$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf80f08c-152d-3bb2-b48b-341b799003f6.roa File: cf80f08c-152d-3bb2-b48b-341b799003f6.roa (raw, json) Hash identifier: 3bi26Z8GR5dV6JnWPPe5qr7EfjacS/XgVBgetu82A6I= Subject key identifier: 09:27:70:02:E5:37:43:5D:83:90:91:69:65:6D:BB:94:D8:21:EE:14 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C577056BCB2C9EA8D6648EB0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf80f08c-152d-3bb2-b48b-341b799003f6.roa Signing time: Tue 04 Feb 2025 13:40:57 +0000 ROA not before: Tue 04 Feb 2025 13:40:57 +0000 ROA not after: Mon 05 May 2025 12:40:57 +0000 asID: 30036 IP address blocks: 173.24.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:77:05:6b:cb:2c:9e:a8:d6:64:8e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:40:57 2025 GMT Not After : May 5 12:40:57 2025 GMT Subject: CN=d866f690-eb48-4b26-a8fd-489d690ced5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:21:95:81:6f:c4:02:3b:c6:9b:48:fd:5b:92: 07:94:dd:f3:67:07:c9:24:ea:c7:1d:5c:5d:6b:ed: d5:f2:b4:59:93:fb:37:6a:d6:1b:6e:e4:77:fc:66: ec:8f:bd:f8:36:ec:33:bf:c7:7b:e8:08:e7:e0:d8: ab:0e:c7:0e:0b:39:7a:88:ea:f5:5f:4c:d7:f5:e3: 83:4b:5c:78:44:dc:fc:b9:26:dc:69:ce:98:3a:f1: 5b:01:90:f5:ef:07:9e:7a:b1:32:29:cd:93:fe:c4: 78:22:f8:4e:9b:5a:39:dc:90:ad:93:89:e2:04:20: 53:89:99:4c:47:49:67:69:7c:a8:17:15:21:79:7f: e0:3d:86:f1:f2:85:64:a0:67:a8:00:0f:99:49:f1: 7e:f2:f0:75:11:01:53:28:b2:fb:46:52:2b:79:d2: 97:83:3f:a4:2b:c7:55:c1:24:37:ed:84:a7:74:82: 99:c2:7e:55:3a:f2:87:5b:ae:5d:74:01:cc:6b:50: 2f:e1:b8:e0:2c:4a:37:4a:17:b1:7b:46:32:ef:86: 16:99:fc:b3:9f:8f:05:51:68:60:cf:8d:6f:95:bc: 2b:a0:5e:ad:f4:7e:d8:fc:c8:09:7f:62:29:90:01: 3c:c2:87:0f:05:74:32:63:d5:3b:2d:84:6e:79:56: 4e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:27:70:02:E5:37:43:5D:83:90:91:69:65:6D:BB:94:D8:21:EE:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf80f08c-152d-3bb2-b48b-341b799003f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:08:f5:82:71:d0:86:1d:28:88:5a:73:e1:6f:18:74:37:e1: f0:95:4b:6f:2d:e6:8a:4c:97:b8:4b:d0:f1:be:b9:91:0e:fe: cd:b9:2b:ed:22:d6:79:5a:eb:ab:ca:7f:9d:94:6d:af:fd:7d: 69:ef:6c:5b:55:1b:54:67:c7:8c:25:d0:75:d5:27:85:4f:10: 2f:d6:22:c8:60:43:aa:62:12:06:1c:93:9f:95:b2:d7:44:54: 96:a1:4a:4b:3e:ef:05:ec:70:b3:e3:f7:86:4f:62:ab:21:44: 46:fd:9c:71:0b:cd:7d:a7:49:3e:56:fa:66:21:c6:48:5f:26: ee:96:c9:2f:02:89:5c:5d:02:81:1c:bb:ef:a4:bf:11:ed:63: e8:a2:1c:0f:86:32:33:77:4a:d6:76:1c:be:4e:fb:ec:43:cf: 01:b4:f4:ac:a9:29:e5:07:58:1a:42:04:bc:d9:3e:b3:e0:3c: d8:c7:59:d3:21:90:8f:bc:2b:24:4e:a3:9f:91:3c:50:52:12: 3a:69:79:8c:0f:e7:af:e1:f7:5b:67:50:19:e7:45:c6:77:2b: cc:75:9f:29:31:7b:70:bf:68:6e:14:f2:a0:96:9c:eb:bf:ea: c1:d2:5a:04:a2:da:5d:cd:45:17:39:ca:0e:35:ce:07:a6:4b: 5e:ed:54:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFdwVryyyeqNZkjrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzNDA1N1oXDTI1MDUwNTEyNDA1N1owLzEtMCsGA1UEAxMk ZDg2NmY2OTAtZWI0OC00YjI2LWE4ZmQtNDg5ZDY5MGNlZDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniGVgW/EAjvGm0j9W5IHlN3zZwfJJOrHHVxd a+3V8rRZk/s3atYbbuR3/Gbsj734Nuwzv8d76Ajn4NirDscOCzl6iOr1X0zX9eOD S1x4RNz8uSbcac6YOvFbAZD17weeerEyKc2T/sR4IvhOm1o53JCtk4niBCBTiZlM R0lnaXyoFxUheX/gPYbx8oVkoGeoAA+ZSfF+8vB1EQFTKLL7RlIredKXgz+kK8dV wSQ37YSndIKZwn5VOvKHW65ddAHMa1Av4bjgLEo3Shexe0Yy74YWmfyzn48FUWhg z41vlbwroF6t9H7Y/MgJf2IpkAE8wocPBXQyY9U7LYRueVZOZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkncALlN0Ndg5CRaWVtu5TYIe4UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2Y4MGYwOGMtMTUyZC0z YmIyLWI0OGItMzQxYjc5OTAwM2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRiKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsI9YJx0IYdKIhac+FvGHQ34fCVS28t5opMl7hL0PG+uZEO/s25K+0i 1nla66vKf52Uba/9fWnvbFtVG1Rnx4wl0HXVJ4VPEC/WIshgQ6piEgYck5+VstdE VJahSks+7wXscLPj94ZPYqshREb9nHELzX2nST5W+mYhxkhfJu6WyS8CiVxdAoEc u++kvxHtY+iiHA+GMjN3StZ2HL5O++xDzwG09KypKeUHWBpCBLzZPrPgPNjHWdMh kI+8KyROo5+RPFBSEjppeYwP56/h91tnUBnnRcZ3K8x1nykxe3C/aG4U8qCWnOu/ 6sHSWgSi2l3NRRc5yg41zgemS17tVCc= -----END CERTIFICATE-----Generated at Sun Apr 6 05:53:18 2025 by rpki-client