$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e5fac33-83f1-3fd6-84ec-9244c59acbae.roa File: 3e5fac33-83f1-3fd6-84ec-9244c59acbae.roa (raw, json) Hash identifier: 9AMnrUJdtqISMAVsIPUCm3HSUreNhtxAs1UIKYBsfiw= Subject key identifier: 4A:C9:35:16:F8:89:33:56:22:EE:87:41:5A:58:66:65:0B:27:C7:A4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C261E099D6654D4DFD2A3C60 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e5fac33-83f1-3fd6-84ec-9244c59acbae.roa Signing time: Mon 03 Feb 2025 11:10:55 +0000 ROA not before: Mon 03 Feb 2025 11:10:55 +0000 ROA not after: Sun 04 May 2025 10:10:55 +0000 asID: 30036 IP address blocks: 173.24.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:61:e0:99:d6:65:4d:4d:fd:2a:3c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 3 11:10:55 2025 GMT Not After : May 4 10:10:55 2025 GMT Subject: CN=65404d3c-e3ea-4fed-bd69-2a8766805dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2a:e8:9b:10:97:af:b6:11:3c:da:04:17:2b: 62:9d:2b:cc:bb:9e:1e:c6:71:9b:3b:d0:64:25:0e: 2d:b1:7a:43:b3:65:fc:da:32:d9:26:2b:d5:fc:6a: 74:49:77:b0:ed:1e:46:b5:fa:c2:05:90:08:81:6e: 8a:e2:a5:b1:63:5f:c9:cb:6b:71:ff:db:56:3c:1e: aa:74:e9:b9:34:f9:12:96:a3:f3:a4:5e:ea:48:ae: 65:f9:a5:d5:dd:65:48:a3:3a:ec:c6:c9:19:20:84: a5:11:fc:0a:db:da:e3:d3:6c:13:8a:0e:8c:62:b1: 50:9b:77:7a:24:bb:55:0d:52:ca:ff:97:45:e2:3f: 47:6b:26:1e:b1:b4:19:da:f0:e4:45:fe:d4:9d:88: f9:85:03:37:0e:78:5c:ef:ad:92:7a:5e:81:0b:f0: b7:08:64:f3:ef:39:8a:eb:c7:44:dc:19:4e:ab:c8: 96:c5:8f:68:3c:6b:46:f6:7f:a9:8e:44:d0:3c:d6: fb:d4:38:ca:6a:13:63:46:5f:d2:5f:b4:db:62:8c: c7:aa:de:03:2f:ea:ee:65:1e:d2:6e:3e:40:51:43: e4:56:0a:a6:74:49:7a:2d:1a:c5:4e:f9:13:59:b2: 73:59:33:35:fa:e9:70:25:24:9c:6f:11:43:46:f7: c7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C9:35:16:F8:89:33:56:22:EE:87:41:5A:58:66:65:0B:27:C7:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e5fac33-83f1-3fd6-84ec-9244c59acbae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:69:aa:c3:ff:e3:18:f0:67:80:d3:72:4e:48:dc:2b:5f:19: 26:9e:e7:54:7e:12:60:db:a3:0c:15:63:69:89:71:cc:5a:93: 94:d5:4e:a7:74:81:bf:ed:71:bc:9d:17:86:9c:bd:fc:b4:66: 29:2c:60:fc:8d:7f:84:df:8a:15:9a:7d:b2:3a:de:de:b7:5b: f1:4b:62:f1:cc:32:35:52:e0:52:d2:3e:6a:17:e5:3c:33:45: bc:4c:a3:0d:e0:8a:64:de:ce:1e:b9:97:15:a8:92:8a:e1:ee: 60:24:94:6f:4d:9f:45:89:45:0f:db:45:ca:e1:6f:f6:74:d7: 55:cc:cb:9e:59:4a:6a:6b:e7:3c:58:3b:ea:f3:3c:3c:24:ee: cd:3e:d3:ed:dd:72:95:4d:93:ab:fd:37:95:c2:5e:9b:80:d0: 49:00:da:67:62:2a:0d:7c:6d:85:99:48:a8:bd:0f:c1:1d:28: a7:c2:7c:7d:6b:9f:9d:96:6a:e9:cf:30:7c:cc:9f:90:31:7a: 41:f0:a4:65:7b:ab:4f:63:eb:21:94:b9:f6:08:88:52:09:2a: 8f:47:1c:2e:ae:b6:e6:62:05:89:3f:50:6a:2e:63:cb:e6:84: 0f:d4:7b:1b:98:c5:cb:11:ce:8d:46:78:38:55:1a:c0:98:cb: ad:ca:91:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCYeCZ1mVNTf0qPGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwMzExMTA1NVoXDTI1MDUwNDEwMTA1NVowLzEtMCsGA1UEAxMk NjU0MDRkM2MtZTNlYS00ZmVkLWJkNjktMmE4NzY2ODA1ZGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiromxCXr7YRPNoEFytinSvMu54exnGbO9Bk JQ4tsXpDs2X82jLZJivV/Gp0SXew7R5GtfrCBZAIgW6K4qWxY1/Jy2tx/9tWPB6q dOm5NPkSlqPzpF7qSK5l+aXV3WVIozrsxskZIISlEfwK29rj02wTig6MYrFQm3d6 JLtVDVLK/5dF4j9HayYesbQZ2vDkRf7UnYj5hQM3Dnhc762Sel6BC/C3CGTz7zmK 68dE3BlOq8iWxY9oPGtG9n+pjkTQPNb71DjKahNjRl/SX7TbYozHqt4DL+ruZR7S bj5AUUPkVgqmdEl6LRrFTvkTWbJzWTM1+ulwJSScbxFDRvfHOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErJNRb4iTNWIu6HQVpYZmULJ8ekMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2U1ZmFjMzMtODNmMS0z ZmQ2LTg0ZWMtOTI0NGM1OWFjYmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRjMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJpqsP/4xjwZ4DTck5I3CtfGSae51R+EmDbowwVY2mJccxak5TVTqd0 gb/tcbydF4acvfy0ZiksYPyNf4TfihWafbI63t63W/FLYvHMMjVS4FLSPmoX5Twz RbxMow3gimTezh65lxWokorh7mAklG9Nn0WJRQ/bRcrhb/Z011XMy55ZSmpr5zxY O+rzPDwk7s0+0+3dcpVNk6v9N5XCXpuA0EkA2mdiKg18bYWZSKi9D8EdKKfCfH1r n52WaunPMHzMn5AxekHwpGV7q09j6yGUufYIiFIJKo9HHC6utuZiBYk/UGouY8vm hA/UexuYxcsRzo1GeDhVGsCYy63KkTM= -----END CERTIFICATE-----Generated at Sun Apr 6 05:54:34 2025 by rpki-client