$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1bec8b7b-d9f0-387a-9dce-75b338fa752a.roa File: 1bec8b7b-d9f0-387a-9dce-75b338fa752a.roa (raw, json) Hash identifier: U7Ls+PCaxcwCnabeYhn8urx0bcoGpeoYAeGc80JNLwA= Subject key identifier: 55:63:EF:93:E9:4D:46:67:28:84:3A:C9:35:53:5C:1D:35:32:E8:F0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C57F69F5E5F34D64FACF2B00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1bec8b7b-d9f0-387a-9dce-75b338fa752a.roa Signing time: Tue 04 Feb 2025 13:57:51 +0000 ROA not before: Tue 04 Feb 2025 13:57:51 +0000 ROA not after: Mon 05 May 2025 12:57:51 +0000 asID: 30036 IP address blocks: 173.25.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:7f:69:f5:e5:f3:4d:64:fa:cf:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:57:51 2025 GMT Not After : May 5 12:57:51 2025 GMT Subject: CN=4a225f4d-90bd-45e2-82cd-0bfd30b12276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ec:e1:17:ee:38:60:a7:c7:1e:af:f8:70:29: ee:87:82:ff:a7:bf:f6:c1:78:1c:80:5b:64:7e:2a: 0c:a1:b1:08:e2:0b:ba:2a:4e:8e:4e:21:13:a2:a3: 7b:77:13:ec:88:65:18:10:bb:87:7a:fc:b9:1a:de: 58:40:3f:5a:98:aa:e1:56:43:ea:97:40:92:5b:60: 6a:79:5f:ab:5b:7e:cd:de:17:cb:5c:3c:41:84:39: 7a:0a:45:0f:6a:1a:59:f2:fb:21:f8:c3:15:a3:3b: 1b:4f:17:df:38:87:5d:1c:bd:8e:92:b3:d0:ed:cd: 5c:97:fa:42:1f:76:ea:fc:40:07:bc:45:8a:c9:ba: 1a:5c:cf:63:25:b0:11:7a:d4:a9:2a:3c:be:95:45: 59:5b:82:43:4e:82:90:62:4d:39:af:bb:07:3a:e3: dc:bc:17:4d:ef:c5:24:f8:82:1d:4c:c7:8d:2f:24: f1:86:12:83:5b:62:21:9f:32:ab:81:11:61:3e:34: af:e4:c8:c2:ce:f8:7d:4d:90:89:18:bd:7b:21:af: 81:8c:9b:30:07:d2:dc:59:3b:d9:2e:b1:f5:38:9d: de:e8:25:cb:ac:ce:3a:13:ac:d9:c6:84:53:88:bf: fb:36:30:4e:ac:88:f5:67:55:c4:86:3d:b9:57:ae: 08:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:63:EF:93:E9:4D:46:67:28:84:3A:C9:35:53:5C:1D:35:32:E8:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1bec8b7b-d9f0-387a-9dce-75b338fa752a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:0c:28:10:c2:dc:46:05:26:c4:b0:5c:93:57:bb:f3:e1:5f: b2:11:26:32:7b:42:e8:1c:c5:c9:16:17:cc:e4:20:0e:50:89: cf:80:eb:ef:fa:4c:d1:e1:53:9e:03:2d:ee:57:ec:a3:c9:13: 20:d7:0c:18:4a:57:f7:c4:9f:d4:f9:dd:14:68:0c:17:5e:dc: ce:48:4a:a4:a3:7b:0a:e3:44:44:ee:19:c6:d6:cf:e6:15:fa: fc:75:1d:81:62:e0:a1:f4:d1:fd:12:53:43:8f:b1:5d:47:07: d3:25:bf:b0:ab:a9:75:09:9d:40:f5:aa:07:8f:13:4b:d6:96: 51:c0:33:d5:51:b2:da:b8:9e:f2:91:c8:16:3c:b7:98:2c:f0: 18:00:5a:58:62:33:80:f3:72:27:b1:25:6f:c9:96:ed:32:fe: 22:cb:9d:36:72:31:b6:1f:0f:c0:16:ba:1d:46:bc:75:14:83: 62:f9:06:f3:f5:4e:2f:2f:10:15:0f:b9:78:f3:24:81:e9:03: 40:89:eb:14:f1:c2:77:45:6a:d5:8f:17:54:55:08:31:15:a0: 00:37:a6:74:93:6b:bc:6c:47:4b:8e:57:60:42:81:2a:97:b4: 9a:26:2a:c4:85:1f:f8:cf:b9:52:e6:4c:c5:e0:71:e2:a7:ae: 6a:ab:a0:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFf2n15fNNZPrPKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzNTc1MVoXDTI1MDUwNTEyNTc1MVowLzEtMCsGA1UEAxMk NGEyMjVmNGQtOTBiZC00NWUyLTgyY2QtMGJmZDMwYjEyMjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtezhF+44YKfHHq/4cCnuh4L/p7/2wXgcgFtk fioMobEI4gu6Kk6OTiEToqN7dxPsiGUYELuHevy5Gt5YQD9amKrhVkPql0CSW2Bq eV+rW37N3hfLXDxBhDl6CkUPahpZ8vsh+MMVozsbTxffOIddHL2OkrPQ7c1cl/pC H3bq/EAHvEWKyboaXM9jJbARetSpKjy+lUVZW4JDToKQYk05r7sHOuPcvBdN78Uk +IIdTMeNLyTxhhKDW2IhnzKrgRFhPjSv5MjCzvh9TZCJGL17Ia+BjJswB9LcWTvZ LrH1OJ3e6CXLrM46E6zZxoRTiL/7NjBOrIj1Z1XEhj25V64I6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVj75PpTUZnKIQ6yTVTXB01MujwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWJlYzhiN2ItZDlmMC0z ODdhLTlkY2UtNzViMzM4ZmE3NTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRlkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8MKBDC3EYFJsSwXJNXu/PhX7IRJjJ7QugcxckWF8zkIA5Qic+A6+/6 TNHhU54DLe5X7KPJEyDXDBhKV/fEn9T53RRoDBde3M5ISqSjewrjRETuGcbWz+YV +vx1HYFi4KH00f0SU0OPsV1HB9Mlv7CrqXUJnUD1qgePE0vWllHAM9VRstq4nvKR yBY8t5gs8BgAWlhiM4DzciexJW/Jlu0y/iLLnTZyMbYfD8AWuh1GvHUUg2L5BvP1 Ti8vEBUPuXjzJIHpA0CJ6xTxwndFatWPF1RVCDEVoAA3pnSTa7xsR0uOV2BCgSqX tJomKsSFH/jPuVLmTMXgceKnrmqroKU= -----END CERTIFICATE-----Generated at Sun Apr 6 05:56:51 2025 by rpki-client