$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f92c434-efd9-3a70-96d3-95f8d0c53235.roa File: 3f92c434-efd9-3a70-96d3-95f8d0c53235.roa (raw, json) Hash identifier: tiujeI1JrhfCeoLVD/7fbqowieEZTSqSGoNy5mC/Gxo= Subject key identifier: F2:E1:4B:B1:BE:13:A8:6A:48:77:24:8D:CD:0B:3D:36:53:AF:4D:44 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C262ECEDA694DA272B272500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f92c434-efd9-3a70-96d3-95f8d0c53235.roa Signing time: Mon 03 Feb 2025 11:13:02 +0000 ROA not before: Mon 03 Feb 2025 11:13:02 +0000 ROA not after: Sun 04 May 2025 10:13:02 +0000 asID: 30036 IP address blocks: 173.17.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:62:ec:ed:a6:94:da:27:2b:27:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 3 11:13:02 2025 GMT Not After : May 4 10:13:02 2025 GMT Subject: CN=1269c09c-e7f2-4fcd-97f8-c34467a7e7ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d0:4e:2b:e3:7a:a5:c8:2e:00:cb:f7:4c:1d: 02:0f:61:01:32:5d:c7:01:67:c9:0c:6a:15:76:a1: 8a:e0:0a:80:24:93:6c:23:96:2b:b3:74:74:b2:9b: 72:d1:e4:cc:1f:6a:a5:d3:78:6e:0b:be:42:f8:be: d6:55:3c:f5:a8:bc:52:42:5f:79:7b:85:87:c0:4a: 28:9e:82:62:6b:c7:e1:db:ba:50:10:94:7a:57:a8: b3:70:db:62:ee:70:08:6b:84:99:d1:fd:58:fd:b6: a7:52:8e:7b:8c:7d:e3:64:0d:53:c2:ed:44:ed:b6: e7:cf:f4:94:b9:d1:c3:ac:da:61:92:02:12:84:b5: 8c:d5:f2:95:93:9e:88:2a:6b:41:11:14:1d:f5:a3: 9d:79:1d:22:95:3c:df:c6:e3:46:10:3b:16:ab:75: 52:50:d5:35:c3:90:37:d6:ef:42:dd:38:b7:cc:8d: 33:3f:2b:ee:c6:5b:b4:8f:39:31:0b:ea:af:32:e8: 89:2e:55:62:14:df:ad:65:58:dd:54:c0:91:1c:07: ec:a0:a8:58:90:21:99:21:f5:fa:0a:ad:4a:f7:1b: 50:da:17:35:c2:f2:a3:eb:c1:ba:6e:27:2b:e0:df: a1:4e:d7:73:66:70:9c:87:a8:83:50:59:c6:cd:45: 29:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E1:4B:B1:BE:13:A8:6A:48:77:24:8D:CD:0B:3D:36:53:AF:4D:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f92c434-efd9-3a70-96d3-95f8d0c53235.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:1e:27:05:51:7e:7c:f7:ff:86:66:bf:07:d7:7f:4f:0c:4a: 20:25:9e:62:4b:c1:2d:80:53:b7:87:57:11:4b:02:b2:4c:2e: 9d:ff:87:ae:7a:0a:04:83:a6:a2:6b:5d:56:20:4b:d6:74:68: 1c:44:83:72:7f:d7:fe:a3:70:a1:59:09:ab:16:6e:b7:d8:c5: 81:33:00:83:3f:ab:59:d2:b8:d4:4e:76:b6:8f:39:35:49:6b: e0:4c:db:53:86:e4:d1:ec:98:02:29:5f:68:17:ac:86:2e:17: 56:80:fb:31:83:b3:7f:b1:07:79:4d:c4:bd:09:81:e8:27:78: 8b:b6:b6:7e:2b:76:2d:0a:ae:7b:c8:41:f3:79:91:4d:f7:86: 81:00:20:9b:23:72:12:ff:51:49:ba:23:ec:fa:07:be:6e:24: 16:7f:de:e5:5d:59:59:96:99:cd:19:0b:9d:d6:3a:d5:9b:df: f4:73:62:98:1f:41:1d:0e:07:4c:dd:31:e7:da:d2:4a:a4:31: 5c:f6:dd:88:3a:61:66:c5:7b:ad:1a:97:20:5d:26:c6:0c:14: 4e:d8:14:19:f1:72:43:23:15:49:df:f0:8c:f8:5d:5f:3f:ba: 16:cb:b7:48:75:3d:01:f7:d6:81:84:97:b3:c6:17:f5:e7:4d: 5d:da:61:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCYuztppTaJysnJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwMzExMTMwMloXDTI1MDUwNDEwMTMwMlowLzEtMCsGA1UEAxMk MTI2OWMwOWMtZTdmMi00ZmNkLTk3ZjgtYzM0NDY3YTdlN2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dBOK+N6pcguAMv3TB0CD2EBMl3HAWfJDGoV dqGK4AqAJJNsI5Yrs3R0spty0eTMH2ql03huC75C+L7WVTz1qLxSQl95e4WHwEoo noJia8fh27pQEJR6V6izcNti7nAIa4SZ0f1Y/banUo57jH3jZA1Twu1E7bbnz/SU udHDrNphkgIShLWM1fKVk56IKmtBERQd9aOdeR0ilTzfxuNGEDsWq3VSUNU1w5A3 1u9C3Ti3zI0zPyvuxlu0jzkxC+qvMuiJLlViFN+tZVjdVMCRHAfsoKhYkCGZIfX6 Cq1K9xtQ2hc1wvKj68G6bicr4N+hTtdzZnCch6iDUFnGzUUpMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLhS7G+E6hqSHckjc0LPTZTr01EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2Y5MmM0MzQtZWZkOS0z YTcwLTk2ZDMtOTVmOGQwYzUzMjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRFsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUeJwVRfnz3/4ZmvwfXf08MSiAlnmJLwS2AU7eHVxFLArJMLp3/h656 CgSDpqJrXVYgS9Z0aBxEg3J/1/6jcKFZCasWbrfYxYEzAIM/q1nSuNROdraPOTVJ a+BM21OG5NHsmAIpX2gXrIYuF1aA+zGDs3+xB3lNxL0JgegneIu2tn4rdi0KrnvI QfN5kU33hoEAIJsjchL/UUm6I+z6B75uJBZ/3uVdWVmWmc0ZC53WOtWb3/RzYpgf QR0OB0zdMefa0kqkMVz23Yg6YWbFe60alyBdJsYMFE7YFBnxckMjFUnf8Iz4XV8/ uhbLt0h1PQH31oGEl7PGF/XnTV3aYa8= -----END CERTIFICATE-----Generated at Sun Apr 6 05:58:34 2025 by rpki-client