$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/298cfca0-870e-3891-9b01-630519ee7671.roa File: 298cfca0-870e-3891-9b01-630519ee7671.roa (raw, json) Hash identifier: NBYXSsze+ri3AxZ0a0PD6tTNe2Ou4AgvpT2ph9N3WNk= Subject key identifier: B7:56:9F:45:53:D4:EB:1B:90:41:FC:4E:94:17:7F:D7:E1:C2:F6:5E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848B73598683B19596801A9BE00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/298cfca0-870e-3891-9b01-630519ee7671.roa Signing time: Thu 30 Jan 2025 11:07:48 +0000 ROA not before: Thu 30 Jan 2025 11:07:48 +0000 ROA not after: Wed 30 Apr 2025 10:07:48 +0000 asID: 30036 IP address blocks: 173.16.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:35:98:68:3b:19:59:68:01:a9:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 30 11:07:48 2025 GMT Not After : Apr 30 10:07:48 2025 GMT Subject: CN=014d0f97-2352-4b26-92d7-b8837b26a274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:59:81:78:17:29:33:20:9d:f8:e0:2e:6a:a9: 97:29:dd:1e:28:a3:d0:d9:73:37:06:e4:cb:9a:ff: 70:df:a6:c8:19:1a:b9:eb:83:de:a4:0c:bf:c1:4b: 4f:e8:1d:de:3a:49:be:af:88:83:14:f4:da:0b:c1: a3:ad:d0:18:be:00:b2:ce:25:fc:5a:17:98:e9:f2: 9b:78:87:4c:dd:f2:df:05:f2:f6:c7:f0:c3:c4:17: e3:53:8f:a6:dd:99:ad:e2:5c:54:df:05:78:95:48: 3d:3b:c3:55:2b:97:24:e6:14:ff:7d:83:79:72:05: b7:3f:e6:e0:79:b6:0e:db:f0:b0:09:38:27:4e:13: 32:4d:bd:58:b9:6a:df:c4:95:9c:6b:99:e1:d5:18: af:8d:0e:b1:fb:c7:33:42:44:6a:24:0b:53:69:6a: 36:28:db:50:a7:e0:e9:5f:92:04:16:01:b2:fd:ef: 50:24:d4:72:68:d7:25:6d:b3:15:bd:95:ec:ae:1d: 08:de:dc:7b:ec:c9:10:09:96:c2:ad:c0:4f:f7:d3: 4f:39:29:ab:f9:7f:ea:6e:0a:83:f4:8a:84:6f:d7: 02:a1:24:06:e0:a1:2a:59:70:8c:35:2c:ab:b4:ee: be:a5:99:d1:97:1e:66:34:f9:9b:db:6c:fe:73:cc: a7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:56:9F:45:53:D4:EB:1B:90:41:FC:4E:94:17:7F:D7:E1:C2:F6:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/298cfca0-870e-3891-9b01-630519ee7671.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:e9:09:d9:10:08:4a:9a:38:ff:8b:4b:9a:55:4d:8c:82:0d: a1:96:40:59:a1:25:85:14:dd:e3:bb:25:a3:16:f3:df:c3:7d: ef:4f:69:d1:93:b1:9d:5d:da:2f:cf:57:ed:78:d2:b2:28:fe: 88:aa:4f:48:1c:b7:52:a7:ef:55:ea:46:2a:d3:28:e1:11:84: 39:b3:e8:8b:59:ac:91:95:18:cb:d7:ff:15:cd:fd:5a:b4:8e: e0:04:29:0f:68:bd:24:52:78:38:3b:cc:d0:08:b6:09:20:82: 27:bc:df:d3:76:52:dd:d2:f5:41:7e:8e:73:b1:d1:69:c0:51: 63:3f:77:95:8b:2c:9a:23:12:d8:0e:b9:84:c1:19:a1:06:37: 58:bb:57:64:7a:ee:a5:ef:23:d4:ca:df:bd:50:5b:7f:8d:a2: 71:e8:d5:63:13:4c:10:4a:f0:43:81:13:a6:8a:4f:0c:90:cb: 47:81:47:f6:28:4e:69:07:5a:2c:d3:00:58:69:4d:28:a7:7c: 79:29:76:99:51:a7:f5:b2:cd:be:2a:7e:85:08:e9:52:bc:26: c9:6c:1b:79:98:01:91:39:34:51:80:7d:16:07:d8:37:1c:88: 2f:69:79:35:8b:81:a4:bb:fb:68:82:39:01:bf:d1:b9:16:eb: 52:be:7c:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3NZhoOxlZaAGpvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDEzMDExMDc0OFoXDTI1MDQzMDEwMDc0OFowLzEtMCsGA1UEAxMk MDE0ZDBmOTctMjM1Mi00YjI2LTkyZDctYjg4MzdiMjZhMjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVmBeBcpMyCd+OAuaqmXKd0eKKPQ2XM3BuTL mv9w36bIGRq564PepAy/wUtP6B3eOkm+r4iDFPTaC8GjrdAYvgCyziX8WheY6fKb eIdM3fLfBfL2x/DDxBfjU4+m3Zmt4lxU3wV4lUg9O8NVK5ck5hT/fYN5cgW3P+bg ebYO2/CwCTgnThMyTb1YuWrfxJWca5nh1RivjQ6x+8czQkRqJAtTaWo2KNtQp+Dp X5IEFgGy/e9QJNRyaNclbbMVvZXsrh0I3tx77MkQCZbCrcBP99NPOSmr+X/qbgqD 9IqEb9cCoSQG4KEqWXCMNSyrtO6+pZnRlx5mNPmb22z+c8yn0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdWn0VT1OsbkEH8TpQXf9fhwvZeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjk4Y2ZjYTAtODcwZS0z ODkxLTliMDEtNjMwNTE5ZWU3NjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjpCdkQCEqaOP+LS5pVTYyCDaGWQFmhJYUU3eO7JaMW89/Dfe9PadGT sZ1d2i/PV+140rIo/oiqT0gct1Kn71XqRirTKOERhDmz6ItZrJGVGMvX/xXN/Vq0 juAEKQ9ovSRSeDg7zNAItgkggie839N2Ut3S9UF+jnOx0WnAUWM/d5WLLJojEtgO uYTBGaEGN1i7V2R67qXvI9TK371QW3+NonHo1WMTTBBK8EOBE6aKTwyQy0eBR/Yo TmkHWizTAFhpTSinfHkpdplRp/Wyzb4qfoUI6VK8JslsG3mYAZE5NFGAfRYH2Dcc iC9peTWLgaS7+2iCOQG/0bkW61K+fE8= -----END CERTIFICATE-----Generated at Sun Apr 6 06:02:38 2025 by rpki-client