$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1db94b3f-ff63-34c7-ad88-55ece7a8bff0.roa File: 1db94b3f-ff63-34c7-ad88-55ece7a8bff0.roa (raw, json) Hash identifier: 6JcLUtzAE1thrNqL5nGlmVlIegj/Dl7Npr5hp/kEgUA= Subject key identifier: C0:4B:49:6E:19:B4:FE:2A:D1:F6:E2:81:CB:C4:54:38:45:F5:98:83 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA36C609318FDDF36D8B80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1db94b3f-ff63-34c7-ad88-55ece7a8bff0.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.30.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:36:c6:09:31:8f:dd:f3:6d:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=882eae7e-37df-4757-9bc1-35d998bd735f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b5:b1:b8:54:97:70:a7:5b:86:20:8e:08:7e: 1a:ec:90:73:6b:05:a2:81:50:56:3e:44:33:c9:b8: c9:32:58:b2:0e:0d:07:0b:1f:51:7a:ae:76:17:0c: b0:b6:df:ad:c0:48:9b:6d:62:13:7c:19:1f:15:cf: 90:8d:bd:4b:14:90:d5:7a:c6:e6:12:fc:c7:30:e3: 05:d0:62:c8:37:47:e6:25:ea:86:b6:1f:1d:6f:69: 7c:a1:d5:66:b1:bd:7c:7b:3f:36:b3:08:b3:b4:ac: fc:74:d8:05:53:99:b3:e1:ff:3c:09:d7:b1:d2:ce: a3:98:d4:1f:c4:72:89:64:03:c6:69:92:a2:99:46: 58:e8:0a:0c:e5:1f:33:6a:27:6e:59:b3:11:94:e7: e1:cb:1b:d4:f8:ed:49:d7:35:af:2b:f7:79:49:f3: f8:49:4f:dc:94:24:ed:3a:86:5c:51:5d:b8:c6:bd: aa:a7:53:65:8b:cc:af:ae:f5:32:53:45:00:c5:0d: 98:c7:e5:61:89:d2:8c:18:3f:e7:0f:1c:bb:41:3d: 54:f4:c0:11:d8:ac:93:59:31:83:f6:93:0c:14:ed: 9b:fd:7b:fb:8d:c2:c9:08:89:54:75:c6:45:e4:82: 6f:fb:6b:68:32:96:d3:2f:34:cc:75:80:2f:8e:0e: e8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4B:49:6E:19:B4:FE:2A:D1:F6:E2:81:CB:C4:54:38:45:F5:98:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1db94b3f-ff63-34c7-ad88-55ece7a8bff0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.30.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:77:ae:b0:ab:42:26:97:26:3d:51:cb:2b:67:f7:c3:37:4f: c9:74:b6:30:5c:67:fd:e5:11:97:1f:60:1a:2a:d0:84:b1:e9: 73:bf:a9:a3:de:a5:08:13:08:25:73:00:33:ae:54:81:90:a1: 04:4f:c2:8a:0b:c6:0f:96:19:42:89:5d:29:6a:83:b8:41:5c: 17:8c:35:a8:7c:59:35:8e:0d:58:bc:72:de:2e:f2:6f:6d:51: 8b:e0:6c:d4:29:f2:9c:f8:79:4a:67:df:64:97:b7:70:3b:b1: 80:2e:e7:5c:b7:fe:b4:78:a6:96:b6:aa:1e:71:cd:a5:f7:55: 1b:ed:f8:13:d0:ea:17:82:f7:a4:30:44:78:5b:23:1d:9e:1a: d0:17:d2:2b:af:14:ca:4f:6c:a1:10:b7:b6:a4:7c:44:1f:09: a4:02:09:64:2c:dc:f0:c5:92:4d:a6:c8:3d:04:56:7a:1b:f5: e7:61:f9:d8:ea:2e:1b:16:a2:0f:8f:0c:97:ed:57:01:4f:35: 82:9b:e3:ea:e3:84:38:c5:a1:18:08:78:d5:75:f6:82:71:5c: 0b:b6:33:33:9a:99:d3:e8:e8:5e:03:3e:02:f8:05:08:22:31: ee:17:5b:84:ea:27:88:0f:71:10:09:04:9f:34:33:a8:5a:c4: bb:21:eb:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkujbGCTGP3fNti4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ODgyZWFlN2UtMzdkZi00NzU3LTliYzEtMzVkOTk4YmQ3MzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7WxuFSXcKdbhiCOCH4a7JBzawWigVBWPkQz ybjJMliyDg0HCx9Req52Fwywtt+twEibbWITfBkfFc+Qjb1LFJDVesbmEvzHMOMF 0GLIN0fmJeqGth8db2l8odVmsb18ez82swiztKz8dNgFU5mz4f88Cdex0s6jmNQf xHKJZAPGaZKimUZY6AoM5R8zaiduWbMRlOfhyxvU+O1J1zWvK/d5SfP4SU/clCTt OoZcUV24xr2qp1Nli8yvrvUyU0UAxQ2Yx+VhidKMGD/nDxy7QT1U9MAR2KyTWTGD 9pMMFO2b/Xv7jcLJCIlUdcZF5IJv+2toMpbTLzTMdYAvjg7osQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBLSW4ZtP4q0fbigcvEVDhF9ZiDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWRiOTRiM2YtZmY2My0z NGM3LWFkODgtNTVlY2U3YThiZmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR7uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHV3rrCrQiaXJj1Ryytn98M3T8l0tjBcZ/3lEZcfYBoq0ISx6XO/qaPe pQgTCCVzADOuVIGQoQRPwooLxg+WGUKJXSlqg7hBXBeMNah8WTWODVi8ct4u8m9t UYvgbNQp8pz4eUpn32SXt3A7sYAu51y3/rR4ppa2qh5xzaX3VRvt+BPQ6heC96Qw RHhbIx2eGtAX0iuvFMpPbKEQt7akfEQfCaQCCWQs3PDFkk2myD0EVnob9edh+djq LhsWog+PDJftVwFPNYKb4+rjhDjFoRgIeNV19oJxXAu2MzOamdPo6F4DPgL4BQgi Me4XW4TqJ4gPcRAJBJ80M6haxLsh6+I= -----END CERTIFICATE-----Generated at Thu May 8 23:06:38 2025 by rpki-client