$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/413226dc-9423-3a6d-815d-de1a36f49c75.roa File: 413226dc-9423-3a6d-815d-de1a36f49c75.roa (raw, json) Hash identifier: VVtp5WeMkf4POXTGKNlnQHUPI0ETdGdUtoXSvY5yNnA= Subject key identifier: 39:49:5D:F8:73:7C:D1:F6:57:85:5D:39:B8:B9:AE:68:16:6C:A4:F7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C5585B627002D25BFF3DD840 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/413226dc-9423-3a6d-815d-de1a36f49c75.roa Signing time: Tue 04 Feb 2025 12:39:10 +0000 ROA not before: Tue 04 Feb 2025 12:39:10 +0000 ROA not after: Mon 05 May 2025 11:39:10 +0000 asID: 30036 IP address blocks: 173.16.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:58:5b:62:70:02:d2:5b:ff:3d:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 12:39:10 2025 GMT Not After : May 5 11:39:10 2025 GMT Subject: CN=bfda2618-d6c6-4d12-af8e-278b63ef60f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9d:fd:44:50:aa:d6:31:11:71:9e:d1:30:40: 33:d5:9b:20:3f:0a:a0:d4:9c:25:c9:95:fa:d8:62: 77:3c:96:19:aa:02:a7:61:11:7d:9c:c6:de:7b:04: 2d:77:8c:ac:1b:d3:50:55:fe:9c:c2:ea:4c:99:ec: 88:42:0a:f4:ab:f6:46:42:e5:d1:ae:ff:6d:fe:2e: 41:93:af:4f:7b:b1:67:50:65:94:a8:aa:44:9c:56: e7:ad:0a:05:5c:d1:40:ed:e6:9e:aa:9f:84:43:37: 13:dc:62:2a:94:99:93:37:f9:37:b9:aa:4c:3f:42: aa:8f:8b:14:e1:e7:59:1b:52:25:e6:b2:60:87:9b: 90:d9:31:74:2c:ac:38:57:f4:0a:e5:cd:80:01:9f: 35:b8:39:a9:c9:34:ae:eb:51:62:6c:71:85:a8:e6: 58:3e:53:6f:f6:63:e9:24:2d:b3:5d:68:be:91:2c: 44:b4:d9:b8:13:4e:bb:a4:a7:9e:a4:66:c8:4c:d3: ce:3f:81:ec:be:24:79:31:8e:9c:96:73:a8:25:88: e1:ab:23:e9:a1:df:fd:93:85:f6:f2:c0:63:e9:1a: 54:3b:d7:c5:ce:f5:85:f2:48:e1:2b:20:6a:ad:0f: 5d:25:d1:a7:f4:29:69:d4:33:dc:4d:05:8c:26:07: 0f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:49:5D:F8:73:7C:D1:F6:57:85:5D:39:B8:B9:AE:68:16:6C:A4:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/413226dc-9423-3a6d-815d-de1a36f49c75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:c1:a9:92:5e:9d:95:94:c7:e1:ec:8d:fb:58:a2:7d:b8:23: a8:31:e4:6e:b3:f5:d3:13:d3:e4:8b:0d:5d:01:fa:da:fb:64: 74:ba:9e:46:58:57:51:3c:a7:e2:8c:33:28:28:b2:8c:f1:50: 59:6a:4f:1a:f6:ba:f8:4f:d1:19:85:29:01:88:71:de:ba:78: 15:4a:23:7a:f2:ae:de:51:29:aa:83:d6:22:82:c6:e4:9f:71: 0b:5b:88:72:43:d1:4a:2e:df:35:f6:9b:c1:61:d0:ca:3c:d9: ff:c1:ea:b9:b3:7c:17:05:38:86:56:5d:c6:d5:44:0f:6c:23: e2:19:49:19:af:fb:b1:bc:b6:7b:f7:3f:da:ca:7c:d5:99:6d: 73:3c:54:94:77:e0:27:ee:dc:02:0e:00:a4:7a:31:f2:7a:57: 6d:c9:4e:1f:07:3f:48:ed:f4:0c:66:1b:1a:a4:45:cd:43:0e: f3:7c:00:fe:45:fa:b5:6e:6c:31:8c:2c:a4:88:1d:a2:21:ee: 96:83:3f:73:c4:c2:c7:1e:a2:50:db:5f:47:10:51:b7:a8:18: 11:5d:fa:f5:7f:30:a9:89:61:6c:09:b9:a6:89:55:4b:58:18: 8f:9c:08:c3:da:3f:43:36:36:90:f5:32:32:a9:03:fa:d0:87: 76:9c:c0:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFWFticALSW/892EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEyMzkxMFoXDTI1MDUwNTExMzkxMFowLzEtMCsGA1UEAxMk YmZkYTI2MTgtZDZjNi00ZDEyLWFmOGUtMjc4YjYzZWY2MGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ39RFCq1jERcZ7RMEAz1ZsgPwqg1JwlyZX6 2GJ3PJYZqgKnYRF9nMbeewQtd4ysG9NQVf6cwupMmeyIQgr0q/ZGQuXRrv9t/i5B k69Pe7FnUGWUqKpEnFbnrQoFXNFA7eaeqp+EQzcT3GIqlJmTN/k3uapMP0Kqj4sU 4edZG1Il5rJgh5uQ2TF0LKw4V/QK5c2AAZ81uDmpyTSu61FibHGFqOZYPlNv9mPp JC2zXWi+kSxEtNm4E067pKeepGbITNPOP4HsviR5MY6clnOoJYjhqyPpod/9k4X2 8sBj6RpUO9fFzvWF8kjhKyBqrQ9dJdGn9Clp1DPcTQWMJgcP2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlJXfhzfNH2V4VdObi5rmgWbKT3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDEzMjI2ZGMtOTQyMy0z YTZkLTgxNWQtZGUxYTM2ZjQ5Yzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRDOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7BqZJenZWUx+HsjftYon24I6gx5G6z9dMT0+SLDV0B+tr7ZHS6nkZY V1E8p+KMMygosozxUFlqTxr2uvhP0RmFKQGIcd66eBVKI3ryrt5RKaqD1iKCxuSf cQtbiHJD0Uou3zX2m8Fh0Mo82f/B6rmzfBcFOIZWXcbVRA9sI+IZSRmv+7G8tnv3 P9rKfNWZbXM8VJR34Cfu3AIOAKR6MfJ6V23JTh8HP0jt9AxmGxqkRc1DDvN8AP5F +rVubDGMLKSIHaIh7paDP3PEwsceolDbX0cQUbeoGBFd+vV/MKmJYWwJuaaJVUtY GI+cCMPaP0M2NpD1MjKpA/rQh3acwNo= -----END CERTIFICATE-----Generated at Wed Apr 9 09:22:02 2025 by rpki-client