$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8b41c3b6-2efa-3787-9a1d-b2ba6c004a6a.roa File: 8b41c3b6-2efa-3787-9a1d-b2ba6c004a6a.roa (raw, json) Hash identifier: VUWlCjeqBr63yzoT1r3s6ZXFLcLa5XIt4gh4BZnJITo= Subject key identifier: 6E:AF:B7:F4:59:10:67:DB:A0:47:FD:66:26:2B:9C:EA:B9:92:3D:FB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C55F1B5097373B6890F82680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8b41c3b6-2efa-3787-9a1d-b2ba6c004a6a.roa Signing time: Tue 04 Feb 2025 12:52:46 +0000 ROA not before: Tue 04 Feb 2025 12:52:46 +0000 ROA not after: Mon 05 May 2025 11:52:46 +0000 asID: 30036 IP address blocks: 173.24.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:5f:1b:50:97:37:3b:68:90:f8:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 12:52:46 2025 GMT Not After : May 5 11:52:46 2025 GMT Subject: CN=e7a401e4-b878-4b0b-ae9e-ac5dc0a77ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:25:b2:7c:33:15:d7:98:9c:f9:c0:8c:56:53: 00:b7:68:4f:7a:b6:d0:07:03:46:a4:56:84:21:58: b2:0f:da:77:12:b2:82:17:c4:3d:58:88:83:d2:a7: 46:d1:fe:98:b3:82:3d:26:6a:89:72:05:d8:68:c4: a1:8c:65:2a:50:9d:e1:dc:71:2a:08:f3:ce:cd:ef: 09:21:e3:a0:c7:30:cc:54:ee:7d:b4:21:2f:c4:22: 7d:96:25:8e:d3:35:eb:5d:e0:ce:30:24:c1:23:3a: 59:a0:52:08:d1:39:8d:39:e2:d9:fc:18:37:05:9d: d4:fd:da:87:62:79:60:1d:05:cf:25:4c:f0:8b:f7: 00:13:9d:eb:3e:31:22:d7:ee:1b:0c:b3:ea:59:6a: 29:03:3b:1b:41:53:a8:1a:09:8b:6e:4e:a2:32:d4: af:2a:17:3b:ad:4c:8e:d4:fb:c5:90:0b:b4:bd:80: bb:eb:a7:e6:50:04:b8:6e:6f:68:a0:50:e1:98:36: 53:b1:59:de:a8:78:ac:93:13:78:26:df:7e:52:db: e3:1c:19:8d:a6:79:1e:e3:ae:22:fc:ba:7c:cd:67: 98:81:44:ab:b7:f8:97:12:fa:f0:8b:11:2f:7d:15: de:b6:73:a3:39:b6:18:6e:32:9b:61:1a:6b:59:af: 74:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:AF:B7:F4:59:10:67:DB:A0:47:FD:66:26:2B:9C:EA:B9:92:3D:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8b41c3b6-2efa-3787-9a1d-b2ba6c004a6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:48:e3:5d:00:66:23:c1:01:19:b1:f0:22:1c:7c:eb:6e:e8: 9a:74:1e:2c:7d:6e:f8:4d:70:ce:60:38:b7:a9:2c:0a:48:79: 4d:d9:e3:ce:ef:39:96:67:a7:f3:f0:14:4a:8e:bb:73:ed:4a: 7b:51:f1:f3:b9:a3:15:81:b2:0d:5c:5c:ea:10:5f:e8:b1:56: 01:d5:4d:63:97:a7:bc:66:5f:d5:21:17:1d:9d:fb:a8:5a:65: d2:63:8e:0d:ac:59:52:2e:83:b3:05:ba:97:a8:3d:1c:05:b6: 55:d4:ea:01:6a:da:e5:0a:0e:e1:73:b1:fa:65:65:94:e7:a7: d8:55:87:cc:0e:c6:7c:a1:81:cd:a8:7e:43:d7:fc:3e:88:f9: a2:f7:63:fc:f1:5a:bd:68:3b:86:b3:3d:af:00:a5:11:31:84: b0:0d:b1:a8:29:17:06:16:5b:78:c2:a2:46:c0:07:29:81:73: 31:6a:55:d5:92:05:94:c0:13:ac:4c:fd:bd:ba:6c:41:46:00: e4:fd:4c:59:38:b0:0c:40:55:5b:ec:bb:c0:ef:41:15:1a:04: 20:44:8c:b9:55:71:2d:25:cc:a7:09:4c:35:c8:e4:69:62:e2: aa:47:e6:4f:6a:53:19:22:27:e2:da:64:e9:74:f8:7e:df:d3: 0c:ea:6b:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFXxtQlzc7aJD4JoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEyNTI0NloXDTI1MDUwNTExNTI0NlowLzEtMCsGA1UEAxMk ZTdhNDAxZTQtYjg3OC00YjBiLWFlOWUtYWM1ZGMwYTc3YmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiWyfDMV15ic+cCMVlMAt2hPerbQBwNGpFaE IViyD9p3ErKCF8Q9WIiD0qdG0f6Ys4I9JmqJcgXYaMShjGUqUJ3h3HEqCPPOze8J IeOgxzDMVO59tCEvxCJ9liWO0zXrXeDOMCTBIzpZoFII0TmNOeLZ/Bg3BZ3U/dqH YnlgHQXPJUzwi/cAE53rPjEi1+4bDLPqWWopAzsbQVOoGgmLbk6iMtSvKhc7rUyO 1PvFkAu0vYC766fmUAS4bm9ooFDhmDZTsVneqHiskxN4Jt9+UtvjHBmNpnke464i /Lp8zWeYgUSrt/iXEvrwixEvfRXetnOjObYYbjKbYRprWa90rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6vt/RZEGfboEf9ZiYrnOq5kj37MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGI0MWMzYjYtMmVmYS0z Nzg3LTlhMWQtYjJiYTZjMDA0YTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRiEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFI410AZiPBARmx8CIcfOtu6Jp0Hix9bvhNcM5gOLepLApIeU3Z487v OZZnp/PwFEqOu3PtSntR8fO5oxWBsg1cXOoQX+ixVgHVTWOXp7xmX9UhFx2d+6ha ZdJjjg2sWVIug7MFupeoPRwFtlXU6gFq2uUKDuFzsfplZZTnp9hVh8wOxnyhgc2o fkPX/D6I+aL3Y/zxWr1oO4azPa8ApRExhLANsagpFwYWW3jCokbABymBczFqVdWS BZTAE6xM/b26bEFGAOT9TFk4sAxAVVvsu8DvQRUaBCBEjLlVcS0lzKcJTDXI5Gli 4qpH5k9qUxkiJ+LaZOl0+H7f0wzqazU= -----END CERTIFICATE-----Generated at Sun Apr 6 05:59:18 2025 by rpki-client