$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24927ac0-57fd-3657-99af-1a39e1c9e829.roa File: 24927ac0-57fd-3657-99af-1a39e1c9e829.roa (raw, json) Hash identifier: Eq2cnP9jeulIfZBqWqdefHO4mbwQi1+NtnOdDNuOyDY= Subject key identifier: BF:B6:D8:06:9D:94:2D:E5:F3:71:09:96:5D:5B:90:36:AE:13:72:4B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F432858493FEAE250246C63064778D140 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24927ac0-57fd-3657-99af-1a39e1c9e829.roa Signing time: Thu 20 Mar 2025 10:23:01 +0000 ROA not before: Thu 20 Mar 2025 10:23:01 +0000 ROA not after: Wed 18 Jun 2025 10:23:01 +0000 asID: 30036 IP address blocks: 173.17.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3f:ea:e2:50:24:6c:63:06:47:78:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 20 10:23:01 2025 GMT Not After : Jun 18 10:23:01 2025 GMT Subject: CN=114ebf57-194c-4dbc-9156-4a7544997cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fa:0f:e1:88:12:f3:4e:24:ee:b3:7f:49:be: d3:8f:01:2a:23:59:8a:4e:78:31:4d:8b:3c:9f:70: 7e:9b:80:8c:84:f8:14:e7:43:65:a5:99:b4:09:f4: ac:ee:de:65:ca:e4:cd:f8:e7:7e:4a:ed:01:b1:bc: c3:d1:7d:dc:36:06:72:71:74:f7:13:54:a6:c3:bd: 5f:71:67:df:b0:5e:e0:69:3e:fb:0f:89:cc:ad:ce: 6a:8d:81:7a:52:74:3c:da:13:18:44:ac:5c:14:6a: b3:a5:2c:87:95:94:1a:b8:2f:43:36:e7:50:c2:2a: ba:ef:1d:90:88:33:1c:a5:dc:1c:6c:c3:b3:c2:f1: 48:1a:32:34:0a:c4:df:12:c7:83:c3:d7:b9:7c:4f: 2c:af:b7:b5:e9:3a:2d:63:8b:56:a1:c7:34:5f:7c: a5:e5:3e:cf:ef:8c:d0:27:f0:ce:6f:d7:9c:c3:f0: f3:e3:32:21:26:e2:4c:0f:21:e0:5e:b6:f0:d9:7a: 4d:4e:63:d3:27:d1:23:93:d1:79:fc:73:9e:83:d1: 14:a5:e8:b9:a3:5c:45:11:bc:e5:db:68:86:eb:1f: cf:6e:7b:2b:45:84:8f:e2:86:fd:0c:6e:ea:45:b4: 68:30:fe:3d:4d:51:6a:4e:52:80:07:ad:e8:3b:92: ee:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B6:D8:06:9D:94:2D:E5:F3:71:09:96:5D:5B:90:36:AE:13:72:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24927ac0-57fd-3657-99af-1a39e1c9e829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:16:53:a4:fa:40:86:60:95:14:79:69:4b:29:66:0d:6a:e0: 3c:be:02:b5:77:b0:f3:f3:06:2a:c3:b0:7a:de:a1:c9:68:6a: 8a:f8:c9:46:40:31:ea:b0:b2:91:be:ad:e1:66:31:43:9e:8d: 00:36:64:55:43:c8:88:99:ef:0b:3a:33:ce:2c:fa:68:82:58: a0:5d:b3:a1:1d:98:da:c8:5c:69:99:c4:f8:d6:40:81:c7:38: 1c:3c:4a:63:83:8b:13:13:6d:b9:89:5a:22:21:6f:c3:ef:8f: 39:de:9f:9c:d4:be:26:c6:82:66:ea:ef:fb:d4:0f:c3:16:03: 45:b9:14:d5:e2:d5:d5:2e:c5:93:0e:fb:6d:01:10:fd:73:9c: 0b:e1:8c:4c:43:d1:60:58:2c:6a:b5:ca:7e:83:72:af:98:da: 09:de:d8:09:ac:a2:f9:11:36:83:c6:60:a1:77:87:16:2e:1e: e7:f3:e3:4a:2f:8d:bf:2d:69:aa:01:08:94:b6:d4:84:4a:99: 65:9a:93:30:df:4f:31:3e:03:48:b5:93:bc:f7:96:44:4f:fb: 2f:23:64:41:c3:7b:aa:b6:d4:20:b2:3b:bc:41:82:c1:24:d4: 38:0b:31:21:c7:d2:1f:ea:c3:3d:3b:0d:d3:d3:1e:31:a7:23: 3e:34:98:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk/6uJQJGxjBkd40UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDMyMDEwMjMwMVoXDTI1MDYxODEwMjMwMVowLzEtMCsGA1UEAxMk MTE0ZWJmNTctMTk0Yy00ZGJjLTkxNTYtNGE3NTQ0OTk3Y2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPoP4YgS804k7rN/Sb7TjwEqI1mKTngxTYs8 n3B+m4CMhPgU50NlpZm0CfSs7t5lyuTN+Od+Su0BsbzD0X3cNgZycXT3E1Smw71f cWffsF7gaT77D4nMrc5qjYF6UnQ82hMYRKxcFGqzpSyHlZQauC9DNudQwiq67x2Q iDMcpdwcbMOzwvFIGjI0CsTfEseDw9e5fE8sr7e16TotY4tWocc0X3yl5T7P74zQ J/DOb9ecw/Dz4zIhJuJMDyHgXrbw2XpNTmPTJ9Ejk9F5/HOeg9EUpei5o1xFEbzl 22iG6x/PbnsrRYSP4ob9DG7qRbRoMP49TVFqTlKAB63oO5LuuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+22AadlC3l83EJll1bkDauE3JLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjQ5MjdhYzAtNTdmZC0z NjU3LTk5YWYtMWEzOWUxYzllODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRElMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwWU6T6QIZglRR5aUspZg1q4Dy+ArV3sPPzBirDsHreocloaor4yUZA MeqwspG+reFmMUOejQA2ZFVDyIiZ7ws6M84s+miCWKBds6EdmNrIXGmZxPjWQIHH OBw8SmODixMTbbmJWiIhb8Pvjznen5zUvibGgmbq7/vUD8MWA0W5FNXi1dUuxZMO +20BEP1znAvhjExD0WBYLGq1yn6Dcq+Y2gne2AmsovkRNoPGYKF3hxYuHufz40ov jb8taaoBCJS21IRKmWWakzDfTzE+A0i1k7z3lkRP+y8jZEHDe6q21CCyO7xBgsEk 1DgLMSHH0h/qwz07DdPTHjGnIz40mEI= -----END CERTIFICATE-----Generated at Sun Apr 6 06:01:25 2025 by rpki-client