$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d1c79806-b6d0-3fc0-918f-0034600ce776.roa File: d1c79806-b6d0-3fc0-918f-0034600ce776.roa (raw, json) Hash identifier: NMW1v0zvIRHazeEVo4snAyI1L1fme7A49EEFBdW6umI= Subject key identifier: E7:06:04:19:5C:B2:89:BC:97:40:48:04:50:E0:DF:00:3A:A8:CF:B2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C576C2EA07DD766F77FF5080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d1c79806-b6d0-3fc0-918f-0034600ce776.roa Signing time: Tue 04 Feb 2025 13:40:25 +0000 ROA not before: Tue 04 Feb 2025 13:40:25 +0000 ROA not after: Mon 05 May 2025 12:40:25 +0000 asID: 30036 IP address blocks: 173.19.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:76:c2:ea:07:dd:76:6f:77:ff:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 13:40:25 2025 GMT Not After : May 5 12:40:25 2025 GMT Subject: CN=21713d6f-7600-4554-bc2f-362fa3ccf5a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a2:06:d8:71:c5:25:d7:9f:92:e2:f6:7d:60: ff:98:c0:a3:fa:ee:2e:56:96:ea:ae:b1:61:fd:d1: 56:2e:30:fe:c8:d6:8e:a2:3b:8e:5f:e8:e3:e2:8c: bd:2a:09:19:24:36:75:f8:bd:0e:72:33:e3:dd:1d: 87:29:2b:56:cf:1a:8d:48:9b:e7:9a:ea:fa:0c:63: 71:e5:1a:6a:ba:ea:5c:5d:00:40:a7:88:95:e5:14: 8d:6c:28:c1:1e:c7:b3:9b:ac:cf:3d:ef:18:47:fb: 7e:08:ed:f1:b5:de:6a:21:3f:8b:62:13:00:7d:7a: cc:45:e4:89:d8:f5:2c:20:c1:21:d3:4b:ce:6d:5a: 12:9b:1c:d5:a0:8e:a1:32:d7:c3:ce:24:b7:23:d5: 77:ba:42:5b:a3:9d:18:4c:ab:01:ba:b0:dc:73:7d: a7:92:41:3e:f9:74:20:39:e1:eb:90:00:30:d1:dd: eb:a4:f9:be:e5:39:d7:91:9a:c9:0b:bb:9e:23:6c: 3d:26:bc:85:7d:55:26:d1:86:50:78:a2:13:ee:0c: 73:54:b3:5e:69:eb:54:b3:5b:2e:a1:a9:4f:38:3e: 23:da:ce:d6:46:c9:da:b8:9b:da:45:fa:19:3c:62: df:ad:f5:38:2d:91:f5:f9:ad:82:10:30:08:e1:d4: 84:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:06:04:19:5C:B2:89:BC:97:40:48:04:50:E0:DF:00:3A:A8:CF:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d1c79806-b6d0-3fc0-918f-0034600ce776.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:31:9c:ba:44:b7:76:50:e1:a1:83:24:52:34:df:85:3d:91: d2:4a:d0:59:b6:17:36:f0:7b:81:23:8c:03:f8:38:1c:0a:94: ad:a5:7c:83:f8:28:2a:a4:7f:05:d5:63:95:1d:db:ae:ad:60: 7b:e0:19:5e:83:40:7e:e0:cf:c0:64:e6:2d:48:8f:e1:f5:16: 82:7f:3f:40:c3:e9:bf:90:c0:f5:fb:a8:3e:1a:f4:e6:9b:5b: 53:01:6f:4d:d7:46:9b:94:30:89:13:77:66:c7:93:6d:04:85: c3:9c:e2:eb:23:aa:8c:85:19:9a:b7:47:6a:97:27:f3:14:22: e5:70:cc:e7:28:a5:7b:e9:72:ad:6e:2b:af:a0:24:5e:7e:70: c5:81:60:8f:9e:2d:8c:f6:52:19:93:35:4e:2c:4c:a7:a5:37: 5d:11:8b:9d:0d:80:ff:81:3c:58:49:2e:b2:fa:fe:7d:3a:1f: 96:d5:ef:da:c2:a2:0d:58:8b:4c:7b:85:d4:ec:af:e7:7d:0e: 41:94:0c:7a:74:46:73:56:24:7a:4a:34:9a:07:1c:35:48:e6: 10:b9:41:18:28:43:54:be:a6:9c:36:c5:0b:0b:eb:00:b1:f2: f8:fe:24:b6:21:bf:42:a9:98:9e:ca:ae:23:0f:8b:20:d3:8a: e4:ab:66:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFdsLqB912b3f/UIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNDEzNDAyNVoXDTI1MDUwNTEyNDAyNVowLzEtMCsGA1UEAxMk MjE3MTNkNmYtNzYwMC00NTU0LWJjMmYtMzYyZmEzY2NmNWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6IG2HHFJdefkuL2fWD/mMCj+u4uVpbqrrFh /dFWLjD+yNaOojuOX+jj4oy9KgkZJDZ1+L0OcjPj3R2HKStWzxqNSJvnmur6DGNx 5RpquupcXQBAp4iV5RSNbCjBHsezm6zPPe8YR/t+CO3xtd5qIT+LYhMAfXrMReSJ 2PUsIMEh00vObVoSmxzVoI6hMtfDziS3I9V3ukJbo50YTKsBurDcc32nkkE++XQg OeHrkAAw0d3rpPm+5TnXkZrJC7ueI2w9JryFfVUm0YZQeKIT7gxzVLNeaetUs1su oalPOD4j2s7WRsnauJvaRfoZPGLfrfU4LZH1+a2CEDAI4dSEAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcGBBlcsom8l0BIBFDg3wA6qM+yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDFjNzk4MDYtYjZkMC0z ZmMwLTkxOGYtMDAzNDYwMGNlNzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRMDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQxnLpEt3ZQ4aGDJFI034U9kdJK0Fm2Fzbwe4EjjAP4OBwKlK2lfIP4 KCqkfwXVY5Ud266tYHvgGV6DQH7gz8Bk5i1Ij+H1FoJ/P0DD6b+QwPX7qD4a9Oab W1MBb03XRpuUMIkTd2bHk20EhcOc4usjqoyFGZq3R2qXJ/MUIuVwzOcopXvpcq1u K6+gJF5+cMWBYI+eLYz2UhmTNU4sTKelN10Ri50NgP+BPFhJLrL6/n06H5bV79rC og1Yi0x7hdTsr+d9DkGUDHp0RnNWJHpKNJoHHDVI5hC5QRgoQ1S+ppw2xQsL6wCx 8vj+JLYhv0KpmJ7KriMPiyDTiuSrZvk= -----END CERTIFICATE-----Generated at Sun Apr 6 05:58:43 2025 by rpki-client