$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ab71d131-d29b-30fc-b920-73af151da39a.roa File: ab71d131-d29b-30fc-b920-73af151da39a.roa (raw, json) Hash identifier: bE2mATjcHSWY594bkzSrigwXCv06j3HGIWTesreC6Ig= Subject key identifier: 3C:D8:BF:D8:F6:E7:89:A5:37:72:5B:6F:EB:ED:DD:0C:4C:13:AA:CC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C55F910F8E0928B1BC403920 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ab71d131-d29b-30fc-b920-73af151da39a.roa Signing time: Tue 04 Feb 2025 12:53:41 +0000 ROA not before: Tue 04 Feb 2025 12:53:41 +0000 ROA not after: Mon 05 May 2025 11:53:41 +0000 asID: 30036 IP address blocks: 173.23.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:5f:91:0f:8e:09:28:b1:bc:40:39:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 12:53:41 2025 GMT Not After : May 5 11:53:41 2025 GMT Subject: CN=ba587800-b597-4987-a113-c32260748af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b2:43:f4:70:09:bb:fb:21:28:44:0f:10:6f: 7b:65:32:89:d5:49:dd:ff:38:f8:35:da:fd:21:c1: 46:ed:23:44:c2:05:6b:b0:f5:3f:86:43:4c:97:ba: 23:b6:14:d0:4c:4d:fd:f7:6d:cc:9b:bf:09:03:fb: 9d:98:e7:9f:ee:22:53:da:ce:ea:33:ba:70:59:6f: 3a:5a:49:6e:b2:0e:b0:62:35:0c:4a:46:b7:13:9f: 26:07:b7:57:c3:06:f5:27:0f:a9:d9:9b:71:8f:45: 44:52:de:5c:e9:cb:74:98:a0:f4:90:e2:85:07:0f: 77:94:89:0d:cc:a2:35:f1:34:6a:a6:26:b1:92:76: 32:1e:93:08:09:1a:af:de:79:00:12:cf:39:1d:9b: b7:6b:0c:87:3d:06:4e:d9:42:93:d4:21:27:c1:08: 8b:a6:83:f3:dc:07:b7:8f:fe:91:05:ae:52:5d:93: 76:77:0d:b1:22:00:f0:83:aa:1e:a5:db:29:ee:1c: 77:d7:91:63:e3:c0:61:c0:52:d9:79:47:e8:03:fc: 2c:81:83:ab:da:21:36:6e:2d:97:8f:94:87:50:66: 42:05:4c:04:8e:d9:a7:52:61:a0:95:47:4e:de:ae: 41:21:fd:bc:ab:4b:65:74:99:41:20:4f:91:19:dd: fd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D8:BF:D8:F6:E7:89:A5:37:72:5B:6F:EB:ED:DD:0C:4C:13:AA:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ab71d131-d29b-30fc-b920-73af151da39a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:7f:6c:95:9b:43:9f:eb:ff:62:bb:21:85:95:86:d5:cf:e5: 13:da:01:33:e5:e0:05:fc:4b:5f:4e:38:40:11:a4:a2:2c:8f: a8:85:b1:1f:2f:94:da:5a:83:79:24:12:3e:c9:13:a3:70:2f: d4:3b:9d:24:41:a0:58:1a:5a:40:25:f5:42:40:1a:a1:f5:55: fd:74:61:09:72:11:fc:8e:5b:92:7f:9a:0f:da:e5:e4:22:f3: 71:e5:2f:9e:1e:20:4d:20:00:70:29:bf:c1:bc:f6:65:14:48: c4:b6:a2:ec:bd:47:cf:5a:91:a4:7f:94:5b:f4:df:00:69:27: d6:0f:9d:6e:de:ae:ec:09:30:2d:32:55:76:3a:29:2b:d1:41: 87:51:1b:6d:00:7d:bb:6d:fd:5e:fe:c0:4d:da:0a:ba:2c:68: 51:9d:71:12:46:8a:21:db:a7:69:bb:c0:77:12:b6:a9:c1:d0: 8c:a6:7e:da:3c:48:25:6b:74:58:0a:71:4c:b7:90:17:98:a7: 7a:b4:e8:d6:3d:43:6f:48:1a:31:42:03:c1:3b:b6:2c:79:7b: cb:d2:6b:ca:99:7e:ca:0c:97:08:45:af:20:bf:7a:d5:74:a9: 64:cc:10:5d:bb:99:b1:af:ef:1a:d8:46:2a:a1:b8:0e:b3:f6: b8:47:ec:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFX5EPjgkosbxAOSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEyNTM0MVoXDTI1MDUwNTExNTM0MVowLzEtMCsGA1UEAxMk YmE1ODc4MDAtYjU5Ny00OTg3LWExMTMtYzMyMjYwNzQ4YWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbJD9HAJu/shKEQPEG97ZTKJ1Und/zj4Ndr9 IcFG7SNEwgVrsPU/hkNMl7ojthTQTE39923Mm78JA/udmOef7iJT2s7qM7pwWW86 Wklusg6wYjUMSka3E58mB7dXwwb1Jw+p2Ztxj0VEUt5c6ct0mKD0kOKFBw93lIkN zKI18TRqpiaxknYyHpMICRqv3nkAEs85HZu3awyHPQZO2UKT1CEnwQiLpoPz3Ae3 j/6RBa5SXZN2dw2xIgDwg6oepdsp7hx315Fj48BhwFLZeUfoA/wsgYOr2iE2bi2X j5SHUGZCBUwEjtmnUmGglUdO3q5BIf28q0tldJlBIE+RGd39wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzYv9j254mlN3Jbb+vt3QxME6rMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWI3MWQxMzEtZDI5Yi0z MGZjLWI5MjAtNzNhZjE1MWRhMzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRcbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABl/bJWbQ5/r/2K7IYWVhtXP5RPaATPl4AX8S19OOEARpKIsj6iFsR8v lNpag3kkEj7JE6NwL9Q7nSRBoFgaWkAl9UJAGqH1Vf10YQlyEfyOW5J/mg/a5eQi 83HlL54eIE0gAHApv8G89mUUSMS2ouy9R89akaR/lFv03wBpJ9YPnW7eruwJMC0y VXY6KSvRQYdRG20Afbtt/V7+wE3aCrosaFGdcRJGiiHbp2m7wHcStqnB0Iymfto8 SCVrdFgKcUy3kBeYp3q06NY9Q29IGjFCA8E7tix5e8vSa8qZfsoMlwhFryC/etV0 qWTMEF27mbGv7xrYRiqhuA6z9rhH7MI= -----END CERTIFICATE-----Generated at Sun Apr 6 05:54:38 2025 by rpki-client