$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e4ff982-52b1-3a30-a2d8-5d1a4d1d017a.roa File: 3e4ff982-52b1-3a30-a2d8-5d1a4d1d017a.roa (raw, json) Hash identifier: mdrlz+POQMVxEASKdDLxfMQJ78xigw45GSt6twdN1io= Subject key identifier: 3B:6D:C4:43:0C:81:C5:AE:B1:85:DC:0C:88:A6:89:92:68:C3:27:00 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C261E769CEA829904770D580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e4ff982-52b1-3a30-a2d8-5d1a4d1d017a.roa Signing time: Mon 03 Feb 2025 11:10:58 +0000 ROA not before: Mon 03 Feb 2025 11:10:58 +0000 ROA not after: Sun 04 May 2025 10:10:58 +0000 asID: 30036 IP address blocks: 173.24.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:61:e7:69:ce:a8:29:90:47:70:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 3 11:10:58 2025 GMT Not After : May 4 10:10:58 2025 GMT Subject: CN=cf71c3b1-8b49-4259-985e-9ea21541d6cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c7:37:9a:89:12:e6:13:23:7b:2f:76:2c:b5: 72:0b:42:ed:02:8e:89:87:4c:29:4e:1d:19:4c:e3: f5:1c:f9:e0:72:4c:c2:84:31:cf:57:cf:79:2c:3c: 0a:7f:61:c5:20:53:9a:e3:f4:65:d3:2d:4c:2f:23: fe:8e:ca:0e:f9:19:0d:74:8d:7f:d3:55:7f:08:bb: 5d:08:45:0e:9c:77:04:ac:16:24:3c:4f:88:e1:d2: 03:25:40:2a:91:dc:05:62:29:91:d1:74:40:06:c2: 60:13:2e:e8:58:93:ed:dd:90:3f:db:46:10:67:ee: fe:5e:e7:57:42:21:ae:2b:29:4f:07:fc:c1:cd:be: 3a:4b:cd:0d:02:20:ea:a1:25:c6:40:c3:39:65:f2: 74:6f:0d:c8:78:3b:31:3e:75:49:fa:cc:2c:e3:91: 21:d8:35:b7:73:75:67:55:1d:87:46:45:2d:22:b9: da:43:9e:e9:83:ce:6f:44:64:9b:d6:e9:01:4c:fc: 1b:b0:2a:63:35:5a:5a:0a:ae:c6:2f:06:c7:1d:cf: 79:ec:e0:2a:25:2e:b4:aa:d9:d8:0c:0d:e5:ae:e9: a3:6b:f5:61:b8:d1:ad:38:95:7c:08:c3:ee:43:3f: d7:fb:4c:00:97:cf:ca:b4:9d:e0:4a:42:5c:72:5f: c1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:6D:C4:43:0C:81:C5:AE:B1:85:DC:0C:88:A6:89:92:68:C3:27:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e4ff982-52b1-3a30-a2d8-5d1a4d1d017a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:bc:f4:a2:05:f2:85:17:6d:4a:6b:d9:d0:4e:55:5a:3c:ef: 6a:2a:fb:6d:f0:84:15:64:05:b2:b0:91:51:13:43:65:f9:2a: 54:4c:1c:61:15:d6:4b:92:1d:69:b6:6b:ce:5a:fb:dc:bc:56: 88:9f:7e:bc:f8:10:6c:ab:fd:a6:d8:77:43:18:54:a4:61:fd: 89:e3:c2:14:4d:6d:15:a9:d7:3c:38:28:df:28:ca:91:fc:05: ea:1a:1a:24:7d:c7:be:f1:55:fe:8c:fa:f8:d4:8a:92:51:43: 87:a7:c4:9d:1f:94:d3:d2:f2:e5:64:30:a6:90:b7:91:01:de: eb:8e:da:f6:1f:d0:0b:05:0c:8a:6f:d4:83:18:66:37:83:14: 8e:99:02:fa:9e:bb:5b:34:41:80:a3:f1:a2:b0:cc:a9:ec:cd: bc:77:f9:bd:de:2d:8b:9c:8f:cf:af:2b:ec:d5:2d:e4:5e:ef: b3:f6:91:09:81:f6:1c:61:c0:13:d1:ac:24:b9:75:a0:4f:ed: ee:d2:b2:a4:60:8d:07:37:94:e2:b7:cd:ef:94:36:b2:d3:0b: b3:73:20:b0:10:84:0c:c2:a4:d4:db:15:b2:12:1d:b2:65:e8: b4:82:3e:35:37:6b:b7:4a:40:54:ee:00:6e:bf:01:74:16:ab: bb:9d:3c:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCYedpzqgpkEdw1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwMzExMTA1OFoXDTI1MDUwNDEwMTA1OFowLzEtMCsGA1UEAxMk Y2Y3MWMzYjEtOGI0OS00MjU5LTk4NWUtOWVhMjE1NDFkNmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcc3mokS5hMjey92LLVyC0LtAo6Jh0wpTh0Z TOP1HPngckzChDHPV895LDwKf2HFIFOa4/Rl0y1MLyP+jsoO+RkNdI1/01V/CLtd CEUOnHcErBYkPE+I4dIDJUAqkdwFYimR0XRABsJgEy7oWJPt3ZA/20YQZ+7+XudX QiGuKylPB/zBzb46S80NAiDqoSXGQMM5ZfJ0bw3IeDsxPnVJ+sws45Eh2DW3c3Vn VR2HRkUtIrnaQ57pg85vRGSb1ukBTPwbsCpjNVpaCq7GLwbHHc957OAqJS60qtnY DA3lrumja/VhuNGtOJV8CMPuQz/X+0wAl8/KtJ3gSkJccl/BawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDttxEMMgcWusYXcDIimiZJowycAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2U0ZmY5ODItNTJiMS0z YTMwLWEyZDgtNWQxYTRkMWQwMTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHK89KIF8oUXbUpr2dBOVVo872oq+23whBVkBbKwkVETQ2X5KlRMHGEV 1kuSHWm2a85a+9y8Voiffrz4EGyr/abYd0MYVKRh/YnjwhRNbRWp1zw4KN8oypH8 BeoaGiR9x77xVf6M+vjUipJRQ4enxJ0flNPS8uVkMKaQt5EB3uuO2vYf0AsFDIpv 1IMYZjeDFI6ZAvqeu1s0QYCj8aKwzKnszbx3+b3eLYucj8+vK+zVLeRe77P2kQmB 9hxhwBPRrCS5daBP7e7SsqRgjQc3lOK3ze+UNrLTC7NzILAQhAzCpNTbFbISHbJl 6LSCPjU3a7dKQFTuAG6/AXQWq7udPNc= -----END CERTIFICATE-----Generated at Sun Apr 6 05:54:35 2025 by rpki-client