$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a225a24e-a3c2-3e99-b9d9-9013830f3396.roa File: a225a24e-a3c2-3e99-b9d9-9013830f3396.roa (raw, json) Hash identifier: vAJBZ/u0ivUBApsuuFVU5fumcfmjHUkck5wObGy5i5I= Subject key identifier: 95:76:E0:A6:B2:BA:B1:31:C5:3B:55:D1:3F:78:04:4A:0A:B2:75:89 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C533B375CBFA654A57321380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a225a24e-a3c2-3e99-b9d9-9013830f3396.roa Signing time: Tue 04 Feb 2025 11:25:18 +0000 ROA not before: Tue 04 Feb 2025 11:25:18 +0000 ROA not after: Mon 05 May 2025 10:25:18 +0000 asID: 30036 IP address blocks: 173.23.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:33:b3:75:cb:fa:65:4a:57:32:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 11:25:18 2025 GMT Not After : May 5 10:25:18 2025 GMT Subject: CN=12d77794-2b7c-4870-8b01-52fadf210a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8c:23:6e:97:2a:32:b4:b1:e8:45:0c:1e:64: 54:d8:7a:fe:58:64:85:bc:46:33:b8:3f:5c:7b:dd: bf:e2:d2:d6:96:e0:3f:cd:76:2a:68:d6:64:d4:d3: 23:48:b0:15:09:e4:6e:44:e5:a8:ca:c8:4a:b2:e9: ce:1a:89:63:6e:bf:57:8b:d2:e7:45:c6:d0:b0:6c: fc:8f:72:6e:4c:48:c3:aa:c6:85:9d:87:a6:30:30: de:15:90:48:d7:3d:c8:b7:45:b6:3f:94:cc:2f:e5: 4e:c0:e9:73:30:de:a1:5c:52:d4:b7:1a:b5:ae:fb: 91:2c:d2:c8:f8:ad:b1:14:d0:38:f4:d7:7a:2f:43: 36:71:eb:60:ac:14:8f:b1:39:bb:be:ac:c6:d7:1d: 5c:cb:56:5b:6c:11:e2:e9:b5:bd:ef:fd:0e:cb:ae: e0:7e:32:7d:73:35:89:fd:6c:fc:79:76:6c:dc:9c: db:69:65:d6:7e:3e:62:05:52:43:96:a2:08:53:44: 21:c6:c9:36:91:9b:98:24:3f:b5:67:77:82:b8:8b: 5d:e1:e8:8a:01:dd:0d:88:f7:9d:81:12:21:13:66: fe:41:8d:e8:e5:22:57:d6:08:1e:16:de:46:08:08: 83:bf:07:14:86:4a:98:b7:f8:fe:23:c0:a0:f1:6c: 47:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:76:E0:A6:B2:BA:B1:31:C5:3B:55:D1:3F:78:04:4A:0A:B2:75:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a225a24e-a3c2-3e99-b9d9-9013830f3396.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:1d:99:ae:3c:b9:8e:77:88:e7:42:b8:ce:df:85:93:8a:9a: 15:c6:ef:6b:aa:17:76:22:a6:41:3d:20:4d:f3:e4:61:ac:9b: 52:9d:5b:cf:f8:b4:77:ca:14:ed:44:2e:59:d8:09:0d:b3:18: b6:fc:bc:75:19:46:01:3e:45:ae:44:6c:56:54:e2:9e:5b:73: fe:58:3e:12:5f:06:0b:e4:03:86:08:44:bc:32:29:f6:95:4f: 06:34:fb:22:cb:48:85:cd:2c:04:c1:14:6e:4d:39:e4:27:d8: ce:d1:4e:84:4c:53:7e:e8:c9:4e:99:5d:98:76:74:90:0c:24: 01:7c:30:7c:69:84:c1:a7:54:e8:52:0b:dd:37:a5:0f:1d:09: 4a:75:ff:0f:96:68:9e:d8:39:76:34:5f:37:8b:bb:ef:b9:aa: b0:33:3b:7a:d7:96:d5:0f:37:22:c0:4b:b4:83:8e:2c:9f:d9: 8f:2d:d9:52:6d:4c:5b:4a:69:56:4c:64:2e:61:c2:d0:75:93: 89:f5:97:bd:a6:f8:c0:b2:cc:1e:5e:7a:5e:db:d1:f6:46:93: ab:c6:ad:a2:91:51:29:7d:f3:b1:bd:5e:1c:a9:8a:81:b0:d8: ca:e9:cd:85:52:42:68:e5:ba:0e:fa:74:bd:1d:b4:f0:a5:1e: 77:ce:7f:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFM7N1y/plSlcyE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDExMjUxOFoXDTI1MDUwNTEwMjUxOFowLzEtMCsGA1UEAxMk MTJkNzc3OTQtMmI3Yy00ODcwLThiMDEtNTJmYWRmMjEwYTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24wjbpcqMrSx6EUMHmRU2Hr+WGSFvEYzuD9c e92/4tLWluA/zXYqaNZk1NMjSLAVCeRuROWoyshKsunOGoljbr9Xi9LnRcbQsGz8 j3JuTEjDqsaFnYemMDDeFZBI1z3It0W2P5TML+VOwOlzMN6hXFLUtxq1rvuRLNLI +K2xFNA49Nd6L0M2cetgrBSPsTm7vqzG1x1cy1ZbbBHi6bW97/0Oy67gfjJ9czWJ /Wz8eXZs3JzbaWXWfj5iBVJDlqIIU0Qhxsk2kZuYJD+1Z3eCuItd4eiKAd0NiPed gRIhE2b+QY3o5SJX1ggeFt5GCAiDvwcUhkqYt/j+I8Cg8WxH9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJV24KayurExxTtV0T94BEoKsnWJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTIyNWEyNGUtYTNjMi0z ZTk5LWI5ZDktOTAxMzgzMGYzMzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkdma48uY53iOdCuM7fhZOKmhXG72uqF3YipkE9IE3z5GGsm1KdW8/4 tHfKFO1ELlnYCQ2zGLb8vHUZRgE+Ra5EbFZU4p5bc/5YPhJfBgvkA4YIRLwyKfaV TwY0+yLLSIXNLATBFG5NOeQn2M7RToRMU37oyU6ZXZh2dJAMJAF8MHxphMGnVOhS C903pQ8dCUp1/w+WaJ7YOXY0XzeLu++5qrAzO3rXltUPNyLAS7SDjiyf2Y8t2VJt TFtKaVZMZC5hwtB1k4n1l72m+MCyzB5eel7b0fZGk6vGraKRUSl987G9XhypioGw 2MrpzYVSQmjlug76dL0dtPClHnfOf+4= -----END CERTIFICATE-----Generated at Sun Apr 6 05:52:44 2025 by rpki-client