$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/35e344ea-f425-3e73-b934-018bb5b6d6c6.roa File: 35e344ea-f425-3e73-b934-018bb5b6d6c6.roa (raw, json) Hash identifier: wymGU6jK7T9Yeiics+TjNA1mHKzm9djGVQB2HInO0E0= Subject key identifier: 41:86:33:F9:71:23:2B:49:53:C1:65:35:BC:62:11:52:C9:31:F5:41 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C533B11246E13BDAE36B6F80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/35e344ea-f425-3e73-b934-018bb5b6d6c6.roa Signing time: Tue 04 Feb 2025 11:25:17 +0000 ROA not before: Tue 04 Feb 2025 11:25:17 +0000 ROA not after: Mon 05 May 2025 10:25:17 +0000 asID: 30036 IP address blocks: 173.23.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:33:b1:12:46:e1:3b:da:e3:6b:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 11:25:17 2025 GMT Not After : May 5 10:25:17 2025 GMT Subject: CN=6640675a-0dbf-434c-bda3-9c36c6b08d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c4:cf:2f:fb:ac:43:7b:d3:7b:55:24:9b:1e: f1:dd:b6:a0:1b:ab:46:6f:55:bd:72:f3:ee:dd:4b: 21:9f:ae:71:d3:db:d5:14:ca:03:24:96:6e:04:e5: 8b:8e:83:d7:10:4e:3d:d3:d8:38:9e:3a:84:83:39: 57:95:3b:50:9a:18:ff:d3:c8:6d:62:d4:16:71:ed: 58:7c:c3:14:c6:53:80:12:d1:90:58:af:6f:04:ee: 1a:d4:57:ca:2e:78:92:4b:3d:ed:04:10:08:2f:60: c8:ef:13:b4:91:4f:de:37:a5:25:bc:cf:93:a4:0c: d8:27:19:7a:b7:29:59:fc:bb:8d:70:39:53:84:5e: a1:25:fe:00:c2:27:88:1f:c4:47:77:9e:c3:a0:80: 9c:ec:18:3b:41:f5:18:ae:07:aa:4b:0c:22:8c:34: ec:9e:e3:55:34:4e:11:4d:5f:83:6c:92:e1:7a:21: a9:6b:95:44:fb:50:70:52:73:8b:22:12:08:e9:1b: c9:d0:e9:2a:55:9d:a4:19:ea:44:50:f5:b2:e8:ca: 5a:36:7c:d3:48:7a:72:b7:d5:5a:ff:62:a7:4a:39: ed:16:5d:5e:ea:f3:01:25:a5:b6:5d:2b:b2:22:21: 75:90:77:e8:57:42:d9:a5:03:f3:f8:e8:32:60:19: 46:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:86:33:F9:71:23:2B:49:53:C1:65:35:BC:62:11:52:C9:31:F5:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/35e344ea-f425-3e73-b934-018bb5b6d6c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:1e:99:3b:64:a3:22:85:37:0f:2e:43:1b:3a:d7:6a:72:75: 80:db:8c:f9:b9:69:3d:27:83:a6:a0:c3:94:72:1c:fd:b5:ed: 3c:8d:53:1e:10:7c:1c:a0:11:e7:a3:b3:81:c1:1d:10:97:83: b1:fa:d6:b8:b0:18:1e:cd:80:2d:24:47:48:b5:7d:a9:11:21: 58:91:70:dd:09:98:3c:f5:5e:82:a5:a9:69:81:49:56:fe:e6: f5:63:eb:a5:62:e5:58:b0:62:40:10:92:04:d7:8c:9a:29:40: bb:fb:d5:45:b1:84:c9:e9:24:22:99:ce:97:0a:d6:6f:2b:06: a1:61:2d:8c:c6:40:de:6b:69:72:7e:8c:a8:64:05:10:f1:2c: 4b:5e:f5:5d:54:ac:ce:ad:2f:da:c4:87:94:e4:9d:c5:73:59: a8:6c:ad:5f:0b:f4:42:ab:25:f0:0e:cb:2e:77:5a:b6:8a:b9: 65:3d:74:ee:b5:69:c6:81:75:50:a4:6b:b1:96:2e:07:bb:fe: 0b:41:5b:36:78:2b:49:eb:64:a5:84:1f:17:c6:1d:98:97:23: f7:d5:3e:1f:15:24:6d:88:54:61:1d:97:23:2d:b2:ba:58:5e: 1f:ac:f8:34:0e:b7:f7:4d:fe:a5:1b:c6:f9:5b:3f:77:bb:fa: fc:38:8f:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFM7ESRuE72uNrb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDExMjUxN1oXDTI1MDUwNTEwMjUxN1owLzEtMCsGA1UEAxMk NjY0MDY3NWEtMGRiZi00MzRjLWJkYTMtOWMzNmM2YjA4ZDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocTPL/usQ3vTe1Ukmx7x3bagG6tGb1W9cvPu 3Ushn65x09vVFMoDJJZuBOWLjoPXEE4909g4njqEgzlXlTtQmhj/08htYtQWce1Y fMMUxlOAEtGQWK9vBO4a1FfKLniSSz3tBBAIL2DI7xO0kU/eN6UlvM+TpAzYJxl6 tylZ/LuNcDlThF6hJf4AwieIH8RHd57DoICc7Bg7QfUYrgeqSwwijDTsnuNVNE4R TV+DbJLheiGpa5VE+1BwUnOLIhII6RvJ0OkqVZ2kGepEUPWy6MpaNnzTSHpyt9Va /2KnSjntFl1e6vMBJaW2XSuyIiF1kHfoV0LZpQPz+OgyYBlGCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGGM/lxIytJU8FlNbxiEVLJMfVBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzVlMzQ0ZWEtZjQyNS0z ZTczLWI5MzQtMDE4YmI1YjZkNmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArReOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEemTtkoyKFNw8uQxs612pydYDbjPm5aT0ng6agw5RyHP217TyNUx4Q fBygEeejs4HBHRCXg7H61riwGB7NgC0kR0i1fakRIViRcN0JmDz1XoKlqWmBSVb+ 5vVj66Vi5ViwYkAQkgTXjJopQLv71UWxhMnpJCKZzpcK1m8rBqFhLYzGQN5raXJ+ jKhkBRDxLEte9V1UrM6tL9rEh5TkncVzWahsrV8L9EKrJfAOyy53WraKuWU9dO61 acaBdVCka7GWLge7/gtBWzZ4K0nrZKWEHxfGHZiXI/fVPh8VJG2IVGEdlyMtsrpY Xh+s+DQOt/dN/qUbxvlbP3e7+vw4j48= -----END CERTIFICATE-----Generated at Sun Apr 6 05:57:00 2025 by rpki-client