$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2c089dee-03bd-3da6-941c-b85b2c8db654.roa File: 2c089dee-03bd-3da6-941c-b85b2c8db654.roa (raw, json) Hash identifier: yxg8rsnBYWsJxjE4veb4FX/rfJ9QruBtTlxONdsrFpQ= Subject key identifier: 81:E9:F0:76:C8:1E:C2:81:80:B3:8C:D5:75:FC:FF:F0:57:98:1F:C3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848B736D3F2B6CDF715F3EE9B00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2c089dee-03bd-3da6-941c-b85b2c8db654.roa Signing time: Thu 30 Jan 2025 11:10:17 +0000 ROA not before: Thu 30 Jan 2025 11:10:17 +0000 ROA not after: Wed 30 Apr 2025 10:10:17 +0000 asID: 30036 IP address blocks: 173.19.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:36:d3:f2:b6:cd:f7:15:f3:ee:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 30 11:10:17 2025 GMT Not After : Apr 30 10:10:17 2025 GMT Subject: CN=1024111b-809a-4c93-b817-cffac7064312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f2:81:01:c3:92:fe:0a:b1:2b:51:cc:2d:82: 73:4d:0f:cf:5d:40:7a:44:80:76:69:b8:fc:cd:00: 78:81:d9:99:6c:71:dc:2b:69:1b:78:02:bb:b0:65: a5:fb:99:33:57:44:5a:90:93:6b:3d:a5:5d:0a:3e: cb:9f:34:ad:a9:d4:51:98:4f:fd:0b:5a:99:64:34: 7e:d2:6f:e3:5a:ec:10:8b:58:1f:fd:32:ec:7c:cc: 03:91:69:30:f3:31:9c:05:4f:36:dd:1b:0d:2a:72: 7a:e4:f7:6f:38:d1:ba:e2:eb:64:29:ae:68:5b:90: 18:43:a3:49:7b:ec:ca:03:c7:a1:67:8e:f0:60:81: 3e:d3:9a:32:22:ec:3d:bc:b4:1c:49:d2:1e:d5:ed: 34:41:20:55:a6:59:97:e6:e2:e3:66:8d:37:ad:c7: ae:cd:f9:75:5f:88:c0:8a:ac:9f:e3:f5:6e:23:2f: c0:d4:91:37:d0:0c:cd:15:8f:e9:18:f1:0a:f3:b8: 3f:e7:58:7a:ee:7d:38:50:5d:95:fa:be:71:a9:0e: 5b:e3:6a:37:28:34:71:a4:c3:a6:ef:3a:4a:53:d8: f1:63:ef:62:69:98:85:21:f6:91:fc:74:71:a6:5a: 40:b9:fb:24:18:56:83:44:a3:ae:75:39:25:db:1b: fa:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E9:F0:76:C8:1E:C2:81:80:B3:8C:D5:75:FC:FF:F0:57:98:1F:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2c089dee-03bd-3da6-941c-b85b2c8db654.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:80:25:eb:db:d7:b1:bb:3d:cc:8b:c2:de:08:46:f0:d6:83: 41:db:47:99:11:51:10:90:bc:e3:91:75:b1:37:a4:36:50:84: 42:20:af:22:83:8b:f8:d7:c8:48:72:02:44:f1:21:14:e6:21: 3d:3b:2d:23:eb:cb:b2:9a:5c:6f:57:a7:b4:b2:f7:d0:39:22: 20:27:85:e4:e0:fd:a0:37:e4:c9:fe:f6:1d:c4:8a:03:2d:aa: a1:11:17:53:2f:4e:47:73:be:8e:ed:77:83:b3:6c:7f:64:03: 75:cb:31:c8:b4:cc:5e:1d:73:e8:d7:8d:b5:7c:aa:47:03:f7: 36:ae:f2:30:86:59:61:3d:0e:f6:f7:88:fe:51:b6:26:fb:c5: 65:09:1b:06:70:13:dc:cd:f9:e3:0f:ad:aa:f2:15:e3:24:c0: 98:eb:93:44:68:fa:c7:78:e6:a9:4a:b1:e1:a5:02:1e:7c:51: a3:f1:a6:80:1c:75:f7:c0:06:e7:85:16:49:ee:9a:44:cf:bd: 41:16:c4:53:de:86:0b:4d:36:28:af:a9:94:23:a8:da:79:3b: e6:f7:17:94:ca:7c:e1:a9:ef:11:b8:e6:53:77:fa:f9:5f:45: a3:00:d8:32:a7:4f:be:28:fb:49:55:bf:3f:9f:e2:eb:9f:e3: 67:31:18:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3NtPyts33FfPumwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDEzMDExMTAxN1oXDTI1MDQzMDEwMTAxN1owLzEtMCsGA1UEAxMk MTAyNDExMWItODA5YS00YzkzLWI4MTctY2ZmYWM3MDY0MzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvKBAcOS/gqxK1HMLYJzTQ/PXUB6RIB2abj8 zQB4gdmZbHHcK2kbeAK7sGWl+5kzV0RakJNrPaVdCj7LnzStqdRRmE/9C1qZZDR+ 0m/jWuwQi1gf/TLsfMwDkWkw8zGcBU823RsNKnJ65PdvONG64utkKa5oW5AYQ6NJ e+zKA8ehZ47wYIE+05oyIuw9vLQcSdIe1e00QSBVplmX5uLjZo03rceuzfl1X4jA iqyf4/VuIy/A1JE30AzNFY/pGPEK87g/51h67n04UF2V+r5xqQ5b42o3KDRxpMOm 7zpKU9jxY+9iaZiFIfaR/HRxplpAufskGFaDRKOudTkl2xv6HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHp8HbIHsKBgLOM1XX8//BXmB/DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmMwODlkZWUtMDNiZC0z ZGE2LTk0MWMtYjg1YjJjOGRiNjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRNsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWAJevb17G7PcyLwt4IRvDWg0HbR5kRURCQvOORdbE3pDZQhEIgryKD i/jXyEhyAkTxIRTmIT07LSPry7KaXG9Xp7Sy99A5IiAnheTg/aA35Mn+9h3EigMt qqERF1MvTkdzvo7td4OzbH9kA3XLMci0zF4dc+jXjbV8qkcD9zau8jCGWWE9Dvb3 iP5Rtib7xWUJGwZwE9zN+eMPraryFeMkwJjrk0Ro+sd45qlKseGlAh58UaPxpoAc dffABueFFknumkTPvUEWxFPehgtNNiivqZQjqNp5O+b3F5TKfOGp7xG45lN3+vlf RaMA2DKnT74o+0lVvz+f4uuf42cxGLQ= -----END CERTIFICATE-----Generated at Sun Apr 6 05:54:29 2025 by rpki-client