$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/addf3a7e-a546-3f84-b10d-126e0fb1e13f.roa File: addf3a7e-a546-3f84-b10d-126e0fb1e13f.roa (raw, json) Hash identifier: AQ5uUXJYcZtsFiQzIhgvOsXLNjyddIEzXys3yvpD+o0= Subject key identifier: 7C:FF:72:D2:7C:12:EF:25:20:E4:47:55:B7:F5:DA:9F:BC:98:A4:56 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C57DBBB9039215769559DE90 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/addf3a7e-a546-3f84-b10d-126e0fb1e13f.roa Signing time: Tue 04 Feb 2025 13:54:28 +0000 ROA not before: Tue 04 Feb 2025 13:54:28 +0000 ROA not after: Mon 05 May 2025 12:54:28 +0000 asID: 30036 IP address blocks: 173.16.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:7d:bb:b9:03:92:15:76:95:59:de:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:54:28 2025 GMT Not After : May 5 12:54:28 2025 GMT Subject: CN=849d1780-63c8-461c-b97f-3f91960964e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:af:56:cd:3f:cf:07:1c:cf:f6:59:92:d5:ca: fc:ee:ae:84:47:a9:c1:74:e1:fe:60:b5:96:8f:52: 9b:10:6d:69:90:5d:c9:8d:1b:58:aa:19:31:43:7d: 75:ed:62:c3:93:36:41:dc:85:17:49:fa:a2:f7:3d: 77:f9:5a:87:3d:3e:f6:fd:7b:7c:2c:d1:bb:b6:eb: 29:8e:c1:19:98:18:ff:0c:3a:7a:9d:44:a6:08:83: 43:48:93:0f:84:16:ba:44:57:72:d5:81:0a:25:ea: 9d:74:ae:8c:f3:ad:8d:4d:50:07:34:47:50:d8:24: 4f:29:94:d7:b8:cb:be:c0:c7:8b:60:da:69:ac:75: 92:70:86:db:52:15:6d:22:1b:38:6e:9c:b8:4f:78: 5c:e2:64:b1:73:17:98:7b:0c:f1:21:7c:1d:9a:b7: 8a:f4:25:03:0e:1f:12:2d:0a:ef:0c:d9:0f:c1:9f: 8a:ac:ba:16:f5:51:62:de:09:63:a0:2b:ef:8e:c2: bb:03:29:c2:0d:48:29:83:f8:6f:73:33:cd:fe:cd: da:38:3f:82:d1:d0:f8:49:1e:02:8a:c5:0f:3a:76: cc:d4:40:71:39:d0:63:f8:ed:68:bf:b0:33:d0:20: be:1a:82:a9:f4:a7:62:83:79:4a:e5:10:e0:09:ac: f8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:FF:72:D2:7C:12:EF:25:20:E4:47:55:B7:F5:DA:9F:BC:98:A4:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/addf3a7e-a546-3f84-b10d-126e0fb1e13f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:54:b2:e3:d0:36:99:a6:61:07:2e:89:6e:3a:9e:d2:81:73: 80:4a:4d:d0:af:8f:88:55:b0:f4:03:5a:74:d6:f3:f3:ca:b8: b8:de:b6:2d:8d:d0:f2:41:0d:81:33:2f:29:0b:e6:51:bc:26: ae:77:f5:f0:08:56:ae:ae:96:23:6e:e0:b1:64:b0:cc:6a:c4: 26:8d:14:7c:06:a6:6c:5d:3d:2f:2f:fb:37:fc:8f:57:1b:1b: 9a:36:39:3a:f7:6d:a5:b3:a9:91:46:a5:8d:55:14:84:2e:18: b7:3d:a7:a6:b5:84:b9:3a:b1:ad:69:7b:c8:1c:8e:5a:e5:46: 53:16:9b:30:c0:b9:5e:44:0a:21:e5:d0:7a:8f:ff:3d:4e:34: c2:2a:bd:cd:b3:ca:ff:91:6d:2b:14:f3:6d:28:19:d4:81:1d: 37:67:db:9d:13:86:84:30:ff:d4:7c:cb:f8:15:bc:af:0e:45: 30:ba:3e:dd:23:b5:c0:5f:3e:b3:3b:f4:38:fb:95:48:dc:a2: c5:72:52:a9:f4:30:08:e9:25:27:67:6b:28:c0:fa:f0:c5:c4: 9c:9e:3c:3d:54:84:5b:1c:a3:87:bf:2f:8b:ce:2b:5c:ca:d0: 75:e6:a5:3b:9c:24:0c:13:36:2b:15:83:f4:2f:90:3c:ac:8e: 86:86:e2:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFfbu5A5IVdpVZ3pAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzNTQyOFoXDTI1MDUwNTEyNTQyOFowLzEtMCsGA1UEAxMk ODQ5ZDE3ODAtNjNjOC00NjFjLWI5N2YtM2Y5MTk2MDk2NGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq9WzT/PBxzP9lmS1cr87q6ER6nBdOH+YLWW j1KbEG1pkF3JjRtYqhkxQ3117WLDkzZB3IUXSfqi9z13+VqHPT72/Xt8LNG7tusp jsEZmBj/DDp6nUSmCINDSJMPhBa6RFdy1YEKJeqddK6M862NTVAHNEdQ2CRPKZTX uMu+wMeLYNpprHWScIbbUhVtIhs4bpy4T3hc4mSxcxeYewzxIXwdmreK9CUDDh8S LQrvDNkPwZ+KrLoW9VFi3gljoCvvjsK7AynCDUgpg/hvczPN/s3aOD+C0dD4SR4C isUPOnbM1EBxOdBj+O1ov7Az0CC+GoKp9Kdig3lK5RDgCaz4twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHz/ctJ8Eu8lIORHVbf12p+8mKRWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWRkZjNhN2UtYTU0Ni0z Zjg0LWIxMGQtMTI2ZTBmYjFlMTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRAYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhUsuPQNpmmYQcuiW46ntKBc4BKTdCvj4hVsPQDWnTW8/PKuLjeti2N 0PJBDYEzLykL5lG8Jq539fAIVq6uliNu4LFksMxqxCaNFHwGpmxdPS8v+zf8j1cb G5o2OTr3baWzqZFGpY1VFIQuGLc9p6a1hLk6sa1pe8gcjlrlRlMWmzDAuV5ECiHl 0HqP/z1ONMIqvc2zyv+RbSsU820oGdSBHTdn250ThoQw/9R8y/gVvK8ORTC6Pt0j tcBfPrM79Dj7lUjcosVyUqn0MAjpJSdnayjA+vDFxJyePD1UhFsco4e/L4vOK1zK 0HXmpTucJAwTNisVg/QvkDysjoaG4gE= -----END CERTIFICATE-----Generated at Sun Apr 6 05:53:12 2025 by rpki-client