$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d3685990-50fb-3570-9cfb-7c107d3b6972.roa File: d3685990-50fb-3570-9cfb-7c107d3b6972.roa (raw, json) Hash identifier: Y/a7sSBeLgTBKO4CssZFHRvxZLbXTembcnoKm+dcx98= Subject key identifier: EB:B1:9A:4A:15:44:52:43:AE:86:B3:22:AB:90:FD:BF:3D:A7:0F:15 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848C7F704C63B90FBEFD24D2CC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d3685990-50fb-3570-9cfb-7c107d3b6972.roa Signing time: Wed 05 Feb 2025 11:10:28 +0000 ROA not before: Wed 05 Feb 2025 11:10:28 +0000 ROA not after: Tue 06 May 2025 10:10:28 +0000 asID: 30036 IP address blocks: 173.18.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c7:f7:04:c6:3b:90:fb:ef:d2:4d:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 5 11:10:28 2025 GMT Not After : May 6 10:10:28 2025 GMT Subject: CN=b7665b3a-bb31-4ebd-83a7-e709eda9ef2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fb:0d:35:9f:30:a6:d2:a9:2b:0b:da:2a:15: a6:6e:61:8d:3b:cc:ca:9d:b2:2a:ad:6a:b2:49:24: b7:80:62:37:85:51:b3:c2:4d:ba:37:4b:5c:c9:3c: 24:86:d7:a3:3c:ea:9e:68:c8:ca:66:2b:fb:8d:91: 89:20:43:8f:8e:c2:81:fa:65:78:10:b2:1e:9e:3f: d1:06:8a:ef:10:df:6f:bd:9e:d3:06:e4:25:37:0a: 9e:7a:8f:45:8a:0b:7e:53:5d:5a:33:ee:57:e4:f7: be:17:e6:f4:28:00:f0:fa:ac:71:7d:98:91:5c:6d: 2c:34:87:21:21:75:b9:bb:cf:27:17:bd:02:1f:2c: 0c:a5:37:4e:ec:e7:13:b2:14:ea:1a:c7:52:75:9c: df:60:73:8e:1b:3b:d7:e8:a6:3d:db:58:3b:5f:f0: 83:f5:e1:0e:9e:95:8f:c5:59:7a:fd:c5:c1:02:6e: 56:1f:4b:e3:fe:79:f5:16:47:2e:7f:1a:ee:21:a4: dd:be:c1:67:83:3c:10:c5:ad:3f:7a:ea:07:b4:06: b9:e6:b2:ca:b7:c5:d9:17:86:d7:03:90:69:1a:e5: e5:82:61:24:94:79:72:b4:3f:67:c0:d4:53:16:56: a3:1d:31:ac:41:74:6d:55:2c:66:b6:70:0f:84:65: 66:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B1:9A:4A:15:44:52:43:AE:86:B3:22:AB:90:FD:BF:3D:A7:0F:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d3685990-50fb-3570-9cfb-7c107d3b6972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:32:a9:65:ab:e8:8e:08:ff:6a:a9:b0:c7:7c:c7:40:03:89: cc:f8:b7:79:de:4c:8c:41:35:a4:f3:e2:71:80:d0:6d:23:20: 96:40:de:11:35:ec:26:d9:7a:f0:21:b3:56:2d:ce:d7:66:b3: 10:43:83:18:48:bd:9b:42:1b:0a:0d:5c:05:d4:19:05:3a:fd: ef:4f:fd:b6:f6:ed:f0:22:0b:21:a7:7f:a9:9a:8d:b0:6d:7a: 0b:11:fd:48:f6:36:58:2b:7e:8d:a7:fc:5c:34:22:a4:dd:da: 05:ae:2b:d3:f6:2d:a9:f0:08:38:31:ba:7b:c5:2f:52:5c:c0: 1c:5e:bf:25:a4:5b:0f:8a:e2:af:7e:77:a7:bc:eb:90:82:47: 66:65:28:31:ce:3c:ec:ba:47:7c:14:a3:f4:47:56:e7:3b:12: 73:9f:ca:2a:0d:97:a7:3b:95:6c:1d:c7:9c:70:50:4a:89:82: 30:1c:f2:2a:f7:31:27:de:87:87:4c:d0:6f:0e:ae:cf:03:27: b5:1d:bc:1d:50:98:35:da:fb:aa:41:2b:dd:60:30:f0:cb:b7: 1a:61:7f:ca:f7:ea:e4:c4:de:31:21:45:e0:88:af:7e:1e:55: 8b:3a:52:8a:6a:c4:8f:ff:d9:d4:48:c8:6d:40:70:9d:e4:73: 7b:03:62:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjH9wTGO5D779JNLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDIwNTExMTAyOFoXDTI1MDUwNjEwMTAyOFowLzEtMCsGA1UEAxMk Yjc2NjViM2EtYmIzMS00ZWJkLTgzYTctZTcwOWVkYTllZjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvsNNZ8wptKpKwvaKhWmbmGNO8zKnbIqrWqy SSS3gGI3hVGzwk26N0tcyTwkhtejPOqeaMjKZiv7jZGJIEOPjsKB+mV4ELIenj/R BorvEN9vvZ7TBuQlNwqeeo9Figt+U11aM+5X5Pe+F+b0KADw+qxxfZiRXG0sNIch IXW5u88nF70CHywMpTdO7OcTshTqGsdSdZzfYHOOGzvX6KY921g7X/CD9eEOnpWP xVl6/cXBAm5WH0vj/nn1FkcufxruIaTdvsFngzwQxa0/euoHtAa55rLKt8XZF4bX A5BpGuXlgmEklHlytD9nwNRTFlajHTGsQXRtVSxmtnAPhGVmiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOuxmkoVRFJDroazIquQ/b89pw8VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDM2ODU5OTAtNTBmYi0z NTcwLTljZmItN2MxMDdkM2I2OTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRIJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIyqWWr6I4I/2qpsMd8x0ADicz4t3neTIxBNaTz4nGA0G0jIJZA3hE1 7CbZevAhs1YtztdmsxBDgxhIvZtCGwoNXAXUGQU6/e9P/bb27fAiCyGnf6majbBt egsR/Uj2Nlgrfo2n/Fw0IqTd2gWuK9P2LanwCDgxunvFL1JcwBxevyWkWw+K4q9+ d6e865CCR2ZlKDHOPOy6R3wUo/RHVuc7EnOfyioNl6c7lWwdx5xwUEqJgjAc8ir3 MSfeh4dM0G8Ors8DJ7UdvB1QmDXa+6pBK91gMPDLtxphf8r36uTE3jEhReCIr34e VYs6UopqxI//2dRIyG1AcJ3kc3sDYrk= -----END CERTIFICATE-----Generated at Sun Apr 6 05:59:01 2025 by rpki-client