$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2469db52-0a8a-365b-bfad-14e6951ffdb9.roa File: 2469db52-0a8a-365b-bfad-14e6951ffdb9.roa (raw, json) Hash identifier: OGt2Rp2mDUShQHCtLigFYevQpoKOv/L7uwhEVDgwwc4= Subject key identifier: A0:22:BF:10:19:3B:C8:3B:05:42:D3:2D:AC:B5:D8:57:49:46:7E:64 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C57EAED720DB1F1C6EE75980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2469db52-0a8a-365b-bfad-14e6951ffdb9.roa Signing time: Tue 04 Feb 2025 13:56:23 +0000 ROA not before: Tue 04 Feb 2025 13:56:23 +0000 ROA not after: Mon 05 May 2025 12:56:23 +0000 asID: 30036 IP address blocks: 173.16.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:7e:ae:d7:20:db:1f:1c:6e:e7:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:56:23 2025 GMT Not After : May 5 12:56:23 2025 GMT Subject: CN=112b4e0f-3abc-42a8-b09c-b24881ccc07a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:60:d1:80:04:47:d7:85:4b:ed:4d:e2:03:d3: 0a:df:63:e1:d5:3c:e3:2a:7e:48:17:4b:3c:f1:96: 5f:39:93:a5:d8:2b:6b:7d:cd:6e:be:7e:39:ca:d4: 80:79:4f:91:93:56:54:88:04:52:ea:4d:fd:85:4d: 42:a8:1f:72:5b:34:1c:a8:12:77:7a:d8:cb:53:8e: b0:fa:0b:1c:2e:2e:14:6c:57:81:96:c7:ae:92:1d: 15:78:b4:03:ea:fa:6f:c4:b4:99:6b:5a:4a:64:fe: 95:0b:43:44:92:24:88:33:5b:b8:79:ab:03:91:e0: 4e:8f:d4:3a:e3:9e:53:b0:48:78:01:eb:26:d9:60: 7c:6e:bc:1e:36:fe:52:33:2d:1e:6d:42:0b:67:6f: 1d:1e:8f:ec:ea:0b:96:43:ce:83:16:92:c7:9b:1d: 40:0b:f8:11:9c:8d:32:0d:42:01:2c:53:26:06:ff: 47:a7:74:78:76:f1:6d:eb:5f:26:9b:09:6a:df:e1: d1:76:14:09:87:a0:a9:27:64:1c:1d:e3:e5:88:fb: 8b:14:e2:a2:17:a7:13:ec:63:f6:43:6b:84:14:66: 6f:21:0a:71:cd:72:a8:42:c2:0f:c2:40:ca:89:58: 89:e7:11:6f:4c:d9:ed:bc:41:c5:32:06:bf:64:45: 9c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:22:BF:10:19:3B:C8:3B:05:42:D3:2D:AC:B5:D8:57:49:46:7E:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2469db52-0a8a-365b-bfad-14e6951ffdb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:4c:e9:3d:ed:e9:58:75:a4:d3:67:4b:97:3e:ba:3b:07:4f: a2:b2:a7:a8:5f:d5:4c:9f:f1:40:e5:fc:de:02:29:f1:2f:93: f3:df:0f:6a:81:22:c6:10:ae:48:f3:a6:4c:14:a7:3b:79:38: cb:a2:c8:21:f6:61:72:14:21:f7:d2:56:93:10:41:61:6f:52: 3f:fa:3c:72:4a:34:e8:d8:ec:4e:3b:7e:48:aa:a5:93:99:16: 68:80:2f:7b:11:1b:73:be:26:90:5e:64:9e:00:04:fe:1c:87: 49:18:b2:09:33:70:5e:bb:86:20:d9:bf:f2:5b:90:b7:d8:c8: 37:cb:10:99:b6:4a:2d:dc:62:c8:5e:4a:7d:be:69:23:dd:a2: 67:7e:e5:90:6c:09:46:a6:50:20:a9:0d:d1:b6:dc:b4:f1:15: 34:d6:d5:69:f4:73:e0:68:3a:de:79:77:4a:a3:a2:83:62:02: 8e:b3:f1:15:dd:eb:a0:5a:10:71:b4:9a:29:e4:18:a0:73:71: a8:09:83:29:f3:b1:ac:07:f5:f5:83:08:f4:24:a4:cf:b6:d6: 76:ae:51:36:93:8f:68:46:19:6f:36:9b:44:f7:74:24:b9:0c: aa:53:72:7d:0a:4f:be:b1:2a:78:25:05:84:b7:98:70:7b:d9: bd:cd:d4:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFfq7XINsfHG7nWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzNTYyM1oXDTI1MDUwNTEyNTYyM1owLzEtMCsGA1UEAxMk MTEyYjRlMGYtM2FiYy00MmE4LWIwOWMtYjI0ODgxY2NjMDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGDRgARH14VL7U3iA9MK32Ph1TzjKn5IF0s8 8ZZfOZOl2Ctrfc1uvn45ytSAeU+Rk1ZUiARS6k39hU1CqB9yWzQcqBJ3etjLU46w +gscLi4UbFeBlseukh0VeLQD6vpvxLSZa1pKZP6VC0NEkiSIM1u4easDkeBOj9Q6 455TsEh4Aesm2WB8brweNv5SMy0ebUILZ28dHo/s6guWQ86DFpLHmx1AC/gRnI0y DUIBLFMmBv9Hp3R4dvFt618mmwlq3+HRdhQJh6CpJ2QcHePliPuLFOKiF6cT7GP2 Q2uEFGZvIQpxzXKoQsIPwkDKiViJ5xFvTNntvEHFMga/ZEWcDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAivxAZO8g7BULTLay12FdJRn5kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjQ2OWRiNTItMGE4YS0z NjViLWJmYWQtMTRlNjk1MWZmZGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1M6T3t6Vh1pNNnS5c+ujsHT6Kyp6hf1Uyf8UDl/N4CKfEvk/PfD2qB IsYQrkjzpkwUpzt5OMuiyCH2YXIUIffSVpMQQWFvUj/6PHJKNOjY7E47fkiqpZOZ FmiAL3sRG3O+JpBeZJ4ABP4ch0kYsgkzcF67hiDZv/JbkLfYyDfLEJm2Si3cYshe Sn2+aSPdomd+5ZBsCUamUCCpDdG23LTxFTTW1Wn0c+BoOt55d0qjooNiAo6z8RXd 66BaEHG0minkGKBzcagJgynzsawH9fWDCPQkpM+21nauUTaTj2hGGW82m0T3dCS5 DKpTcn0KT76xKnglBYS3mHB72b3N1F4= -----END CERTIFICATE-----Generated at Sun Apr 6 05:58:46 2025 by rpki-client