$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5a9b260a-6f4d-3884-a5a4-8c1df825f1ee.roa File: 5a9b260a-6f4d-3884-a5a4-8c1df825f1ee.roa (raw, json) Hash identifier: ln+kgevUYlPvChymNAeybM45h54+QiXSN36ByvHX4Pw= Subject key identifier: C1:18:AF:13:9B:8A:0F:0E:9D:83:DD:EE:A6:C6:E9:15:F1:B1:27:0B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C57E1C6A72290DBA0E72D3C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5a9b260a-6f4d-3884-a5a4-8c1df825f1ee.roa Signing time: Tue 04 Feb 2025 13:55:14 +0000 ROA not before: Tue 04 Feb 2025 13:55:14 +0000 ROA not after: Mon 05 May 2025 12:55:14 +0000 asID: 30036 IP address blocks: 173.25.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:7e:1c:6a:72:29:0d:ba:0e:72:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:55:14 2025 GMT Not After : May 5 12:55:14 2025 GMT Subject: CN=23229557-3025-4066-9700-deb1c52283ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0c:b2:ac:e0:21:68:79:39:2d:d6:91:49:66: 8b:ec:53:84:d4:5d:47:1f:b1:46:2d:60:95:dd:9b: 89:82:d1:e7:52:12:9a:a5:3e:86:b1:7d:ba:00:a6: ad:79:ae:2b:a2:84:df:7b:2d:86:72:cb:7f:d2:2d: 02:66:4d:db:ee:b6:7d:dc:c6:74:9d:3c:e1:a6:55: 8f:51:82:da:df:09:b1:96:84:bd:f6:eb:64:5f:24: 18:ce:6d:ca:f9:a2:2f:c5:57:c7:fe:1e:09:46:28: 08:21:14:2e:d2:74:3a:97:1c:2a:5c:1a:74:d1:f3: 6f:7b:e0:c1:26:bc:34:bc:6a:0e:18:52:e9:e0:75: 78:8f:9d:70:8c:4f:ae:5d:9f:ba:e5:45:e0:c1:f1: d8:d2:71:79:67:47:56:d0:36:ac:61:4a:e8:e7:92: 77:4b:0e:8e:0a:36:00:7b:81:7e:c5:02:0a:14:49: 41:0f:4b:31:ff:21:4e:28:60:12:7e:8b:f3:3c:34: 85:db:f8:6d:a5:bd:c2:69:6c:be:58:2e:04:3e:e7: 75:90:40:37:86:f2:eb:29:40:46:7a:b9:72:eb:ea: 60:0f:4c:99:c7:c2:cf:a0:10:e7:c4:17:da:9d:9d: db:b7:16:ac:b3:e2:5f:74:4a:fe:c4:ed:a6:d8:e7: 3c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:18:AF:13:9B:8A:0F:0E:9D:83:DD:EE:A6:C6:E9:15:F1:B1:27:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5a9b260a-6f4d-3884-a5a4-8c1df825f1ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:04:64:ea:69:cd:ad:5b:70:ee:ce:54:21:58:66:bc:2f:3f: 66:19:0b:84:52:3e:57:eb:1e:8c:48:95:2f:04:fe:37:8b:07: e7:33:5a:37:96:a6:05:15:b5:05:bd:3f:09:fc:e3:53:73:bf: 52:4e:d9:98:22:d1:d9:d6:00:55:c2:ea:98:77:d6:c1:48:9c: 50:3b:55:e2:ff:e1:22:7a:a8:00:5f:e1:c6:df:bc:66:93:cb: ae:b0:ac:2e:39:af:31:1e:86:46:bf:d4:39:dd:23:82:21:54: ae:b5:f9:5a:23:3d:9e:a2:05:5d:28:7b:ea:ca:09:e1:7d:8e: 21:4b:46:37:72:73:42:90:a9:75:82:ef:cd:90:14:88:fe:af: ba:3d:dc:c4:da:58:57:a6:a9:8a:08:13:09:15:b5:58:3b:b1: 3c:7f:2e:8f:09:e4:dc:71:29:6d:d4:8f:87:5f:5c:4c:6d:89: df:4c:5c:8a:73:c7:de:ba:e3:e2:d8:55:f9:56:a7:17:dc:7e: 41:83:2d:02:03:43:66:e4:f0:91:54:b5:71:b5:79:6f:8c:50: ce:23:f3:ee:d7:e6:ef:25:33:c2:0b:e0:13:29:81:64:56:47: be:3c:d4:1c:4c:21:ee:0b:cc:73:31:42:f9:ca:ce:42:c8:92: e1:01:2b:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFfhxqcikNug5y08AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzNTUxNFoXDTI1MDUwNTEyNTUxNFowLzEtMCsGA1UEAxMk MjMyMjk1NTctMzAyNS00MDY2LTk3MDAtZGViMWM1MjI4M2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwyyrOAhaHk5LdaRSWaL7FOE1F1HH7FGLWCV 3ZuJgtHnUhKapT6GsX26AKatea4rooTfey2Gcst/0i0CZk3b7rZ93MZ0nTzhplWP UYLa3wmxloS99utkXyQYzm3K+aIvxVfH/h4JRigIIRQu0nQ6lxwqXBp00fNve+DB Jrw0vGoOGFLp4HV4j51wjE+uXZ+65UXgwfHY0nF5Z0dW0DasYUro55J3Sw6OCjYA e4F+xQIKFElBD0sx/yFOKGASfovzPDSF2/htpb3CaWy+WC4EPud1kEA3hvLrKUBG erly6+pgD0yZx8LPoBDnxBfanZ3btxass+JfdEr+xO2m2Oc8PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEYrxObig8OnYPd7qbG6RXxsScLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWE5YjI2MGEtNmY0ZC0z ODg0LWE1YTQtOGMxZGY4MjVmMWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRloMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUEZOppza1bcO7OVCFYZrwvP2YZC4RSPlfrHoxIlS8E/jeLB+czWjeW pgUVtQW9Pwn841Nzv1JO2Zgi0dnWAFXC6ph31sFInFA7VeL/4SJ6qABf4cbfvGaT y66wrC45rzEehka/1DndI4IhVK61+VojPZ6iBV0oe+rKCeF9jiFLRjdyc0KQqXWC 782QFIj+r7o93MTaWFemqYoIEwkVtVg7sTx/Lo8J5NxxKW3Uj4dfXExtid9MXIpz x9664+LYVflWpxfcfkGDLQIDQ2bk8JFUtXG1eW+MUM4j8+7X5u8lM8IL4BMpgWRW R7481BxMIe4LzHMxQvnKzkLIkuEBK+M= -----END CERTIFICATE-----Generated at Sun Apr 6 05:56:51 2025 by rpki-client