$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1be3bac9-3f5f-3f86-882f-c2e864bb8c30.roa File: 1be3bac9-3f5f-3f86-882f-c2e864bb8c30.roa (raw, json) Hash identifier: sfkqUMdlViQ666L7TbR04yKolcyoJ89EjxI/TkHFmi0= Subject key identifier: 00:85:37:5D:C9:60:2D:48:0A:77:F1:EE:46:68:5A:6B:C5:7D:43:6D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C26060C63E3801BA53222340 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1be3bac9-3f5f-3f86-882f-c2e864bb8c30.roa Signing time: Mon 03 Feb 2025 11:07:54 +0000 ROA not before: Mon 03 Feb 2025 11:07:54 +0000 ROA not after: Sun 04 May 2025 10:07:54 +0000 asID: 30036 IP address blocks: 173.24.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:60:60:c6:3e:38:01:ba:53:22:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 3 11:07:54 2025 GMT Not After : May 4 10:07:54 2025 GMT Subject: CN=e76b033e-094b-4008-850a-18cc20dc9cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:af:ad:87:20:f2:ac:d9:52:8e:e8:4e:e6:cd: 06:b1:d0:b9:09:bb:52:a5:8c:43:2d:05:4e:e9:b5: 96:a1:cb:b0:94:6d:23:0d:c7:59:f8:25:38:46:31: e7:a6:d5:ac:4d:98:a9:6c:1a:6c:77:10:d6:a9:38: 2c:7d:52:55:29:3b:6a:43:7b:4f:7f:86:23:51:69: 2a:46:0b:4b:38:bd:aa:12:4f:cc:23:3d:d4:81:b7: 63:95:65:cc:92:66:b4:98:0b:6a:ca:e1:ef:f8:f9: 46:5a:10:b7:14:00:0f:81:99:09:98:63:f3:59:c0: f8:2f:12:10:77:af:af:c9:33:a1:0c:43:0e:4e:b9: 79:55:14:25:42:53:a8:f3:7b:0a:90:26:eb:fe:eb: 40:11:95:ba:ba:bc:6a:e7:2b:ab:9f:8c:c3:01:29: 9b:07:0b:f8:7c:dd:8a:67:1b:3d:aa:c1:ef:87:48: 68:30:df:b4:6a:b2:9f:e8:fc:8b:3f:7d:e0:91:06: 0a:44:6d:0b:91:a5:b3:13:35:aa:b8:b7:c2:4c:e2: be:a4:64:9a:67:6a:60:35:9b:01:bf:2a:b1:df:ff: 7a:fa:f6:6b:c3:78:e6:7e:f7:8f:c4:7e:63:eb:f8: 86:cf:11:d5:87:87:1c:f5:2d:39:ce:7a:5d:9e:a5: f3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:85:37:5D:C9:60:2D:48:0A:77:F1:EE:46:68:5A:6B:C5:7D:43:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1be3bac9-3f5f-3f86-882f-c2e864bb8c30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:40:0b:66:47:b6:62:4b:d9:3f:74:36:f8:e0:ad:27:26:2c: e0:80:b5:4e:04:03:ea:13:68:06:09:9e:60:e7:86:c6:9c:6b: 38:b0:88:df:67:cc:cd:54:0d:ce:98:85:b5:c4:b2:46:f9:23: 8e:0f:c5:a8:15:0a:13:33:fa:08:05:47:46:b2:a8:39:ca:d8: 74:55:54:44:18:6d:52:d4:f6:51:e8:ae:1c:24:f7:93:c7:04: 38:6e:ca:e4:30:6d:aa:1b:f8:a9:cf:84:ae:74:80:f0:96:30: 19:0e:02:11:ef:fc:7f:1d:c1:a4:46:87:55:68:ef:cc:61:5a: 06:a4:04:38:d9:92:7d:4b:3d:38:6b:4b:7c:18:56:ee:f8:77: 79:fa:48:7d:c1:76:74:68:8c:fb:3d:ff:6f:bd:48:9c:21:5d: 7f:66:64:d5:4a:0a:bc:fa:16:d8:fa:35:57:f1:87:85:b4:b7: 8c:14:ea:3f:3b:ad:eb:e5:60:08:df:55:a4:b6:95:f1:c8:13: 03:24:e6:0c:6e:c6:fb:e6:4f:25:b8:8c:fa:16:88:bf:dc:6c: d1:dc:55:bb:26:00:9e:e3:81:40:1b:fa:1a:de:70:39:ee:4d: 6a:88:33:93:da:29:2a:4f:9d:95:4d:d1:7a:c4:6d:98:5e:0d: 2f:36:94:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCYGDGPjgBulMiI0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwMzExMDc1NFoXDTI1MDUwNDEwMDc1NFowLzEtMCsGA1UEAxMk ZTc2YjAzM2UtMDk0Yi00MDA4LTg1MGEtMThjYzIwZGM5Y2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqK+thyDyrNlSjuhO5s0GsdC5CbtSpYxDLQVO 6bWWocuwlG0jDcdZ+CU4RjHnptWsTZipbBpsdxDWqTgsfVJVKTtqQ3tPf4YjUWkq RgtLOL2qEk/MIz3UgbdjlWXMkma0mAtqyuHv+PlGWhC3FAAPgZkJmGPzWcD4LxIQ d6+vyTOhDEMOTrl5VRQlQlOo83sKkCbr/utAEZW6urxq5yurn4zDASmbBwv4fN2K Zxs9qsHvh0hoMN+0arKf6PyLP33gkQYKRG0LkaWzEzWquLfCTOK+pGSaZ2pgNZsB vyqx3/96+vZrw3jmfvePxH5j6/iGzxHVh4cc9S05znpdnqXzpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACFN13JYC1ICnfx7kZoWmvFfUNtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWJlM2JhYzktM2Y1Zi0z Zjg2LTg4MmYtYzJlODY0YmI4YzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRiwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdAC2ZHtmJL2T90NvjgrScmLOCAtU4EA+oTaAYJnmDnhsacaziwiN9n zM1UDc6YhbXEskb5I44PxagVChMz+ggFR0ayqDnK2HRVVEQYbVLU9lHorhwk95PH BDhuyuQwbaob+KnPhK50gPCWMBkOAhHv/H8dwaRGh1Vo78xhWgakBDjZkn1LPThr S3wYVu74d3n6SH3BdnRojPs9/2+9SJwhXX9mZNVKCrz6Ftj6NVfxh4W0t4wU6j87 revlYAjfVaS2lfHIEwMk5gxuxvvmTyW4jPoWiL/cbNHcVbsmAJ7jgUAb+hrecDnu TWqIM5PaKSpPnZVN0XrEbZheDS82lIk= -----END CERTIFICATE-----Generated at Sun Apr 6 05:52:38 2025 by rpki-client