$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d2538829-9160-3100-9c86-8f687f0b943e.roa File: d2538829-9160-3100-9c86-8f687f0b943e.roa (raw, json) Hash identifier: W7o50Go1aN7OFvUoKaxaFaC4/ZV94o0xj8Uc8U9W2Tc= Subject key identifier: CA:66:49:A2:29:DB:0D:1D:34:21:ED:4A:7B:92:33:47:3D:46:A9:62 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C260985076E95BF8DDCC1580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d2538829-9160-3100-9c86-8f687f0b943e.roa Signing time: Mon 03 Feb 2025 11:08:20 +0000 ROA not before: Mon 03 Feb 2025 11:08:20 +0000 ROA not after: Sun 04 May 2025 10:08:20 +0000 asID: 30036 IP address blocks: 173.19.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:60:98:50:76:e9:5b:f8:dd:cc:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 3 11:08:20 2025 GMT Not After : May 4 10:08:20 2025 GMT Subject: CN=c31d9760-4c66-4036-ae3d-643295266747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:dc:4a:1b:ca:64:f1:25:32:57:87:e1:82:98: 69:f1:ca:b3:2f:ac:6b:0f:d9:7f:7b:d3:98:01:4c: 8f:ef:58:82:d2:e9:72:e1:a7:7b:34:86:9c:b6:34: 40:fd:e0:9b:85:e2:ff:ee:32:e1:c4:40:41:4a:93: b0:b1:d9:04:8e:44:39:58:e1:1d:4c:cf:9c:e9:71: cd:25:ec:e3:a9:d4:50:69:62:20:a5:20:01:0f:34: 04:c6:8b:be:c0:58:c7:50:e3:35:b3:f4:c7:62:2a: 18:6b:79:87:5f:5c:bc:d6:85:09:6e:2f:19:c6:f1: ae:51:71:f6:80:dd:84:d2:a4:3e:fd:8e:18:bf:1f: 4d:7d:ee:9d:12:47:3f:e4:46:f4:34:7c:dc:1b:be: 09:62:61:e2:ac:d0:57:c8:36:51:dd:34:43:7b:6d: 5c:a0:49:87:9e:69:59:5e:70:79:a8:19:bb:3c:e9: d4:57:e7:f4:9c:b4:90:22:95:93:dd:24:d0:38:8f: 95:b9:b2:da:fa:df:b1:b9:e8:ea:08:fb:83:32:2e: 78:43:4f:cb:e4:44:98:6e:5d:d4:22:8e:1c:19:bc: 56:9c:cf:de:61:d7:3d:0a:79:28:94:30:db:f5:dc: 29:49:3c:84:aa:44:e7:ea:63:55:ae:8c:31:6d:ce: 66:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:66:49:A2:29:DB:0D:1D:34:21:ED:4A:7B:92:33:47:3D:46:A9:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d2538829-9160-3100-9c86-8f687f0b943e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:27:0c:21:47:6c:e5:bc:89:63:d7:c6:45:85:b1:ea:7f:f0: 93:9e:d6:e9:78:84:45:06:f1:cd:00:26:0c:90:2f:f5:c5:2a: e1:ac:2b:24:2e:59:b5:78:5c:1e:a3:ff:a5:68:29:76:18:10: a7:b6:75:89:47:56:af:b0:17:87:2e:e2:bd:e9:cc:35:00:eb: a1:e9:f8:fd:40:99:25:a3:24:79:6f:37:46:24:2d:6a:f1:ab: de:3d:02:27:39:c4:33:cf:df:11:62:65:83:78:11:0f:66:02: 42:30:2f:a6:66:89:2b:0b:0a:d3:7b:2f:65:5b:9a:4b:7e:1d: 1c:d0:b6:b6:1a:cf:16:47:0e:1f:e6:4a:2e:2c:5c:53:48:d2: 9f:19:2e:0a:e6:fc:4f:fd:af:84:a3:af:ee:40:d0:9d:03:49: 23:f0:bd:85:79:9d:35:7a:a4:c4:13:8c:f4:95:c9:1e:ee:75: 75:68:f8:e6:96:88:94:d6:25:e7:5a:cc:fd:02:e3:c8:4b:72: 51:96:d5:9f:69:9a:95:f8:ef:d0:86:3f:f6:36:89:95:61:2b: 49:96:ff:8e:5d:78:03:62:4b:90:7c:9f:3c:7f:22:7c:fb:73: 1a:6f:4a:26:da:28:f0:01:6c:7b:cf:24:11:7d:81:46:1a:fb: 85:52:25:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCYJhQdulb+N3MFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwMzExMDgyMFoXDTI1MDUwNDEwMDgyMFowLzEtMCsGA1UEAxMk YzMxZDk3NjAtNGM2Ni00MDM2LWFlM2QtNjQzMjk1MjY2NzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNxKG8pk8SUyV4fhgphp8cqzL6xrD9l/e9OY AUyP71iC0uly4ad7NIactjRA/eCbheL/7jLhxEBBSpOwsdkEjkQ5WOEdTM+c6XHN JezjqdRQaWIgpSABDzQExou+wFjHUOM1s/THYioYa3mHX1y81oUJbi8ZxvGuUXH2 gN2E0qQ+/Y4Yvx9Nfe6dEkc/5Eb0NHzcG74JYmHirNBXyDZR3TRDe21coEmHnmlZ XnB5qBm7POnUV+f0nLSQIpWT3STQOI+VubLa+t+xuejqCPuDMi54Q0/L5ESYbl3U Io4cGbxWnM/eYdc9CnkolDDb9dwpSTyEqkTn6mNVrowxbc5mfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpmSaIp2w0dNCHtSnuSM0c9RqliMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDI1Mzg4MjktOTE2MC0z MTAwLTljODYtOGY2ODdmMGI5NDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRP4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYnDCFHbOW8iWPXxkWFsep/8JOe1ul4hEUG8c0AJgyQL/XFKuGsKyQu WbV4XB6j/6VoKXYYEKe2dYlHVq+wF4cu4r3pzDUA66Hp+P1AmSWjJHlvN0YkLWrx q949Aic5xDPP3xFiZYN4EQ9mAkIwL6ZmiSsLCtN7L2Vbmkt+HRzQtrYazxZHDh/m Si4sXFNI0p8ZLgrm/E/9r4Sjr+5A0J0DSSPwvYV5nTV6pMQTjPSVyR7udXVo+OaW iJTWJedazP0C48hLclGW1Z9pmpX479CGP/Y2iZVhK0mW/45deANiS5B8nzx/Inz7 cxpvSibaKPABbHvPJBF9gUYa+4VSJfU= -----END CERTIFICATE-----Generated at Sun Apr 6 05:58:52 2025 by rpki-client