$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e8a4a207-02cb-31d1-9839-b150437e40a7.roa File: e8a4a207-02cb-31d1-9839-b150437e40a7.roa (raw, json) Hash identifier: /qGO0Cl3h0IRjCIxs2Bl4MR79N0SXAEu1702EhN5Yxs= Subject key identifier: 9C:22:9B:09:B4:4B:8F:D5:FA:11:56:6E:31:B0:68:98:3B:18:CD:A7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285848B73588C9207D041A71660300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e8a4a207-02cb-31d1-9839-b150437e40a7.roa Signing time: Thu 30 Jan 2025 11:07:41 +0000 ROA not before: Thu 30 Jan 2025 11:07:41 +0000 ROA not after: Wed 30 Apr 2025 10:07:41 +0000 asID: 30036 IP address blocks: 173.24.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:35:88:c9:20:7d:04:1a:71:66:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 30 11:07:41 2025 GMT Not After : Apr 30 10:07:41 2025 GMT Subject: CN=7de24d86-22e5-4b61-a55e-94b854c45c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d6:1f:43:4e:b3:70:e9:50:98:ee:93:c0:05: d7:24:d1:54:89:4a:b0:af:cb:68:88:ea:b5:19:af: ec:49:ba:a4:c6:8d:d6:f0:53:c7:f2:99:94:7f:bb: 55:98:5f:20:e4:28:00:49:e7:5c:a8:59:39:02:bc: 63:ee:69:d7:97:6e:f8:0a:67:8f:4f:9e:0e:de:4f: e5:ce:19:55:d8:c4:2d:31:93:4f:b1:6f:88:60:a5: 6c:d3:b8:00:73:de:e3:db:b3:8f:d8:69:c6:46:4a: 2f:8b:53:20:ec:fb:fe:b8:32:f5:c5:50:57:0b:4b: 2a:e9:d8:0d:bc:b3:78:01:40:56:bb:0a:65:eb:50: b4:85:3e:24:a8:5b:df:a9:ab:42:d2:0a:8d:a9:0d: d3:b4:30:84:8d:f7:f2:0e:51:47:36:b7:c9:1f:a5: e5:79:8f:52:78:32:45:69:14:e3:85:73:c8:64:a1: 52:ac:ac:d1:ff:64:c2:fb:8a:e7:80:e1:f2:5d:db: 60:22:c0:ce:b7:9e:28:88:e1:56:d6:25:b4:51:4f: 7e:98:1b:0e:d7:7e:61:64:2b:62:5d:b7:24:1f:b8: 2e:d8:db:a6:3f:9b:20:e1:cf:fc:8c:81:a5:a1:b3: 6b:a4:ae:80:b4:85:eb:21:a2:59:3e:62:db:0d:11: d1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:22:9B:09:B4:4B:8F:D5:FA:11:56:6E:31:B0:68:98:3B:18:CD:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e8a4a207-02cb-31d1-9839-b150437e40a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:78:75:78:f3:4b:df:24:35:e3:95:b4:e8:4d:44:28:00:96: 8c:9f:47:33:21:d4:28:b1:0c:60:28:ab:7c:0d:a0:64:2c:8e: 7c:ae:aa:c8:b4:a9:e5:20:e5:28:b1:cd:54:05:af:3d:c5:fe: 75:cd:49:6e:50:19:af:07:28:36:43:9b:38:04:af:67:52:cd: ab:e6:42:6c:77:25:45:fe:ee:42:2f:84:da:1c:29:d7:94:50: 85:20:82:4f:42:ab:6f:74:d0:60:c7:06:89:a1:79:1c:ee:91: 5e:4f:76:8f:8e:82:8b:20:c0:c8:4d:63:8b:4d:ed:24:b0:f2: fa:4f:45:fe:a7:98:74:d7:b6:00:d2:e2:77:e4:37:79:29:3e: d9:3e:be:84:3c:6a:14:88:eb:e4:48:e9:ce:30:59:a7:98:d5: fa:22:67:81:7a:f8:d2:4f:b0:0f:0e:57:4b:ac:23:da:af:41: 58:de:9f:cc:87:4b:0c:c5:21:78:80:7c:fb:50:78:f7:e2:fe: 69:25:8b:23:73:e0:2c:54:9b:08:a0:d0:5c:01:35:da:d2:76: 30:c4:ac:8a:17:ca:ef:19:60:41:42:a3:1d:5e:07:eb:ab:c1: f6:d5:db:49:e2:e3:e9:9a:48:83:9f:18:db:b4:ed:65:1f:d1: f8:12:f4:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3NYjJIH0EGnFmAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDEzMDExMDc0MVoXDTI1MDQzMDEwMDc0MVowLzEtMCsGA1UEAxMk N2RlMjRkODYtMjJlNS00YjYxLWE1NWUtOTRiODU0YzQ1YzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9NYfQ06zcOlQmO6TwAXXJNFUiUqwr8toiOq1 Ga/sSbqkxo3W8FPH8pmUf7tVmF8g5CgASedcqFk5Arxj7mnXl274CmePT54O3k/l zhlV2MQtMZNPsW+IYKVs07gAc97j27OP2GnGRkovi1Mg7Pv+uDL1xVBXC0sq6dgN vLN4AUBWuwpl61C0hT4kqFvfqatC0gqNqQ3TtDCEjffyDlFHNrfJH6XleY9SeDJF aRTjhXPIZKFSrKzR/2TC+4rngOHyXdtgIsDOt54oiOFW1iW0UU9+mBsO135hZCti XbckH7gu2NumP5sg4c/8jIGlobNrpK6AtIXrIaJZPmLbDRHRmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwimwm0S4/V+hFWbjGwaJg7GM2nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZThhNGEyMDctMDJjYi0z MWQxLTk4MzktYjE1MDQzN2U0MGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIF4dXjzS98kNeOVtOhNRCgAloyfRzMh1CixDGAoq3wNoGQsjnyuqsi0 qeUg5SixzVQFrz3F/nXNSW5QGa8HKDZDmzgEr2dSzavmQmx3JUX+7kIvhNocKdeU UIUggk9Cq2900GDHBomheRzukV5Pdo+OgosgwMhNY4tN7SSw8vpPRf6nmHTXtgDS 4nfkN3kpPtk+voQ8ahSI6+RI6c4wWaeY1foiZ4F6+NJPsA8OV0usI9qvQVjen8yH SwzFIXiAfPtQePfi/mkliyNz4CxUmwig0FwBNdrSdjDErIoXyu8ZYEFCox1eB+ur wfbV20ni4+maSIOfGNu07WUf0fgS9GE= -----END CERTIFICATE-----Generated at Sun Apr 6 05:57:12 2025 by rpki-client