$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c210c397-ff23-3af1-981e-1d7737900b8b.roa File: c210c397-ff23-3af1-981e-1d7737900b8b.roa (raw, json) Hash identifier: UDzeNiGv83JGHE/RlL6ZjKwwDaHOf6bu+tuSKI3ZnAg= Subject key identifier: 35:DE:9E:0C:82:C2:E5:78:26:B0:50:1F:93:11:38:B1:34:9F:4F:3F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C57D02633CEC549852090844 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c210c397-ff23-3af1-981e-1d7737900b8b.roa Signing time: Tue 04 Feb 2025 13:53:01 +0000 ROA not before: Tue 04 Feb 2025 13:53:01 +0000 ROA not after: Mon 05 May 2025 12:53:01 +0000 asID: 30036 IP address blocks: 173.24.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:7d:02:63:3c:ec:54:98:52:09:08:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:53:01 2025 GMT Not After : May 5 12:53:01 2025 GMT Subject: CN=d35d5f69-3185-4b96-ba5a-25162fcfe471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:77:4d:a0:02:d6:86:50:74:92:ef:6e:2e:c9: 60:c8:b7:09:ab:dc:81:60:a7:1c:a7:a5:78:c9:f0: 8c:8c:14:24:fa:05:36:d0:27:cb:1a:bd:43:b1:fe: 47:1f:f9:91:6c:89:ee:35:8c:b2:22:63:fb:63:7b: cb:5c:05:32:4c:3c:d4:db:fd:86:47:7d:e9:7b:c0: ce:2b:38:36:13:a0:9b:77:e8:b5:09:31:e2:b2:e4: e8:28:d7:cb:73:5f:9f:9f:4e:2d:e7:98:2b:57:c5: 6d:69:aa:89:48:54:6e:33:04:86:59:c9:bf:12:f8: 7a:96:46:f4:62:97:08:25:58:b9:bd:2a:61:58:04: 2e:17:86:b3:c0:46:f9:0d:e3:31:70:a5:25:20:48: 44:5c:ee:e4:e0:05:74:77:ee:ce:e6:ee:b6:10:9c: 92:01:68:da:a6:f7:61:40:ac:49:48:f1:ed:75:09: e8:c2:2c:5b:79:73:d6:59:a9:3c:e7:57:19:b4:c7: 57:f6:8f:fa:57:33:65:3d:f8:26:16:2f:f5:ce:fc: b2:01:bc:b8:ca:7c:d2:d1:c7:62:ae:e6:32:88:6d: ce:e4:55:3a:20:10:b2:9a:be:97:71:a9:19:ab:4d: 26:1b:c4:73:55:5c:87:19:76:91:ab:46:fc:46:76: af:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:DE:9E:0C:82:C2:E5:78:26:B0:50:1F:93:11:38:B1:34:9F:4F:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c210c397-ff23-3af1-981e-1d7737900b8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:c5:ba:ab:ed:56:c1:f8:1a:43:dd:78:f6:8d:fe:6c:60:c0: ee:30:2f:d7:84:f4:4a:b2:ae:02:ac:5b:89:8b:96:65:75:b8: f0:fb:c3:18:b9:0e:36:75:eb:a2:85:93:8c:d9:0d:d5:02:c1: bc:8b:6f:49:16:5e:c7:33:bb:26:32:46:74:64:a2:eb:57:ce: 05:e2:fe:d6:16:9b:c6:6d:f7:66:e2:7b:61:53:0f:99:12:e8: 50:63:a5:6a:45:bf:ab:b2:ff:c7:d7:ad:c5:5c:5f:2c:f2:19: 88:81:00:9e:28:de:5b:3d:e6:e1:74:d5:d9:f7:e7:7f:a9:87: 9d:46:9d:0d:2a:28:3c:9d:cd:62:24:32:01:fa:17:11:95:c0: 17:10:66:ef:97:0e:b5:8e:99:c0:e5:dc:d9:33:f6:d1:e5:84: 1b:1b:6f:a7:fd:06:b4:da:f8:d0:fd:15:e8:67:21:0d:0c:c2: d4:e8:b6:3e:68:67:dc:da:30:7f:cb:9f:3a:ae:88:bb:9b:fc: 1f:b7:e7:66:a2:b8:85:e9:14:70:63:be:49:ab:a6:c6:fe:12: 7b:17:ee:a0:f7:cc:24:1d:6d:cf:ff:08:53:0d:e4:15:15:79: 9f:c9:38:28:9b:51:d8:db:5e:0b:f6:57:58:ed:c1:97:1a:35: d0:8a:8e:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFfQJjPOxUmFIJCEQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzNTMwMVoXDTI1MDUwNTEyNTMwMVowLzEtMCsGA1UEAxMk ZDM1ZDVmNjktMzE4NS00Yjk2LWJhNWEtMjUxNjJmY2ZlNDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtndNoALWhlB0ku9uLslgyLcJq9yBYKccp6V4 yfCMjBQk+gU20CfLGr1Dsf5HH/mRbInuNYyyImP7Y3vLXAUyTDzU2/2GR33pe8DO Kzg2E6Cbd+i1CTHisuToKNfLc1+fn04t55grV8VtaaqJSFRuMwSGWcm/Evh6lkb0 YpcIJVi5vSphWAQuF4azwEb5DeMxcKUlIEhEXO7k4AV0d+7O5u62EJySAWjapvdh QKxJSPHtdQnowixbeXPWWak851cZtMdX9o/6VzNlPfgmFi/1zvyyAby4ynzS0cdi ruYyiG3O5FU6IBCymr6XcakZq00mG8RzVVyHGXaRq0b8RnavewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXengyCwuV4JrBQH5MROLE0n08/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzIxMGMzOTctZmYyMy0z YWYxLTk4MWUtMWQ3NzM3OTAwYjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRgoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXFuqvtVsH4GkPdePaN/mxgwO4wL9eE9EqyrgKsW4mLlmV1uPD7wxi5 DjZ166KFk4zZDdUCwbyLb0kWXsczuyYyRnRkoutXzgXi/tYWm8Zt92bie2FTD5kS 6FBjpWpFv6uy/8fXrcVcXyzyGYiBAJ4o3ls95uF01dn353+ph51GnQ0qKDydzWIk MgH6FxGVwBcQZu+XDrWOmcDl3Nkz9tHlhBsbb6f9BrTa+ND9FehnIQ0MwtTotj5o Z9zaMH/LnzquiLub/B+352aiuIXpFHBjvkmrpsb+EnsX7qD3zCQdbc//CFMN5BUV eZ/JOCibUdjbXgv2V1jtwZcaNdCKjvQ= -----END CERTIFICATE-----Generated at Sun Apr 6 05:53:00 2025 by rpki-client