$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ac24c0f0-923c-3fb3-8eec-170e5cdb0c5f.roa File: ac24c0f0-923c-3fb3-8eec-170e5cdb0c5f.roa (raw, json) Hash identifier: 66HAoEyFB6ngftg4OztNDoVb8J+cZ2aQ4AvSBvJzx58= Subject key identifier: BE:51:09:B6:6B:A8:3B:5F:12:6B:2B:5F:A8:EE:BD:A4:85:2C:AC:2E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C576C0A346D85A7F99E9F1C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ac24c0f0-923c-3fb3-8eec-170e5cdb0c5f.roa Signing time: Tue 04 Feb 2025 13:40:24 +0000 ROA not before: Tue 04 Feb 2025 13:40:24 +0000 ROA not after: Mon 05 May 2025 12:40:24 +0000 asID: 30036 IP address blocks: 173.18.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:76:c0:a3:46:d8:5a:7f:99:e9:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:40:24 2025 GMT Not After : May 5 12:40:24 2025 GMT Subject: CN=d00fa519-ae90-4315-9509-608da04abf29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:eb:14:bf:f0:b3:88:cd:9a:47:98:01:5c:a6: 4a:0c:76:27:4f:e9:e8:8f:f7:e7:fa:6e:55:96:29: 58:e5:06:57:66:86:8d:a5:0d:3e:fc:bb:61:44:9a: 5f:8d:4d:00:b3:52:79:b6:55:04:75:80:3e:a3:cc: 50:b0:4f:35:3c:11:27:27:45:45:76:af:35:5e:14: 61:5b:8f:f1:37:3f:9d:e6:9f:cb:19:b9:65:f5:c0: d9:6b:ef:17:57:73:13:1a:d5:90:90:61:ea:4b:17: b2:f8:17:1b:c3:88:db:1f:ae:f0:a3:20:ad:64:2f: 8b:2c:d8:1b:18:f0:ab:64:0f:19:10:0b:a5:47:af: 41:41:fe:2d:0f:5a:f3:60:41:c3:34:b2:1c:59:ac: 8b:88:f0:47:f2:2b:b0:af:52:c7:47:4c:63:aa:e7: dd:31:44:aa:be:89:f3:ae:53:bc:12:a3:24:8e:22: c5:0d:fe:d5:f1:4e:e7:82:a2:90:1e:e3:00:27:b7: 5c:83:6a:74:32:ca:9d:19:ba:1f:34:a1:a8:48:a8: 84:62:23:fd:a1:cf:6b:d5:5d:e0:9c:ab:ed:e1:11: 42:fe:6f:5c:10:55:65:21:28:e6:01:67:44:6e:60: 4f:06:35:93:03:ac:73:f1:6c:d5:fe:0d:f9:3c:e7: d4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:51:09:B6:6B:A8:3B:5F:12:6B:2B:5F:A8:EE:BD:A4:85:2C:AC:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ac24c0f0-923c-3fb3-8eec-170e5cdb0c5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:95:f0:b7:43:9f:55:a3:62:86:8f:d4:41:bb:39:c6:a2:ea: 63:34:ea:b3:15:1b:71:1d:23:74:95:8a:38:10:10:ac:03:42: 6b:f9:61:7e:ac:63:ba:cc:1d:79:d4:3c:db:90:47:d1:80:ec: 4f:62:6d:93:31:3a:d2:c9:13:8b:98:23:de:ec:81:96:e4:ac: 44:18:13:cb:a3:ec:88:ec:39:5a:ac:80:99:eb:74:ed:ab:9b: b7:0c:25:37:f5:be:33:44:00:cc:a6:c4:79:5b:c9:7a:d8:e3: e2:0f:2d:05:5d:fd:ce:cd:10:21:2d:b3:ef:24:46:c3:c8:d3: 52:bd:eb:5d:5e:76:40:e1:b5:0a:6f:a7:7a:b1:c0:51:66:81: 4b:d0:8e:9e:20:70:bc:5e:5d:25:ce:b7:60:9b:4e:7a:7c:1a: 69:32:4f:f7:d1:e7:40:4b:39:82:ec:c1:9e:df:d8:c2:e4:46: 07:d7:cf:fc:7b:78:e2:2e:ca:03:eb:b8:36:80:28:dd:30:48: a4:ca:df:f4:9c:95:4e:70:eb:21:af:d7:24:9f:fa:75:56:21: 43:2d:0e:59:5d:2c:b9:b7:5e:54:65:92:e1:ae:de:97:11:db: be:ee:f2:8d:38:7f:9c:39:b2:e3:c2:dd:12:12:66:88:f5:77: bc:2e:73:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFdsCjRthaf5np8cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzNDAyNFoXDTI1MDUwNTEyNDAyNFowLzEtMCsGA1UEAxMk ZDAwZmE1MTktYWU5MC00MzE1LTk1MDktNjA4ZGEwNGFiZjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOsUv/CziM2aR5gBXKZKDHYnT+noj/fn+m5V lilY5QZXZoaNpQ0+/LthRJpfjU0As1J5tlUEdYA+o8xQsE81PBEnJ0VFdq81XhRh W4/xNz+d5p/LGbll9cDZa+8XV3MTGtWQkGHqSxey+Bcbw4jbH67woyCtZC+LLNgb GPCrZA8ZEAulR69BQf4tD1rzYEHDNLIcWayLiPBH8iuwr1LHR0xjqufdMUSqvonz rlO8EqMkjiLFDf7V8U7ngqKQHuMAJ7dcg2p0MsqdGbofNKGoSKiEYiP9oc9r1V3g nKvt4RFC/m9cEFVlISjmAWdEbmBPBjWTA6xz8WzV/g35POfU5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5RCbZrqDtfEmsrX6juvaSFLKwuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWMyNGMwZjAtOTIzYy0z ZmIzLThlZWMtMTcwZTVjZGIwYzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRLrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByV8LdDn1WjYoaP1EG7Ocai6mM06rMVG3EdI3SVijgQEKwDQmv5YX6s Y7rMHXnUPNuQR9GA7E9ibZMxOtLJE4uYI97sgZbkrEQYE8uj7IjsOVqsgJnrdO2r m7cMJTf1vjNEAMymxHlbyXrY4+IPLQVd/c7NECEts+8kRsPI01K9611edkDhtQpv p3qxwFFmgUvQjp4gcLxeXSXOt2CbTnp8GmkyT/fR50BLOYLswZ7f2MLkRgfXz/x7 eOIuygPruDaAKN0wSKTK3/SclU5w6yGv1ySf+nVWIUMtDlldLLm3XlRlkuGu3pcR 277u8o04f5w5suPC3RISZoj1d7wuc24= -----END CERTIFICATE-----Generated at Sun Apr 6 05:52:40 2025 by rpki-client