$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfabafe3-7463-3fa8-8663-620bcced1c28.roa File: cfabafe3-7463-3fa8-8663-620bcced1c28.roa (raw, json) Hash identifier: IgcSU8CRGcVbVd+Ld6BzSDzXOmjpaxBZw6WlovIO7j0= Subject key identifier: C8:85:46:F0:59:59:8F:31:74:72:73:83:FE:FA:CE:BF:6A:2E:28:18 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849463D80F7216D1E02EC8BE580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfabafe3-7463-3fa8-8663-620bcced1c28.roa Signing time: Sat 22 Mar 2025 16:44:20 +0000 ROA not before: Sat 22 Mar 2025 16:44:20 +0000 ROA not after: Fri 20 Jun 2025 16:44:20 +0000 asID: 30036 IP address blocks: 173.17.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:46:3d:80:f7:21:6d:1e:02:ec:8b:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 22 16:44:20 2025 GMT Not After : Jun 20 16:44:20 2025 GMT Subject: CN=120655b4-10f8-4c65-b9c7-ce1770beb479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:29:c1:1b:4e:14:70:14:90:a5:cf:58:e5:3a: fc:f3:d1:58:4e:cf:90:04:0f:cd:74:5b:ef:50:af: f9:2a:ed:5d:ea:af:04:6e:ac:fe:82:2c:d7:39:8d: 3f:87:11:6f:28:12:d9:29:8c:d9:a6:bf:72:3c:91: 3d:7a:13:ee:86:f7:c9:7b:02:7a:e6:a7:5c:76:4d: 2c:52:0f:f0:f0:09:99:89:e7:3f:8c:fa:e3:d5:36: 1f:59:32:a5:bb:0d:f3:71:7f:25:9a:34:0d:d5:89: 46:9f:b5:1f:6d:fc:b5:9f:93:74:41:49:0e:70:93: 7d:ce:f7:fe:2d:66:c4:ea:4b:a5:50:e2:f7:d0:2d: ec:67:37:46:09:76:fb:1a:b0:01:7b:c2:41:f0:70: bd:6d:59:1f:34:a0:9d:9d:bd:ce:ff:b7:d5:e0:69: 32:e1:fc:aa:71:7f:b1:81:aa:f3:ed:61:20:5b:96: c7:27:bb:32:97:f4:af:cb:49:61:15:c1:dc:42:ec: 9e:bd:d9:30:cd:e0:75:93:07:38:97:48:5e:39:27: f3:cc:c8:0d:b9:14:8b:cb:1c:cd:97:fa:07:a1:8c: 48:68:5d:80:ef:08:19:c9:c2:6d:28:dc:7e:b5:d6: 4b:81:59:77:36:e0:7b:53:52:3d:3a:5f:96:ea:36: 51:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:85:46:F0:59:59:8F:31:74:72:73:83:FE:FA:CE:BF:6A:2E:28:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfabafe3-7463-3fa8-8663-620bcced1c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:34:d3:b0:1f:43:fd:2a:33:d4:6d:ef:d6:67:64:56:e2:d7: 35:fc:a3:29:cc:96:30:c4:97:58:28:3f:21:64:26:8d:e8:18: af:76:5f:0b:30:c4:40:12:a8:59:fc:33:e9:4e:f3:74:49:2d: 68:fe:27:c2:ba:0a:c7:ff:cd:34:e3:0c:8b:a5:27:33:f8:19: c7:8f:f6:8c:b3:6d:5d:27:87:fc:a8:27:bc:a4:d4:5d:39:d7: 4d:e0:7c:5c:14:5e:9b:23:59:7c:c7:58:5b:4c:8c:1a:f8:a9: 9e:75:3b:eb:d4:01:15:d2:47:08:1c:8c:50:e3:44:de:7e:99: 52:61:5b:ce:74:7f:f6:d1:be:70:d9:1a:94:53:6f:79:17:6b: 3f:0e:f5:d5:65:56:66:c5:97:f0:a5:24:92:70:f5:bd:41:c0: 46:f2:9c:54:8f:2f:28:b3:48:10:aa:6f:66:15:e2:13:42:4a: ac:af:0a:2b:37:38:96:c7:bb:01:1e:c0:ed:28:0c:53:f4:14: 6e:71:62:55:16:a9:b2:7e:f5:b6:0d:ef:d9:c0:d8:70:dc:b0: dc:ce:4b:ba:85:59:f6:37:52:c9:6e:ad:c7:6f:1b:0d:83:13: 54:84:d5:df:9e:96:1c:cc:20:63:dc:74:84:ca:6f:73:17:d8: 98:3f:91:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElGPYD3IW0eAuyL5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDMyMjE2NDQyMFoXDTI1MDYyMDE2NDQyMFowLzEtMCsGA1UEAxMk MTIwNjU1YjQtMTBmOC00YzY1LWI5YzctY2UxNzcwYmViNDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCnBG04UcBSQpc9Y5Tr889FYTs+QBA/NdFvv UK/5Ku1d6q8Ebqz+gizXOY0/hxFvKBLZKYzZpr9yPJE9ehPuhvfJewJ65qdcdk0s Ug/w8AmZiec/jPrj1TYfWTKluw3zcX8lmjQN1YlGn7Ufbfy1n5N0QUkOcJN9zvf+ LWbE6kulUOL30C3sZzdGCXb7GrABe8JB8HC9bVkfNKCdnb3O/7fV4Gky4fyqcX+x garz7WEgW5bHJ7syl/Svy0lhFcHcQuyevdkwzeB1kwc4l0heOSfzzMgNuRSLyxzN l/oHoYxIaF2A7wgZycJtKNx+tdZLgVl3NuB7U1I9Ol+W6jZRpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiFRvBZWY8xdHJzg/76zr9qLigYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2ZhYmFmZTMtNzQ2My0z ZmE4LTg2NjMtNjIwYmNjZWQxYzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrREYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACU007AfQ/0qM9Rt79ZnZFbi1zX8oynMljDEl1goPyFkJo3oGK92Xwsw xEASqFn8M+lO83RJLWj+J8K6Csf/zTTjDIulJzP4GceP9oyzbV0nh/yoJ7yk1F05 103gfFwUXpsjWXzHWFtMjBr4qZ51O+vUARXSRwgcjFDjRN5+mVJhW850f/bRvnDZ GpRTb3kXaz8O9dVlVmbFl/ClJJJw9b1BwEbynFSPLyizSBCqb2YV4hNCSqyvCis3 OJbHuwEewO0oDFP0FG5xYlUWqbJ+9bYN79nA2HDcsNzOS7qFWfY3UslurcdvGw2D E1SE1d+elhzMIGPcdITKb3MX2Jg/kQQ= -----END CERTIFICATE-----Generated at Sun Apr 6 05:54:41 2025 by rpki-client