$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdeeff8b-e99c-36bb-adc8-c206890065e5.roa File: cdeeff8b-e99c-36bb-adc8-c206890065e5.roa (raw, json) Hash identifier: jofblJtapSOjEDaPQvc8rE9BTwrpF+8SuAyF6p7GRBQ= Subject key identifier: 99:72:BB:F6:E7:90:4C:8B:ED:BF:53:3C:69:76:E8:DB:DE:26:FA:39 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C7F600AD904974955B662680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdeeff8b-e99c-36bb-adc8-c206890065e5.roa Signing time: Wed 05 Feb 2025 11:08:25 +0000 ROA not before: Wed 05 Feb 2025 11:08:25 +0000 ROA not after: Tue 06 May 2025 10:08:25 +0000 asID: 30036 IP address blocks: 173.17.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c7:f6:00:ad:90:49:74:95:5b:66:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 5 11:08:25 2025 GMT Not After : May 6 10:08:25 2025 GMT Subject: CN=2c5e0f1d-c0d4-49a3-9854-7bc0c3139295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:71:0a:60:42:35:a2:11:ae:cc:ed:f4:90:21: 21:07:8e:01:46:2b:15:c7:36:35:1c:85:25:dd:96: f1:e3:00:60:04:9e:c4:d1:b7:9f:6c:0a:3f:cc:68: 37:a3:ea:e5:6a:1e:c7:c7:e5:5d:78:cf:23:43:a4: 53:23:ea:1b:3c:5c:e8:57:ac:75:80:70:29:58:3d: ce:45:53:fa:be:40:d5:ba:4a:54:95:21:ff:6e:5f: bf:ea:cf:6d:b9:b9:1c:f9:65:cb:d7:ec:b3:99:b0: 10:a8:4b:e0:b3:91:d5:11:b5:f7:28:1d:a6:31:9f: 23:97:63:25:91:09:d2:f4:95:0c:54:ed:58:c1:46: 52:54:bc:19:1f:b8:36:33:80:4a:56:be:aa:fb:b0: 10:6d:8d:70:80:f4:ef:f1:4d:fa:c5:de:5d:77:80: d1:a4:c4:1f:77:f7:c3:f0:04:0c:b1:d4:ec:bb:61: 48:d5:18:3c:b0:62:86:49:5c:42:2a:e5:62:f5:95: c0:f3:f4:15:07:cb:12:3f:b0:ec:d9:ba:19:68:75: 14:5a:43:91:21:55:8b:b6:d9:b0:9b:dd:b1:3c:0d: ca:ef:17:b7:e2:b1:14:25:7a:52:cc:9c:c1:28:d3: 03:8f:4f:1e:78:5c:ad:92:e1:10:ab:44:f9:c7:44: 78:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:72:BB:F6:E7:90:4C:8B:ED:BF:53:3C:69:76:E8:DB:DE:26:FA:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdeeff8b-e99c-36bb-adc8-c206890065e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:f2:17:4a:ce:fd:5a:42:08:69:91:da:b1:f2:32:d1:8d:55: 48:bb:84:d5:5a:e3:c5:7d:8e:52:23:0e:3c:c6:67:de:6d:b5: 61:a8:13:e4:90:12:b1:d5:57:bf:04:17:9e:51:21:b9:07:4a: d5:28:ce:4c:45:fb:58:d4:7c:2e:79:7b:da:3b:7d:67:f8:af: 9f:c7:77:ab:c6:56:c9:7c:0e:7f:f4:37:df:85:15:2e:ed:bf: 06:6c:5d:3d:a1:fe:f5:c0:9a:a0:98:3a:7a:c7:6e:bc:c5:b8: 11:cd:27:54:b0:2e:62:c8:8c:2c:fd:d4:fc:86:46:40:5d:38: 15:97:63:07:03:3e:c9:42:dd:ee:10:47:0f:39:ff:bb:d5:04: 6f:47:2e:db:5c:4c:30:71:b6:cf:85:dd:7c:61:ea:7f:47:23: 49:4d:75:89:4d:ec:32:e2:02:03:e5:09:f0:72:a2:72:bd:c3: 6d:9e:ab:f4:10:57:46:c9:e4:38:51:79:0b:63:c6:6e:15:4b: 88:3c:d0:bd:03:52:0a:79:52:dc:bf:d9:a1:b4:2c:31:98:73: 6f:b2:12:2a:3d:7d:46:95:a6:75:c6:f7:8b:55:58:59:7a:65: 02:1c:90:ab:e3:fa:ed:e3:03:68:5c:0e:ac:2f:05:f6:4b:55: 86:f7:37:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjH9gCtkEl0lVtmJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNTExMDgyNVoXDTI1MDUwNjEwMDgyNVowLzEtMCsGA1UEAxMk MmM1ZTBmMWQtYzBkNC00OWEzLTk4NTQtN2JjMGMzMTM5Mjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnEKYEI1ohGuzO30kCEhB44BRisVxzY1HIUl 3Zbx4wBgBJ7E0befbAo/zGg3o+rlah7Hx+VdeM8jQ6RTI+obPFzoV6x1gHApWD3O RVP6vkDVukpUlSH/bl+/6s9tubkc+WXL1+yzmbAQqEvgs5HVEbX3KB2mMZ8jl2Ml kQnS9JUMVO1YwUZSVLwZH7g2M4BKVr6q+7AQbY1wgPTv8U36xd5dd4DRpMQfd/fD 8AQMsdTsu2FI1Rg8sGKGSVxCKuVi9ZXA8/QVB8sSP7Ds2boZaHUUWkORIVWLttmw m92xPA3K7xe34rEUJXpSzJzBKNMDj08eeFytkuEQq0T5x0R4AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlyu/bnkEyL7b9TPGl26NveJvo5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2RlZWZmOGItZTk5Yy0z NmJiLWFkYzgtYzIwNjg5MDA2NWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRGsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDyF0rO/VpCCGmR2rHyMtGNVUi7hNVa48V9jlIjDjzGZ95ttWGoE+SQ ErHVV78EF55RIbkHStUozkxF+1jUfC55e9o7fWf4r5/Hd6vGVsl8Dn/0N9+FFS7t vwZsXT2h/vXAmqCYOnrHbrzFuBHNJ1SwLmLIjCz91PyGRkBdOBWXYwcDPslC3e4Q Rw85/7vVBG9HLttcTDBxts+F3Xxh6n9HI0lNdYlN7DLiAgPlCfByonK9w22eq/QQ V0bJ5DhReQtjxm4VS4g80L0DUgp5Uty/2aG0LDGYc2+yEio9fUaVpnXG94tVWFl6 ZQIckKvj+u3jA2hcDqwvBfZLVYb3N2g= -----END CERTIFICATE-----Generated at Sun Apr 6 05:50:14 2025 by rpki-client