$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c87f2830-6d1c-3093-b462-64043c42ae00.roa File: c87f2830-6d1c-3093-b462-64043c42ae00.roa (raw, json) Hash identifier: 2tFT61cVaPxWmVnzDunfqDra9eTz+V1rdJovEjJStwI= Subject key identifier: 99:1B:DE:83:02:16:0D:05:A2:25:75:73:BD:51:A6:5C:09:D4:A8:0E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848B4D2F1AB318EB67F81E2BB00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c87f2830-6d1c-3093-b462-64043c42ae00.roa Signing time: Wed 29 Jan 2025 14:37:25 +0000 ROA not before: Wed 29 Jan 2025 14:37:25 +0000 ROA not after: Tue 29 Apr 2025 13:37:25 +0000 asID: 30036 IP address blocks: 173.19.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:d2:f1:ab:31:8e:b6:7f:81:e2:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 29 14:37:25 2025 GMT Not After : Apr 29 13:37:25 2025 GMT Subject: CN=68ed00ee-9bb8-4ac2-8212-7483330048ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d1:65:15:30:89:9b:85:84:e8:8c:75:23:9e: 73:35:0b:1d:97:4a:86:48:d3:73:15:42:44:a4:94: 4e:71:ae:e5:15:35:3c:21:1f:31:cd:e2:50:3c:81: 86:0a:2a:d8:9c:38:0e:43:1c:8f:0c:90:f1:0a:68: 8b:04:66:f3:2d:62:d4:38:f3:f1:ad:48:51:b3:aa: 26:33:34:a7:79:87:56:05:76:79:3c:39:f3:69:1e: 1c:0d:1b:5d:3d:bb:64:10:ff:ee:73:9b:9e:6c:53: 03:30:16:af:3a:18:5a:e6:34:0e:c6:85:a5:d8:e6: af:50:84:3e:ed:d5:b5:e1:bf:13:f7:89:97:44:20: 5c:a3:75:05:01:4a:be:48:24:da:59:cf:02:d8:03: 34:bf:8c:84:81:1e:bb:c7:81:ff:a6:e8:16:95:c3: 24:3f:13:82:0d:dd:2f:c8:f2:48:fa:4f:08:05:d2: 44:02:56:95:13:a5:54:9f:15:e1:eb:f1:93:75:7f: ed:20:9e:32:ca:98:de:a9:b8:6a:89:7d:37:1f:23: 9b:b0:aa:65:48:f0:86:d4:39:3d:b0:f3:7c:1d:ef: 39:83:2f:64:8b:f6:cf:70:ae:25:95:ff:d2:e6:c5: 52:4c:4b:b6:1a:99:12:5b:81:73:7d:a4:33:aa:60: 2c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:1B:DE:83:02:16:0D:05:A2:25:75:73:BD:51:A6:5C:09:D4:A8:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c87f2830-6d1c-3093-b462-64043c42ae00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:c7:b4:a8:4a:cf:4b:56:7c:6b:f3:74:68:e9:1e:45:07:ba: eb:a4:3c:b6:6f:44:f8:6b:ed:aa:a5:a2:3f:dd:ff:9a:53:66: f2:2c:89:96:06:7e:a2:41:27:71:30:42:bc:c3:82:b5:b8:53: eb:6a:c0:35:dd:df:b0:04:ab:f1:bb:5f:24:a0:74:f6:6a:1e: 6a:d3:2a:8c:0e:36:f6:68:57:7e:17:9e:d7:31:66:87:5b:c0: eb:fe:d3:43:9a:a8:56:f0:79:cf:3b:50:b5:51:10:1e:62:01: 70:9b:92:a8:b9:f4:aa:44:b6:3e:b5:78:5f:2e:f3:bf:2c:61: db:0f:78:9c:df:a3:8d:9c:b3:50:9d:4f:77:d8:79:8c:c1:2c: 80:2e:45:01:f1:1c:99:2a:e3:27:c1:24:a3:d6:d4:d9:39:f2: 66:3f:7b:51:0f:ed:d9:60:94:86:ea:73:01:33:98:ed:6d:9e: 3f:da:82:f0:9f:bd:f0:4e:2a:47:f0:9c:63:0f:16:ec:cd:00: b9:5d:5f:39:54:20:f2:03:a0:c2:24:d1:8d:f7:49:ed:f1:f4: eb:64:df:19:bb:4d:df:72:34:9a:f8:e7:98:81:36:b6:db:31: 03:29:77:04:47:3e:0c:9e:81:a6:a4:5e:79:59:bd:2f:72:88: 06:74:fb:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi00vGrMY62f4HiuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDEyOTE0MzcyNVoXDTI1MDQyOTEzMzcyNVowLzEtMCsGA1UEAxMk NjhlZDAwZWUtOWJiOC00YWMyLTgyMTItNzQ4MzMzMDA0OGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstFlFTCJm4WE6Ix1I55zNQsdl0qGSNNzFUJE pJROca7lFTU8IR8xzeJQPIGGCirYnDgOQxyPDJDxCmiLBGbzLWLUOPPxrUhRs6om MzSneYdWBXZ5PDnzaR4cDRtdPbtkEP/uc5uebFMDMBavOhha5jQOxoWl2OavUIQ+ 7dW14b8T94mXRCBco3UFAUq+SCTaWc8C2AM0v4yEgR67x4H/pugWlcMkPxOCDd0v yPJI+k8IBdJEAlaVE6VUnxXh6/GTdX/tIJ4yypjeqbhqiX03HyObsKplSPCG1Dk9 sPN8He85gy9ki/bPcK4llf/S5sVSTEu2GpkSW4FzfaQzqmAsOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkb3oMCFg0FoiV1c71RplwJ1KgOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzg3ZjI4MzAtNmQxYy0z MDkzLWI0NjItNjQwNDNjNDJhZTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArROHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXHtKhKz0tWfGvzdGjpHkUHuuukPLZvRPhr7aqloj/d/5pTZvIsiZYG fqJBJ3EwQrzDgrW4U+tqwDXd37AEq/G7XySgdPZqHmrTKowONvZoV34XntcxZodb wOv+00OaqFbwec87ULVREB5iAXCbkqi59KpEtj61eF8u878sYdsPeJzfo42cs1Cd T3fYeYzBLIAuRQHxHJkq4yfBJKPW1Nk58mY/e1EP7dlglIbqcwEzmO1tnj/agvCf vfBOKkfwnGMPFuzNALldXzlUIPIDoMIk0Y33Se3x9Otk3xm7Td9yNJr455iBNrbb MQMpdwRHPgyegaakXnlZvS9yiAZ0+2c= -----END CERTIFICATE-----Generated at Sun Apr 6 06:00:53 2025 by rpki-client