$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d1b386c-2435-3547-a5f0-a22c80e99478.roa File: 8d1b386c-2435-3547-a5f0-a22c80e99478.roa (raw, json) Hash identifier: 9JXahtAfGum27d1kUHRGAdgqCbX2syVqDZ4CfkYy0fQ= Subject key identifier: AE:F0:D0:5D:AE:FD:E3:32:F3:C4:C5:C3:8F:52:79:11:CC:21:81:10 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C557DD33BD95C8F29093A980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d1b386c-2435-3547-a5f0-a22c80e99478.roa Signing time: Tue 04 Feb 2025 12:38:10 +0000 ROA not before: Tue 04 Feb 2025 12:38:10 +0000 ROA not after: Mon 05 May 2025 11:38:10 +0000 asID: 30036 IP address blocks: 173.17.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:57:dd:33:bd:95:c8:f2:90:93:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 12:38:10 2025 GMT Not After : May 5 11:38:10 2025 GMT Subject: CN=f510d44d-11ef-4303-9980-48a76eafc7e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:84:bd:f0:70:c7:f1:79:3e:2b:38:7b:b8:97: 7f:24:a4:25:3c:f0:6d:7b:e5:9c:58:07:9e:80:21: ed:14:e2:d3:6f:01:67:c6:d3:53:a7:54:87:52:57: 58:04:e0:0a:85:4d:f7:a3:9b:f8:50:6b:73:b5:95: 75:d6:29:10:d8:73:f9:96:d2:be:61:e7:b3:d9:81: 71:05:c0:08:ec:1c:66:80:42:a0:88:8f:8f:18:36: 5e:47:59:53:c0:84:7b:50:4f:8b:1a:9b:44:a0:61: 12:32:21:ce:76:21:8e:9a:77:3f:36:79:34:8c:61: 6d:6a:87:78:8b:a0:16:09:ce:86:f9:f3:bf:29:48: 7d:74:e3:19:a8:5b:fb:74:7a:56:e1:c2:63:e7:e5: 15:df:95:c1:83:9a:46:49:7b:0c:6d:b2:d4:32:50: d1:9e:ff:24:8a:8e:4e:cb:59:e9:71:b4:70:93:3b: 8e:28:42:93:99:5c:c3:0c:e4:65:38:5c:e7:33:5a: 7d:df:52:ae:96:49:77:5b:c1:c5:f8:4c:07:d8:b7: cb:74:8d:d8:b8:02:ea:02:fb:a8:f1:e3:7c:bc:36: 59:49:ef:8b:3e:bf:5a:de:37:0d:9c:b1:cc:34:3d: 8b:ff:8b:4a:84:50:3e:00:f0:4b:eb:72:1a:14:72: 0d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F0:D0:5D:AE:FD:E3:32:F3:C4:C5:C3:8F:52:79:11:CC:21:81:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d1b386c-2435-3547-a5f0-a22c80e99478.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:e5:cf:53:86:1f:82:af:91:8b:38:be:b0:0b:95:18:a6:a0: a3:93:61:b5:c8:ab:fe:ab:43:85:18:bf:af:a2:f2:3e:4c:37: ba:b8:8b:6e:4e:c2:04:d5:e5:ba:f5:d6:68:22:cc:71:9c:43: 99:1e:b7:b3:a0:36:23:9a:96:98:f8:01:4d:cc:99:df:ac:31: c0:8a:7a:f4:01:04:44:68:cc:16:62:9b:ef:74:52:5d:3a:28: 43:13:4a:f2:5d:57:80:f7:e0:3f:44:ed:fb:77:9f:c5:1d:84: bf:38:2b:93:cc:10:c3:cc:c0:8d:12:2b:2a:df:26:7b:75:e8: d1:fb:a3:08:2b:51:41:64:d5:c6:c6:99:0d:7d:25:cc:2e:29: 42:17:07:c5:57:4b:08:42:ab:8c:b1:5f:b5:8c:f5:5a:ef:23: d0:56:68:b7:d7:08:3f:b0:94:3d:b1:34:80:d2:85:ca:7e:c4: e1:75:31:71:7f:43:19:69:3f:c7:cb:56:54:10:e8:b4:bf:32: 5d:60:45:7b:9a:a5:5d:58:84:a1:c9:6a:15:25:98:f8:bc:72: 23:76:55:a9:41:14:ad:ef:6c:d7:69:4a:a9:38:cf:ec:f6:e6: 74:5e:73:db:c9:0b:d4:a6:75:22:55:b0:21:08:d1:d2:10:6b: 26:35:05:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFV90zvZXI8pCTqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEyMzgxMFoXDTI1MDUwNTExMzgxMFowLzEtMCsGA1UEAxMk ZjUxMGQ0NGQtMTFlZi00MzAzLTk5ODAtNDhhNzZlYWZjN2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYS98HDH8Xk+Kzh7uJd/JKQlPPBte+WcWAee gCHtFOLTbwFnxtNTp1SHUldYBOAKhU33o5v4UGtztZV11ikQ2HP5ltK+Yeez2YFx BcAI7BxmgEKgiI+PGDZeR1lTwIR7UE+LGptEoGESMiHOdiGOmnc/Nnk0jGFtaod4 i6AWCc6G+fO/KUh9dOMZqFv7dHpW4cJj5+UV35XBg5pGSXsMbbLUMlDRnv8kio5O y1npcbRwkzuOKEKTmVzDDORlOFznM1p931Kulkl3W8HF+EwH2LfLdI3YuALqAvuo 8eN8vDZZSe+LPr9a3jcNnLHMND2L/4tKhFA+APBL63IaFHINTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7w0F2u/eMy88TFw49SeRHMIYEQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGQxYjM4NmMtMjQzNS0z NTQ3LWE1ZjAtYTIyYzgwZTk5NDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrREcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDlz1OGH4KvkYs4vrALlRimoKOTYbXIq/6rQ4UYv6+i8j5MN7q4i25O wgTV5br11mgizHGcQ5ket7OgNiOalpj4AU3Mmd+sMcCKevQBBERozBZim+90Ul06 KEMTSvJdV4D34D9E7ft3n8UdhL84K5PMEMPMwI0SKyrfJnt16NH7owgrUUFk1cbG mQ19JcwuKUIXB8VXSwhCq4yxX7WM9VrvI9BWaLfXCD+wlD2xNIDShcp+xOF1MXF/ QxlpP8fLVlQQ6LS/Ml1gRXuapV1YhKHJahUlmPi8ciN2ValBFK3vbNdpSqk4z+z2 5nRec9vJC9SmdSJVsCEI0dIQayY1BVI= -----END CERTIFICATE-----Generated at Sun Apr 6 05:58:40 2025 by rpki-client