$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af3520ed-e043-3001-b695-d4f401a42f6d.roa File: af3520ed-e043-3001-b695-d4f401a42f6d.roa (raw, json) Hash identifier: SdIVbFntlTj+4FXXqN749YKSrDBTxlpWRYazlw/NJSE= Subject key identifier: 56:47:C5:E5:2A:9D:FE:A3:D6:F9:F9:2B:66:28:F9:E1:4F:53:A2:98 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C7F678384862C49099080400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af3520ed-e043-3001-b695-d4f401a42f6d.roa Signing time: Wed 05 Feb 2025 11:09:21 +0000 ROA not before: Wed 05 Feb 2025 11:09:21 +0000 ROA not after: Tue 06 May 2025 10:09:21 +0000 asID: 30036 IP address blocks: 173.24.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c7:f6:78:38:48:62:c4:90:99:08:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 5 11:09:21 2025 GMT Not After : May 6 10:09:21 2025 GMT Subject: CN=a3a29242-bb79-4047-b7b9-947001e5fe8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:07:b7:32:65:42:33:e1:eb:d2:05:11:2a:9e: 47:52:4e:d0:82:60:47:51:a2:a5:4a:1b:1b:3c:0b: 67:41:26:f4:e9:0b:63:71:5e:94:ec:79:d4:61:73: 5d:07:98:f7:1d:00:5b:fa:fc:4d:eb:5f:c6:b9:47: 26:ce:14:8e:bc:50:f8:6f:ee:0e:82:e6:1f:d4:de: 7c:f7:30:ab:1b:24:eb:cf:b6:09:31:d2:32:f7:2a: cd:5b:68:30:70:2a:bb:a4:ea:ef:54:03:59:e8:2c: d8:17:53:bf:63:4c:9b:5c:84:5f:c5:6d:27:69:39: 83:a6:8a:28:6b:2a:4d:53:34:8d:d5:27:20:31:87: 99:7e:1b:4e:81:c3:70:f9:68:f1:b7:8b:30:70:26: b8:d3:bf:59:5d:d6:5e:0c:9a:80:25:5a:d0:82:ce: f1:be:c2:0e:12:cc:bc:e5:f8:78:48:40:44:3b:10: 6f:65:c6:2c:3d:02:db:1c:da:df:cb:73:8f:d7:be: d0:c8:a8:1c:78:cb:88:37:75:6b:d3:58:db:c2:4f: b3:ab:39:fe:79:06:16:2d:32:75:b5:f8:19:0f:bd: 1f:b2:2f:0f:89:b7:77:4c:a0:40:05:0e:c4:e0:be: 8f:b8:44:ba:7f:de:f4:20:03:7b:90:9e:59:c8:81: ce:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:47:C5:E5:2A:9D:FE:A3:D6:F9:F9:2B:66:28:F9:E1:4F:53:A2:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af3520ed-e043-3001-b695-d4f401a42f6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:c5:50:e4:a5:ce:44:cf:8a:a1:61:d5:cf:66:ed:02:fa:80: e0:6f:f1:cc:bc:21:ab:fb:20:2d:fa:d2:02:f6:f2:0e:8b:94: 71:10:ed:6e:2a:ea:f9:23:fc:61:6d:69:0f:c0:06:72:f6:64: 0c:b8:06:1c:bd:03:71:47:4c:dd:4b:9c:74:2c:20:40:1d:69: 12:8a:39:8f:d7:0a:2c:f6:f1:ab:10:26:5a:d6:77:d1:63:77: 38:a0:31:ce:8c:48:41:b3:fb:34:0f:ec:5f:0f:68:4e:e7:be: 87:72:17:9f:cf:e9:2f:b7:83:ba:d8:79:3d:61:1d:d8:fc:30: 1b:37:c1:86:51:79:88:83:07:4c:70:f8:4b:91:48:85:16:c2: e0:30:3a:ad:55:8e:08:a6:71:53:26:b8:b9:69:be:42:a7:f0: 13:15:ae:9a:e0:28:b2:14:47:25:ee:b7:fc:82:6d:5f:05:df: 38:92:76:ce:e9:8b:d3:05:3d:04:81:11:e2:9c:0e:8e:1e:0d: c8:48:a3:b3:9b:f4:a9:05:7f:11:c4:01:b0:58:07:0b:78:92: ab:2d:a9:3d:58:42:31:15:4f:27:47:32:55:93:d8:1f:d2:f6: f9:9b:e8:4b:d8:d8:20:12:29:b4:2b:80:97:ee:71:c0:cc:70: 1d:b3:de:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjH9ng4SGLEkJkIBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNTExMDkyMVoXDTI1MDUwNjEwMDkyMVowLzEtMCsGA1UEAxMk YTNhMjkyNDItYmI3OS00MDQ3LWI3YjktOTQ3MDAxZTVmZThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmge3MmVCM+Hr0gURKp5HUk7QgmBHUaKlShsb PAtnQSb06QtjcV6U7HnUYXNdB5j3HQBb+vxN61/GuUcmzhSOvFD4b+4OguYf1N58 9zCrGyTrz7YJMdIy9yrNW2gwcCq7pOrvVANZ6CzYF1O/Y0ybXIRfxW0naTmDpooo aypNUzSN1ScgMYeZfhtOgcNw+Wjxt4swcCa4079ZXdZeDJqAJVrQgs7xvsIOEsy8 5fh4SEBEOxBvZcYsPQLbHNrfy3OP177QyKgceMuIN3Vr01jbwk+zqzn+eQYWLTJ1 tfgZD70fsi8Pibd3TKBABQ7E4L6PuES6f970IAN7kJ5ZyIHOKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZHxeUqnf6j1vn5K2Yo+eFPU6KYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWYzNTIwZWQtZTA0My0z MDAxLWI2OTUtZDRmNDAxYTQyZjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRjCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjFUOSlzkTPiqFh1c9m7QL6gOBv8cy8Iav7IC360gL28g6LlHEQ7W4q 6vkj/GFtaQ/ABnL2ZAy4Bhy9A3FHTN1LnHQsIEAdaRKKOY/XCiz28asQJlrWd9Fj dzigMc6MSEGz+zQP7F8PaE7nvodyF5/P6S+3g7rYeT1hHdj8MBs3wYZReYiDB0xw +EuRSIUWwuAwOq1VjgimcVMmuLlpvkKn8BMVrprgKLIURyXut/yCbV8F3ziSds7p i9MFPQSBEeKcDo4eDchIo7Ob9KkFfxHEAbBYBwt4kqstqT1YQjEVTydHMlWT2B/S 9vmb6EvY2CASKbQrgJfuccDMcB2z3mQ= -----END CERTIFICATE-----Generated at Sun Apr 6 06:02:51 2025 by rpki-client