$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bef6690b-afb0-3fee-af74-eb26790247da.roa File: bef6690b-afb0-3fee-af74-eb26790247da.roa (raw, json) Hash identifier: iqCBW8EFi9kGfcSLTL6LEH1F3iXsh/o9iQ1+s7R1UFI= Subject key identifier: DB:52:1E:D3:C2:D9:0D:7D:2E:A8:90:75:6E:A6:78:80:CC:CC:5C:41 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C576FA1EA28A16256B3D0E00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bef6690b-afb0-3fee-af74-eb26790247da.roa Signing time: Tue 04 Feb 2025 13:40:51 +0000 ROA not before: Tue 04 Feb 2025 13:40:51 +0000 ROA not after: Mon 05 May 2025 12:40:51 +0000 asID: 30036 IP address blocks: 173.23.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:76:fa:1e:a2:8a:16:25:6b:3d:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:40:51 2025 GMT Not After : May 5 12:40:51 2025 GMT Subject: CN=ac5348fa-a201-451d-9ba5-edd630337ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:38:fb:b3:74:59:3c:2d:f8:45:dc:b8:bc:18: bc:47:ce:a0:07:48:1c:05:3f:11:25:ba:5d:b4:c8: 82:e1:46:0b:53:dc:92:8b:ff:13:ac:14:10:92:68: dc:ac:f5:40:e6:ea:2b:8a:85:35:d7:58:86:f3:40: c6:57:a0:18:c4:d8:6e:07:45:e4:67:a8:7b:2a:9f: 15:cc:d7:07:25:18:59:06:24:0f:37:87:8c:04:0d: 17:cf:49:0d:b6:a1:ea:cd:69:d4:61:f6:5c:fd:79: 51:a5:cb:c4:98:2b:a1:6b:48:35:fe:5f:bd:fd:92: d1:8c:6a:82:b4:75:06:47:85:d8:91:2b:f3:e9:9c: 87:c3:a2:f2:da:ce:1f:90:d4:5d:39:13:2d:2c:2d: d7:f3:8f:fc:5d:44:d9:6c:5e:93:23:20:f8:fe:56: eb:42:36:60:bc:75:a1:81:56:f2:e3:b8:98:21:7b: ff:0a:89:c2:f7:41:4c:98:e9:25:07:c2:3d:6c:d3: 1b:d4:8f:65:f2:22:38:c9:e8:c8:12:96:d2:32:2f: 5a:89:41:a4:2f:3a:e4:b1:cd:96:f8:2b:b7:20:d8: e0:eb:4b:68:ad:56:5b:b6:0b:5c:75:7d:e6:5a:ef: 91:5d:7d:bc:f6:b8:67:42:70:ef:e7:4b:1b:8a:a2: 2c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:52:1E:D3:C2:D9:0D:7D:2E:A8:90:75:6E:A6:78:80:CC:CC:5C:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bef6690b-afb0-3fee-af74-eb26790247da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:29:42:22:94:52:7a:58:ae:27:ec:6c:c8:96:7c:8a:3e:dc: 93:f4:f6:52:b2:21:34:46:8a:39:3e:9e:50:f9:06:c6:ed:b5: 94:aa:a4:0a:35:20:de:81:29:be:b6:0a:c8:55:13:bb:98:9a: 80:63:78:e5:3f:c0:7a:96:29:e4:d1:5b:c0:11:37:08:8d:4a: b4:51:7b:24:28:3e:66:da:e8:d2:0f:4b:77:44:a9:1e:7c:5a: 10:22:18:80:cc:7a:cc:7d:19:5f:44:86:fd:9d:5f:4b:f9:b4: 9d:cc:12:ce:01:57:64:9c:ae:2b:9b:73:13:cc:a1:ae:6a:f2: 63:8a:b6:4e:16:03:7b:0c:8f:3a:3c:1c:dd:b3:98:1b:61:8c: 31:bc:37:fd:1f:a5:42:d5:b6:8f:40:89:a6:02:3d:b6:96:7d: 2c:d2:a9:29:6e:d8:1f:77:8c:1b:cd:84:0b:42:2c:7c:2d:35: 9c:9d:24:2a:2e:c9:57:77:7f:f4:45:b7:9a:8a:64:6d:b7:5f: d3:9b:07:5e:68:4e:82:78:e8:74:d2:aa:66:da:cb:3d:35:bb: ae:e2:93:9a:fe:d8:2a:04:03:d8:d4:f4:1f:60:cf:35:55:73: b9:3b:62:be:34:25:4c:9d:15:53:19:df:af:04:ce:6b:4e:63: af:08:a4:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFdvoeoooWJWs9DgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzNDA1MVoXDTI1MDUwNTEyNDA1MVowLzEtMCsGA1UEAxMk YWM1MzQ4ZmEtYTIwMS00NTFkLTliYTUtZWRkNjMwMzM3YWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTj7s3RZPC34Rdy4vBi8R86gB0gcBT8RJbpd tMiC4UYLU9ySi/8TrBQQkmjcrPVA5uorioU111iG80DGV6AYxNhuB0XkZ6h7Kp8V zNcHJRhZBiQPN4eMBA0Xz0kNtqHqzWnUYfZc/XlRpcvEmCuha0g1/l+9/ZLRjGqC tHUGR4XYkSvz6ZyHw6Ly2s4fkNRdORMtLC3X84/8XUTZbF6TIyD4/lbrQjZgvHWh gVby47iYIXv/ConC90FMmOklB8I9bNMb1I9l8iI4yejIEpbSMi9aiUGkLzrksc2W +Cu3INjg60torVZbtgtcdX3mWu+RXX289rhnQnDv50sbiqIskwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtSHtPC2Q19LqiQdW6meIDMzFxBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmVmNjY5MGItYWZiMC0z ZmVlLWFmNzQtZWIyNjc5MDI0N2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArReCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYpQiKUUnpYrifsbMiWfIo+3JP09lKyITRGijk+nlD5BsbttZSqpAo1 IN6BKb62CshVE7uYmoBjeOU/wHqWKeTRW8ARNwiNSrRReyQoPmba6NIPS3dEqR58 WhAiGIDMesx9GV9Ehv2dX0v5tJ3MEs4BV2ScriubcxPMoa5q8mOKtk4WA3sMjzo8 HN2zmBthjDG8N/0fpULVto9AiaYCPbaWfSzSqSlu2B93jBvNhAtCLHwtNZydJCou yVd3f/RFt5qKZG23X9ObB15oToJ46HTSqmbayz01u67ik5r+2CoEA9jU9B9gzzVV c7k7Yr40JUydFVMZ368EzmtOY68IpN0= -----END CERTIFICATE-----Generated at Sun Apr 6 05:59:25 2025 by rpki-client