$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa File: a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa (raw, json) Hash identifier: CXm+cZ57dfz91e1YUtBiDPxBldaUIn+OO8bNHHxloeA= Subject key identifier: 4F:29:C3:7E:DE:D5:9D:34:7A:43:2C:88:AD:65:C8:E9:57:2E:3A:D0 Certificate issuer: /CN=3b24522b-8239-4bb9-9845-1e01e28aa452 Certificate serial: 010D0C9F43285848B8F0CED19F489B2EB3677B80 Authority key identifier: A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 32854 IP address blocks: 169.197.172.0/24 maxlen: 24 169.197.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:ce:d1:9f:48:9b:2e:b3:67:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b24522b-8239-4bb9-9845-1e01e28aa452 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=954b2e7f-d177-4542-9a12-9afb61abf13a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:96:0d:82:5f:38:fe:1c:23:71:21:be:fb:c4: 49:8f:7d:0a:58:36:5a:bc:e1:b5:1a:86:6e:04:8f: ce:84:d2:d4:d1:bb:33:70:13:1f:75:f1:2d:1c:c0: ac:13:4c:e6:4c:a4:fe:89:e4:b3:59:bd:94:fc:09: 55:ee:e5:a1:a6:76:02:94:68:aa:7b:42:96:69:19: 8b:62:d3:5e:05:e2:90:a5:be:3b:a6:94:b6:22:d3: 0e:97:9b:57:f4:05:40:de:a0:28:c8:3a:1e:1b:5c: d1:0d:d8:14:c4:6d:6c:a8:cf:d4:0a:cd:e6:16:97: eb:ab:ac:07:52:bd:fd:76:42:98:6a:8e:10:99:86: ba:f0:3b:38:11:b7:78:5b:fa:1e:03:67:9a:cb:5b: fe:94:28:c7:69:c3:98:b4:9b:3f:83:d3:1b:10:99: d8:ea:6c:a6:89:d1:78:45:dd:42:f7:3d:5d:c6:e2: 7e:cc:f1:cd:8e:b4:f3:29:8e:27:ec:27:ef:37:28: 60:eb:8b:5b:62:38:f8:c2:74:7b:20:ff:86:7e:60: 5f:13:77:4b:3a:99:ab:e5:94:1a:1a:ce:0e:09:b8: 10:e4:2b:df:44:27:a7:9c:c9:4c:ef:31:0d:5a:fb: a5:71:d9:94:38:f5:c0:1c:a9:19:b1:ae:a6:83:b5: cd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:29:C3:7E:DE:D5:9D:34:7A:43:2C:88:AD:65:C8:E9:57:2E:3A:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.crl X509v3 Authority Key Identifier: keyid:A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer sbgp-ipAddrBlock: critical IPv4: 169.197.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:d2:29:57:84:49:4b:0e:01:1d:22:8c:98:9b:da:98:a7:fe: 53:77:3b:8f:3e:6b:3d:e3:f0:5b:1f:ac:c9:9e:cb:8b:78:67: dc:58:c4:a7:05:b4:a3:25:89:27:42:96:fc:85:aa:fd:fb:16: b6:c1:37:2e:88:d8:4c:29:7d:60:24:96:2c:a1:16:02:a5:20: 08:76:e5:ec:98:dc:e9:34:99:d6:8f:58:fe:c0:49:59:fd:f4: d5:82:af:49:b9:37:66:09:e6:89:36:d5:67:aa:e2:1d:e5:df: f1:bd:be:95:8d:38:c0:11:4e:df:b5:f6:83:52:49:9f:4a:35: 87:28:ab:67:f1:d2:7e:3c:0a:7d:29:3a:24:0b:30:81:c5:47: f5:5e:ab:2b:da:b6:d8:10:6e:a8:ff:e2:6f:be:c0:92:c2:f2: c2:98:8d:cf:f6:a8:11:fc:65:9d:b1:36:43:8b:40:a7:c5:f4: c3:06:8a:ad:1f:57:24:04:17:65:21:b6:a6:42:8b:95:52:20: c0:04:54:9f:ea:8a:0c:eb:64:8e:1c:1c:90:3a:29:3e:4e:0d: c7:bc:79:54:b0:b9:26:fd:f2:84:ae:ea:9f:df:e7:00:9f:2c: 18:3d:52:1a:3b:30:29:fb:d0:7a:38:e3:59:8e:2c:54:14:cc: 38:58:3f:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48M7Rn0ibLrNne4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2IyNDUyMmItODIzOS00YmI5LTk4NDUtMWUwMWUyOGFh NDUyMB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk OTU0YjJlN2YtZDE3Ny00NTQyLTlhMTItOWFmYjYxYWJmMTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZYNgl84/hwjcSG++8RJj30KWDZavOG1GoZu BI/OhNLU0bszcBMfdfEtHMCsE0zmTKT+ieSzWb2U/AlV7uWhpnYClGiqe0KWaRmL YtNeBeKQpb47ppS2ItMOl5tX9AVA3qAoyDoeG1zRDdgUxG1sqM/UCs3mFpfrq6wH Ur39dkKYao4QmYa68Ds4Ebd4W/oeA2eay1v+lCjHacOYtJs/g9MbEJnY6mymidF4 Rd1C9z1dxuJ+zPHNjrTzKY4n7CfvNyhg64tbYjj4wnR7IP+GfmBfE3dLOpmr5ZQa Gs4OCbgQ5CvfRCennMlM7zENWvulcdmUOPXAHKkZsa6mg7XNSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8pw37e1Z00ekMsiK1lyOlXLjrQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zYjI0 NTIyYi04MjM5LTRiYjktOTg0NS0xZTAxZTI4YWE0NTIvYTMyNzhmZDgtOTY5Yi0z ZDdhLWI3YzEtZTVmNGFhYmEwNzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2IyNDUyMmItODIzOS00YmI5LTk4 NDUtMWUwMWUyOGFhNDUyLzNiMjQ1MjJiLTgyMzktNGJiOS05ODQ1LTFlMDFlMjhh YTQ1Mi5jcmwwHwYDVR0jBBgwFoAUoAL1aNmuD2MRURVEAh0dW/5OsNIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zYjI0NTIyYi04MjM5LTRiYjktOTg0NS0xZTAx ZTI4YWE0NTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqcWsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETSKVeESUsOAR0ijJib2pin/lN3O48+az3j8FsfrMmey4t4Z9xYxKcF tKMliSdClvyFqv37FrbBNy6I2EwpfWAkliyhFgKlIAh25eyY3Ok0mdaPWP7ASVn9 9NWCr0m5N2YJ5ok21Weq4h3l3/G9vpWNOMARTt+19oNSSZ9KNYcoq2fx0n48Cn0p OiQLMIHFR/VeqyvattgQbqj/4m++wJLC8sKYjc/2qBH8ZZ2xNkOLQKfF9MMGiq0f VyQEF2UhtqZCi5VSIMAEVJ/qigzrZI4cHJA6KT5ODce8eVSwuSb98oSu6p/f5wCf LBg9Uho7MCn70Ho441mOLFQUzDhYP5o= -----END CERTIFICATE-----Generated at Fri Apr 11 23:46:33 2025 by rpki-client