$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2dc53d9-80cf-32de-aa99-2f117257a0db.roa File: b2dc53d9-80cf-32de-aa99-2f117257a0db.roa (raw, json) Hash identifier: e4iph3529Bp7I+PedIBTvM5jz8+gFO8VEUaKwPXfXHg= Subject key identifier: 4E:19:51:D6:E7:5E:76:07:EA:4C:23:DC:60:85:B1:B7:9A:7A:96:B7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C7F72C47AD24E26110978C00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2dc53d9-80cf-32de-aa99-2f117257a0db.roa Signing time: Wed 05 Feb 2025 11:10:46 +0000 ROA not before: Wed 05 Feb 2025 11:10:46 +0000 ROA not after: Tue 06 May 2025 10:10:46 +0000 asID: 30036 IP address blocks: 173.19.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c7:f7:2c:47:ad:24:e2:61:10:97:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 5 11:10:46 2025 GMT Not After : May 6 10:10:46 2025 GMT Subject: CN=c2a34095-9393-454d-8e6e-b39dd33c20c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1f:2b:e3:c2:1b:54:09:4c:4f:66:8d:f5:1a: 01:a4:14:20:1a:3f:9f:1d:91:de:50:27:a2:9c:b1: cc:d2:74:9e:fd:65:c4:3e:34:91:33:ee:98:24:6e: 6a:69:11:7e:f7:91:04:88:71:69:0e:db:77:6c:6b: f7:ed:7e:49:be:1d:a7:35:c7:0e:58:d7:a2:86:dc: b3:61:8b:57:13:ea:ed:5e:32:1b:66:76:85:95:42: 5d:aa:a7:37:0a:c1:58:0a:f9:0d:2a:cc:ad:ea:40: 03:8e:cb:53:f0:a4:c1:8f:61:d1:27:56:a9:a7:f6: b8:5d:dc:d7:b1:89:d4:c0:e9:50:20:b3:37:f6:a1: be:7e:61:f5:3c:d0:a3:22:8d:cc:ed:19:aa:90:f5: 58:58:86:ce:58:ae:ef:7e:88:96:ec:c5:13:4a:52: e3:e2:53:5c:e6:67:6e:c3:c0:d5:89:13:5c:0a:fa: 45:63:c9:9a:a0:b7:00:3f:cb:9f:57:66:d3:c8:f3: 72:ad:84:f7:fb:9c:7d:98:1b:d7:54:11:ee:d0:58: 15:22:77:17:8f:70:d3:92:45:59:b2:9e:73:26:fc: 09:13:92:e0:7d:10:1a:4e:33:e8:6b:49:52:3d:02: f8:6b:c1:60:ea:84:af:ac:a7:e1:51:2d:c6:76:f8: f1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:19:51:D6:E7:5E:76:07:EA:4C:23:DC:60:85:B1:B7:9A:7A:96:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2dc53d9-80cf-32de-aa99-2f117257a0db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:43:91:1e:f8:66:ea:85:9c:55:60:02:a3:e4:0c:5b:0b:74: e6:2e:69:b2:61:4d:d0:67:49:32:be:56:2e:67:65:58:f7:a7: 12:d3:4b:8f:8f:97:28:71:1b:e2:15:57:fe:93:de:03:b9:dd: 35:4b:a2:5e:29:2a:8f:9e:be:5b:c8:a2:96:2e:bb:cf:7d:53: 28:bc:66:4d:17:47:a9:6d:a9:c1:ed:df:24:8e:a2:8e:75:eb: a1:ae:49:df:d9:d8:31:6a:96:aa:dc:18:51:58:db:29:09:05: da:31:9a:98:41:84:ca:3a:15:7f:ce:a6:02:b2:a0:cb:eb:97: a6:e1:57:d3:0a:1f:60:0a:fe:38:a0:1a:f2:90:0e:7e:23:03: c6:2f:84:dc:0a:3f:5d:7a:79:50:77:e3:ac:32:76:45:de:10: 4f:af:bf:9a:12:d3:47:47:c1:6c:7e:d3:6a:0c:7d:46:e4:19: 9a:a7:9e:b0:49:48:d2:3a:94:24:ab:ec:96:94:1a:f3:a6:5c: da:2c:db:6b:77:2f:8c:74:03:7e:6d:ce:a6:c7:64:3b:92:a9: f2:5f:f9:8d:df:b0:53:8d:e8:5d:9c:7b:fe:87:e4:da:1e:2f: 49:16:88:2a:0c:8a:ed:a6:4d:67:21:19:0d:8e:ef:d3:67:14: ba:01:d4:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjH9yxHrSTiYRCXjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNTExMTA0NloXDTI1MDUwNjEwMTA0NlowLzEtMCsGA1UEAxMk YzJhMzQwOTUtOTM5My00NTRkLThlNmUtYjM5ZGQzM2MyMGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh8r48IbVAlMT2aN9RoBpBQgGj+fHZHeUCei nLHM0nSe/WXEPjSRM+6YJG5qaRF+95EEiHFpDtt3bGv37X5Jvh2nNccOWNeihtyz YYtXE+rtXjIbZnaFlUJdqqc3CsFYCvkNKsyt6kADjstT8KTBj2HRJ1app/a4XdzX sYnUwOlQILM39qG+fmH1PNCjIo3M7RmqkPVYWIbOWK7vfoiW7MUTSlLj4lNc5mdu w8DViRNcCvpFY8maoLcAP8ufV2bTyPNyrYT3+5x9mBvXVBHu0FgVIncXj3DTkkVZ sp5zJvwJE5LgfRAaTjPoa0lSPQL4a8Fg6oSvrKfhUS3Gdvjx3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4ZUdbnXnYH6kwj3GCFsbeaepa3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjJkYzUzZDktODBjZi0z MmRlLWFhOTktMmYxMTcyNTdhMGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRPiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBDkR74ZuqFnFVgAqPkDFsLdOYuabJhTdBnSTK+Vi5nZVj3pxLTS4+P lyhxG+IVV/6T3gO53TVLol4pKo+evlvIopYuu899Uyi8Zk0XR6ltqcHt3ySOoo51 66GuSd/Z2DFqlqrcGFFY2ykJBdoxmphBhMo6FX/OpgKyoMvrl6bhV9MKH2AK/jig GvKQDn4jA8YvhNwKP116eVB346wydkXeEE+vv5oS00dHwWx+02oMfUbkGZqnnrBJ SNI6lCSr7JaUGvOmXNos22t3L4x0A35tzqbHZDuSqfJf+Y3fsFON6F2ce/6H5Noe L0kWiCoMiu2mTWchGQ2O79NnFLoB1NI= -----END CERTIFICATE-----Generated at Wed Apr 9 14:04:48 2025 by rpki-client