:c1:f0:75:4a:21:a1:1b:50:b9:38:bc:bb:61: bd:e4:94:20:ad:41:b2:ea:9b:56:01:4d:d2:48:ae: b1:67:27:93:77:0f:4e:1f:89:db:95:90:69:0d:3b: b5:1f:8a:fc:f2:09:37:b0:08:1e:b1:2b:c4:39:45: 16:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:7B:00:33:91:F1:CC:D5:62:23:F2:4D:7A:11:84:36:8E:52:00:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/17b60825-7f8d-34d1-bae1-1270c806af11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:be:c4:21:89:24:46:11:5f:05:4f:82:9d:86:94:63:a4:75: 44:55:ef:4e:05:0a:2c:fe:97:10:66:8e:85:9e:27:06:f6:19: 48:bf:83:e0:3b:89:23:5b:eb:db:ee:b9:81:9b:1d:5f:14:ed: e3:cf:0a:a1:7c:05:04:e0:5c:6e:07:b5:d9:1e:e1:9a:7f:b7: cf:31:39:37:56:a7:95:89:e6:79:ec:0b:78:63:8a:5a:8e:6c: 98:12:91:e6:6b:7d:38:46:d1:a5:a4:42:b0:b3:ab:16:6d:2f: 03:da:ef:b6:00:6d:68:f8:98:38:24:4d:37:d4:41:0d:3b:a8: 5f:32:88:b0:9f:f7:e3:27:02:36:c5:d4:22:42:c7:7f:64:19: 26:e6:e5:1e:04:9f:29:4c:76:8c:31:30:28:f5:c3:b5:85:c6: bb:e7:ac:ee:ea:06:49:02:b3:8c:42:23:e2:67:ef:ef:4c:1e: 16:db:db:3b:cb:3b:4f:9a:d6:fd:93:20:a9:1c:eb:86:d0:ee: ec:7a:10:4c:1f:85:fb:4b:57:7b:f8:8c:27:d1:86:1f:a1:83: 3c:ba:21:d7:97:aa:da:0e:fd:e1:65:92:d7:a8:cb:34:7f:a8: eb:e3:02:90:f6:26:b5:cb:d5:47:31:6b:c2:2d:da:d1:3d:02: bf:02:61:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCY07wydEjBt9c92AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwMzExMTM0OFoXDTI1MDUwNDEwMTM0OFowLzEtMCsGA1UEAxMk NjVjZjRiNzMtZWJiYS00YWEwLTllYTctZTExM2RhYjAxY2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+E/rdrgi4wgMorXtYedtTXthfdfbH1uPN1p rqQbXfkQhF5XgojRVPpGIKsGQ5qrltg3yVwgkcwxczY/Q3hgxv75EFNZzQp/mUmF r1MaWfNfJJe/9QS+xYQB+Q5p53D3FeDs6MclMmEvR6grWOaZmpWtWorzRIHE/wtQ N00macBaUAIaxm4LDp+alBacdNkRLDKVIUNxhsIiAISySkX2mHeocA1TsHW8FAEm LV3tXi36qDZRh9kZmdMRFThjKq0NkVPqK8HwdUohoRtQuTi8u2G95JQgrUGy6ptW AU3SSK6xZyeTdw9OH4nblZBpDTu1H4r88gk3sAgesSvEOUUWsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDh7ADOR8czVYiPyTXoRhDaOUgDiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTdiNjA4MjUtN2Y4ZC0z NGQxLWJhZTEtMTI3MGM4MDZhZjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRZvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAW+xCGJJEYRXwVPgp2GlGOkdURV704FCiz+lxBmjoWeJwb2GUi/g+A7 iSNb69vuuYGbHV8U7ePPCqF8BQTgXG4Htdke4Zp/t88xOTdWp5WJ5nnsC3hjilqO bJgSkeZrfThG0aWkQrCzqxZtLwPa77YAbWj4mDgkTTfUQQ07qF8yiLCf9+MnAjbF 1CJCx39kGSbm5R4EnylMdowxMCj1w7WFxrvnrO7qBkkCs4xCI+Jn7+9MHhbb2zvL O0+a1v2TIKkc64bQ7ux6EEwfhftLV3v4jCfRhh+hgzy6IdeXqtoO/eFlkteoyzR/ qOvjApD2JrXL1Ucxa8It2tE9Ar8CYcQ= -----END CERTIFICATE-----Generated at Sun Apr 6 06:02:55 2025 by rpki-client