$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a65ff724-a00a-310f-bd57-fdb035451d61.roa File: a65ff724-a00a-310f-bd57-fdb035451d61.roa (raw, json) Hash identifier: 9BorWLq0A7WizX4tuySVpfV3wgRc5ix4wP2Qi5xfC9A= Subject key identifier: 2E:62:2B:75:C6:BC:60:C9:E3:03:45:60:F4:65:A5:5C:9C:F3:CF:10 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C7FD112BF11F0D99D3A9A3A0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a65ff724-a00a-310f-bd57-fdb035451d61.roa Signing time: Wed 05 Feb 2025 11:22:39 +0000 ROA not before: Wed 05 Feb 2025 11:22:39 +0000 ROA not after: Tue 06 May 2025 10:22:39 +0000 asID: 30036 IP address blocks: 173.18.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c7:fd:11:2b:f1:1f:0d:99:d3:a9:a3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 5 11:22:39 2025 GMT Not After : May 6 10:22:39 2025 GMT Subject: CN=aa54cd48-4143-4e70-86da-fc388dd1d69f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7a:fa:9f:d3:1f:17:bb:86:af:12:d1:14:6f: 54:2e:d5:de:c0:53:f9:29:75:23:e1:e9:d0:bb:a8: 88:95:05:43:89:3f:5c:d6:f4:bb:20:34:0e:30:67: 8c:dd:44:ca:11:c1:b6:27:1b:2a:02:19:4b:34:4c: b3:f4:a9:54:1b:2b:b0:a1:a2:3b:7c:57:75:a6:70: e5:0d:a4:e0:86:8a:20:ad:28:30:b0:31:09:d2:cf: 1c:ba:e0:85:21:62:b7:ab:48:2e:e3:f3:2d:ab:9c: 2a:13:76:25:f4:f9:30:a3:00:fa:9d:3f:96:7d:b6: 5d:0e:8b:fc:ac:f1:94:a9:d8:09:14:39:01:f2:6d: f7:5c:7f:fc:68:c0:6f:78:ca:67:f1:8a:6e:59:0d: a0:ab:1e:5d:0f:57:07:3c:19:78:f8:68:94:6e:85: 0f:f4:bf:12:a3:0e:f0:e0:af:24:ee:27:01:6e:d2: df:56:3c:d0:fd:45:7f:0f:e5:f8:3b:9a:f2:e2:ea: be:76:29:2a:19:56:c4:e5:21:72:e0:38:b9:89:27: 35:c6:45:58:a5:18:26:f6:8d:63:9b:95:ea:e8:49: b2:cc:16:da:4c:82:9b:0d:c4:e6:26:75:08:6b:76: df:00:37:7f:2b:cd:c2:89:1a:2f:74:17:85:3f:8e: 12:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:62:2B:75:C6:BC:60:C9:E3:03:45:60:F4:65:A5:5C:9C:F3:CF:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a65ff724-a00a-310f-bd57-fdb035451d61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:be:48:c2:6f:d3:3d:a1:a0:9f:5c:24:fb:4a:63:6d:db:cd: 19:48:76:dc:9a:25:e9:e0:71:ae:c1:48:62:57:3f:75:b5:f1: 68:eb:0e:4f:9c:58:93:81:60:00:9d:a9:94:7c:8c:48:2f:11: 83:ff:73:d8:fb:69:ef:27:fb:02:aa:8f:f5:23:cc:4e:98:a2: be:4d:b1:98:2f:7e:ef:2e:a3:05:14:f9:b6:94:86:89:42:76: d4:3c:79:5a:04:b2:ec:54:b5:0a:5a:e2:9a:e9:68:3a:0e:62: d5:35:1b:87:a1:b0:60:0e:5b:c1:b6:a8:d4:78:d3:0c:74:45: 32:61:bb:87:52:34:5b:94:03:ff:04:a3:83:ce:b8:71:9a:86: 42:e5:cf:31:51:03:74:b9:57:4e:75:2b:76:05:21:5d:6b:50: 5e:b7:45:a6:5b:16:b5:7c:37:55:a1:97:d1:24:8b:74:d2:b6: ee:ee:7f:71:33:36:78:18:b0:6e:4f:67:af:b2:4b:65:23:25: 4d:e4:a2:b9:af:2e:bb:9f:ef:f0:a4:0d:f3:01:4f:d7:e9:65: 2f:93:f5:bb:0d:da:65:a2:79:96:64:84:a6:53:37:c7:00:f8: 5e:2b:5a:ab:5c:26:1d:2d:f5:2f:a0:d8:c9:41:2a:22:99:aa: 19:68:c8:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjH/REr8R8NmdOpo6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNTExMjIzOVoXDTI1MDUwNjEwMjIzOVowLzEtMCsGA1UEAxMk YWE1NGNkNDgtNDE0My00ZTcwLTg2ZGEtZmMzODhkZDFkNjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnr6n9MfF7uGrxLRFG9ULtXewFP5KXUj4enQ u6iIlQVDiT9c1vS7IDQOMGeM3UTKEcG2JxsqAhlLNEyz9KlUGyuwoaI7fFd1pnDl DaTghoogrSgwsDEJ0s8cuuCFIWK3q0gu4/Mtq5wqE3Yl9PkwowD6nT+WfbZdDov8 rPGUqdgJFDkB8m33XH/8aMBveMpn8YpuWQ2gqx5dD1cHPBl4+GiUboUP9L8Sow7w 4K8k7icBbtLfVjzQ/UV/D+X4O5ry4uq+dikqGVbE5SFy4Di5iSc1xkVYpRgm9o1j m5Xq6EmyzBbaTIKbDcTmJnUIa3bfADd/K83CiRovdBeFP44SRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5iK3XGvGDJ4wNFYPRlpVyc888QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTY1ZmY3MjQtYTAwYS0z MTBmLWJkNTctZmRiMDM1NDUxZDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIO+SMJv0z2hoJ9cJPtKY23bzRlIdtyaJengca7BSGJXP3W18WjrDk+c WJOBYACdqZR8jEgvEYP/c9j7ae8n+wKqj/UjzE6Yor5NsZgvfu8uowUU+baUholC dtQ8eVoEsuxUtQpa4prpaDoOYtU1G4ehsGAOW8G2qNR40wx0RTJhu4dSNFuUA/8E o4POuHGahkLlzzFRA3S5V051K3YFIV1rUF63RaZbFrV8N1Whl9Eki3TStu7uf3Ez NngYsG5PZ6+yS2UjJU3kormvLruf7/CkDfMBT9fpZS+T9bsN2mWieZZkhKZTN8cA +F4rWqtcJh0t9S+g2MlBKiKZqhloyD8= -----END CERTIFICATE-----Generated at Sun Apr 6 05:55:20 2025 by rpki-client