$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7cfa9be-e28e-39cb-b724-508b2c7f1e73.roa File: a7cfa9be-e28e-39cb-b724-508b2c7f1e73.roa (raw, json) Hash identifier: IVPRP4QjvqNpyHksbU1wAJiYl8/NLYct5wGJSfcFywA= Subject key identifier: EB:48:FD:5A:9E:87:57:32:DA:2C:2A:3B:04:82:E3:99:41:48:C2:2A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C7F5FE4A15991E2CC0573FC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7cfa9be-e28e-39cb-b724-508b2c7f1e73.roa Signing time: Wed 05 Feb 2025 11:08:24 +0000 ROA not before: Wed 05 Feb 2025 11:08:24 +0000 ROA not after: Tue 06 May 2025 10:08:24 +0000 asID: 30036 IP address blocks: 173.17.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c7:f5:fe:4a:15:99:1e:2c:c0:57:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 5 11:08:24 2025 GMT Not After : May 6 10:08:24 2025 GMT Subject: CN=b1e5ff9d-f04e-433c-8772-d2e28b4b038b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6b:2f:3e:10:89:6c:1a:bc:f8:d8:f1:c3:77: 7f:f6:d4:c9:56:e4:ba:df:0e:7b:15:16:32:0d:45: ec:fc:ed:14:64:9b:35:05:52:6f:52:97:be:cc:4d: d9:40:2d:14:db:2a:f1:0c:9f:45:06:58:db:0f:5d: 05:bb:b2:f4:e6:66:c0:a9:2a:4e:8d:11:6a:03:0b: 9d:6c:2d:b9:81:20:59:54:53:8f:9c:d2:51:39:30: dd:5e:7b:8f:b9:ed:9e:91:42:72:17:43:c4:50:6c: 33:94:a0:9c:e1:5b:09:d9:82:bc:11:40:1e:4e:99: b1:11:ec:c2:18:e9:6c:db:ee:9b:99:45:84:d7:8a: 1e:ed:64:48:da:89:73:36:10:da:e0:a9:a6:ba:c8: 42:5e:62:18:fc:5f:8f:9b:4f:29:cb:31:5e:04:47: 4d:ff:a0:52:fb:8c:57:59:c9:06:c5:d4:df:e2:ef: d4:e2:f7:2a:d1:8d:68:7c:45:c9:a9:25:92:f3:7c: df:32:f9:6d:6c:c9:ca:a0:68:82:8f:98:30:c9:48: 66:34:52:04:32:a3:20:55:9f:6a:7b:e2:66:9a:32: 0c:c4:2d:90:c3:d9:8d:ea:07:e2:c9:5e:00:4d:31: c8:ce:fe:68:1e:64:e2:ed:7e:6f:b5:78:18:fa:9f: 86:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:48:FD:5A:9E:87:57:32:DA:2C:2A:3B:04:82:E3:99:41:48:C2:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7cfa9be-e28e-39cb-b724-508b2c7f1e73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:d2:dd:df:a9:14:15:e9:5a:84:7b:d1:c4:e7:7a:63:82:a7: 9f:0d:ee:60:81:d8:e1:46:b1:19:d8:e7:c0:4a:c0:71:11:5b: 19:a6:2d:8e:37:22:4c:7a:43:1e:fc:f0:f8:11:2b:53:be:b9: d6:c1:b5:01:c7:9f:43:17:14:99:ea:c1:84:9b:5d:eb:f3:24: 35:2f:e1:7f:68:d1:b6:0d:ae:af:92:38:82:64:8e:87:2f:ff: 1c:61:69:80:0c:89:a5:b4:16:32:41:0f:b3:56:67:fa:c2:6c: 19:03:88:b5:67:9b:05:79:10:ac:ba:93:44:0a:1c:93:4e:04: 14:d4:d7:d7:20:0c:20:35:5b:25:0e:de:b8:75:12:72:d6:d6: 27:70:2a:0d:23:8f:31:9e:f6:e4:b1:ae:e0:09:c0:6c:41:c5: e7:77:d0:6d:c4:1d:15:71:61:b5:50:24:aa:66:5f:cd:00:ae: 44:07:e6:fa:39:ab:c1:6e:8a:2f:71:fc:ea:a8:f8:42:43:96: f2:6b:04:73:18:85:4c:d5:91:e2:a3:80:33:2c:e9:10:66:ad: 7e:fa:c3:2d:31:70:36:0b:5f:3f:f6:7f:0f:01:1f:98:42:5b: bb:48:9a:e0:e3:ab:44:17:07:5e:01:dc:01:ad:cf:25:3f:18: d0:65:67:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjH9f5KFZkeLMBXP8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNTExMDgyNFoXDTI1MDUwNjEwMDgyNFowLzEtMCsGA1UEAxMk YjFlNWZmOWQtZjA0ZS00MzNjLTg3NzItZDJlMjhiNGIwMzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGsvPhCJbBq8+Njxw3d/9tTJVuS63w57FRYy DUXs/O0UZJs1BVJvUpe+zE3ZQC0U2yrxDJ9FBljbD10Fu7L05mbAqSpOjRFqAwud bC25gSBZVFOPnNJROTDdXnuPue2ekUJyF0PEUGwzlKCc4VsJ2YK8EUAeTpmxEezC GOls2+6bmUWE14oe7WRI2olzNhDa4KmmushCXmIY/F+Pm08pyzFeBEdN/6BS+4xX WckGxdTf4u/U4vcq0Y1ofEXJqSWS83zfMvltbMnKoGiCj5gwyUhmNFIEMqMgVZ9q e+JmmjIMxC2Qw9mN6gfiyV4ATTHIzv5oHmTi7X5vtXgY+p+G2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtI/Vqeh1cy2iwqOwSC45lBSMIqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTdjZmE5YmUtZTI4ZS0z OWNiLWI3MjQtNTA4YjJjN2YxZTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRGUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILS3d+pFBXpWoR70cTnemOCp58N7mCB2OFGsRnY58BKwHERWxmmLY43 Ikx6Qx788PgRK1O+udbBtQHHn0MXFJnqwYSbXevzJDUv4X9o0bYNrq+SOIJkjocv /xxhaYAMiaW0FjJBD7NWZ/rCbBkDiLVnmwV5EKy6k0QKHJNOBBTU19cgDCA1WyUO 3rh1EnLW1idwKg0jjzGe9uSxruAJwGxBxed30G3EHRVxYbVQJKpmX80ArkQH5vo5 q8Fuii9x/Oqo+EJDlvJrBHMYhUzVkeKjgDMs6RBmrX76wy0xcDYLXz/2fw8BH5hC W7tImuDjq0QXB14B3AGtzyU/GNBlZ/w= -----END CERTIFICATE-----Generated at Sun Apr 6 05:55:04 2025 by rpki-client