$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/668c8c31-484a-32b7-8fa9-88be949cef58.roa File: 668c8c31-484a-32b7-8fa9-88be949cef58.roa (raw, json) Hash identifier: JKEaBZsyUSh2CvjyfoMB6q/y8IUduUatnDjnjd8ocFo= Subject key identifier: BD:3E:0B:BC:37:8F:9B:35:67:5D:36:EC:13:9E:1C:62:48:E3:45:23 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848B7372CB3C403C3663D479E18 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/668c8c31-484a-32b7-8fa9-88be949cef58.roa Signing time: Thu 30 Jan 2025 11:10:59 +0000 ROA not before: Thu 30 Jan 2025 11:10:59 +0000 ROA not after: Wed 30 Apr 2025 10:10:59 +0000 asID: 30036 IP address blocks: 173.30.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:37:2c:b3:c4:03:c3:66:3d:47:9e:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 30 11:10:59 2025 GMT Not After : Apr 30 10:10:59 2025 GMT Subject: CN=d68db26e-d0dc-41f0-80d0-be56f50eea24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3e:17:2f:ba:a0:fe:71:42:4f:63:39:fb:20: 18:18:a0:e5:a1:5d:1f:1a:25:e2:be:96:9c:2c:fe: 36:d6:85:83:bb:98:2d:60:a7:a1:50:8a:14:6e:33: ad:cb:82:df:11:50:b8:fb:40:01:d5:a1:7f:f4:52: ad:c4:32:ca:bd:b1:ab:ba:4b:ad:4c:fe:18:97:cf: a4:ad:55:2b:d2:47:7a:36:94:c8:f5:ac:cf:78:02: cb:76:06:5e:33:e1:44:50:ce:47:19:f7:2e:c4:07: bc:3f:fd:6d:5f:42:7b:8c:43:34:5f:e7:be:6c:72: 89:dd:a4:84:4c:f4:e8:40:95:c8:13:f5:b0:25:eb: 92:3f:ae:31:1d:8d:31:7b:98:14:34:18:b2:ee:93: 1a:74:5f:aa:8a:95:25:88:f3:82:ba:11:3d:f3:36: 71:77:13:4b:5b:b5:9c:4c:08:e8:3f:f6:cc:a5:cf: b7:91:3d:88:34:5d:0c:83:cc:ac:af:e3:1a:d8:6a: 0b:3d:d7:7b:13:5c:05:e1:bd:00:73:81:aa:e3:45: cc:68:d7:80:b6:94:52:fa:8a:3f:3c:89:2c:23:0d: 12:2b:19:cc:0a:f8:7c:df:a6:bd:7c:1e:b1:e4:e7: 8e:d2:c8:29:7d:36:51:c4:c9:9e:cf:9c:61:dc:cd: 3b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3E:0B:BC:37:8F:9B:35:67:5D:36:EC:13:9E:1C:62:48:E3:45:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/668c8c31-484a-32b7-8fa9-88be949cef58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.30.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:b7:41:3b:6e:76:1d:5a:a8:0d:8c:4e:74:57:d0:e0:2b:48: 2e:69:bf:79:62:8d:ad:d7:7a:a7:3a:86:9a:ed:b2:cd:da:5b: 00:27:79:61:70:f6:7b:17:8b:5b:fb:bd:61:6e:bc:e5:c9:a4: 0a:c1:49:87:63:b5:59:f3:6c:dd:4a:9d:74:6e:7a:d4:42:24: db:91:05:15:af:81:58:5e:5e:be:59:e2:ae:7f:36:3c:58:68: 18:91:84:e0:6b:2d:e8:77:2a:a9:7c:c4:18:9a:26:f4:5d:cc: 97:b9:a3:bb:10:d7:5b:39:b8:9b:96:56:55:3b:67:8e:06:43: 74:e5:3d:3e:0b:ea:34:81:f5:1b:4f:95:fb:7b:3f:08:6c:06: 16:8a:37:12:a6:22:88:4b:b6:fa:a6:97:8d:91:1a:29:7a:37: 35:72:ce:67:72:85:f4:5d:f3:0d:f3:01:bc:8f:11:68:6f:a6: c8:45:08:ab:f2:0c:75:63:1b:e9:62:66:d2:d5:6c:bf:e8:a5: 8f:07:03:c3:07:fe:ef:c8:ae:49:fa:71:e9:2d:8d:80:30:86: c5:a4:04:dc:9d:69:e1:09:9b:3c:92:1d:b6:7b:8f:67:20:ad: 91:af:f8:0c:96:fa:21:3e:d9:6e:2f:8a:27:90:d9:68:06:02: 06:56:20:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3NyyzxAPDZj1HnhgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDEzMDExMTA1OVoXDTI1MDQzMDEwMTA1OVowLzEtMCsGA1UEAxMk ZDY4ZGIyNmUtZDBkYy00MWYwLTgwZDAtYmU1NmY1MGVlYTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz4XL7qg/nFCT2M5+yAYGKDloV0fGiXivpac LP421oWDu5gtYKehUIoUbjOty4LfEVC4+0AB1aF/9FKtxDLKvbGrukutTP4Yl8+k rVUr0kd6NpTI9azPeALLdgZeM+FEUM5HGfcuxAe8P/1tX0J7jEM0X+e+bHKJ3aSE TPToQJXIE/WwJeuSP64xHY0xe5gUNBiy7pMadF+qipUliPOCuhE98zZxdxNLW7Wc TAjoP/bMpc+3kT2INF0Mg8ysr+Ma2GoLPdd7E1wF4b0Ac4Gq40XMaNeAtpRS+oo/ PIksIw0SKxnMCvh836a9fB6x5OeO0sgpfTZRxMmez5xh3M07nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0+C7w3j5s1Z1027BOeHGJI40UjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjY4YzhjMzEtNDg0YS0z MmI3LThmYTktODhiZTk0OWNlZjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR4wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEa3QTtudh1aqA2MTnRX0OArSC5pv3lija3Xeqc6hprtss3aWwAneWFw 9nsXi1v7vWFuvOXJpArBSYdjtVnzbN1KnXRuetRCJNuRBRWvgVheXr5Z4q5/NjxY aBiRhOBrLeh3Kql8xBiaJvRdzJe5o7sQ11s5uJuWVlU7Z44GQ3TlPT4L6jSB9RtP lft7PwhsBhaKNxKmIohLtvqml42RGil6NzVyzmdyhfRd8w3zAbyPEWhvpshFCKvy DHVjG+liZtLVbL/opY8HA8MH/u/Irkn6cektjYAwhsWkBNydaeEJmzySHbZ7j2cg rZGv+AyW+iE+2W4viieQ2WgGAgZWIKY= -----END CERTIFICATE-----Generated at Sun Apr 6 05:58:40 2025 by rpki-client