$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/234624dd-0492-368b-81a2-5919e24d2165.roa File: 234624dd-0492-368b-81a2-5919e24d2165.roa (raw, json) Hash identifier: 6oVfC30ImDqrNLZnWS7XLC5A9CkbLSX/rgsQBaaL0l8= Subject key identifier: CC:10:0A:0B:8B:D4:0F:7C:67:E6:EC:A2:84:FC:9B:F3:BE:1B:F5:5A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C48A096430207C5C1F6140 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/234624dd-0492-368b-81a2-5919e24d2165.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.25.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:8a:09:64:30:20:7c:5c:1f:61:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=0c03ebd2-dede-4a3d-bc11-6c41e9ea7edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:90:a8:6f:1d:5c:bf:38:48:78:46:00:fa:6f: 6b:de:1f:83:f7:6e:a4:22:04:16:4a:29:81:8b:c9: d5:a0:dc:8e:9e:ec:4f:37:ec:d3:a0:10:10:1c:60: eb:a6:44:b7:e2:ec:72:c7:fc:0e:d9:d2:aa:62:17: ab:1f:44:ac:1a:cd:9e:86:53:0d:1a:50:4d:48:3e: 77:96:98:c3:47:0a:ef:8e:c7:5e:ec:f6:56:30:ea: 37:96:93:c8:f6:da:10:7d:3f:93:04:33:fa:1a:48: c3:9c:4b:cb:fc:d9:c4:5f:0a:72:c1:41:6b:96:90: 67:78:bb:d8:f5:38:f2:24:56:da:6e:38:8e:4a:af: 17:f7:f1:60:40:63:ac:cb:eb:4c:52:98:3e:4c:d1: 8e:39:f1:10:fb:01:9a:e0:fc:0f:f4:1c:e3:46:c3: a6:42:fd:20:e0:4e:a3:ab:7f:7c:b6:40:5f:62:7f: 08:6d:8e:fc:19:74:a1:fa:77:2b:c0:f6:f6:74:32: 63:37:17:dc:18:f9:c9:dc:e4:e8:81:94:49:ea:88: b6:9c:43:1b:e4:80:bd:0c:26:ba:a0:41:89:51:a3: 87:bb:12:88:65:61:a9:6d:5a:ee:49:f6:de:3c:7e: 34:31:1a:24:44:fe:e2:1a:b8:de:fb:0b:4c:af:39: 31:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:10:0A:0B:8B:D4:0F:7C:67:E6:EC:A2:84:FC:9B:F3:BE:1B:F5:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/234624dd-0492-368b-81a2-5919e24d2165.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:7d:f5:34:9c:83:c8:99:e3:9a:68:c9:88:6e:57:01:c6:e3: c4:67:25:b1:a2:27:51:45:d4:c1:d1:e5:7a:aa:75:cb:6e:4a: ef:4b:0f:8c:da:e2:89:97:47:79:19:8b:68:a5:3e:9b:0d:12: 27:fe:19:a2:e4:16:d4:8d:49:f4:2a:d8:38:08:69:7b:f4:ca: 5e:8b:f8:99:f6:05:63:6e:1c:8d:23:87:e3:b3:7e:63:b1:3d: f4:b7:6c:ad:40:e7:54:54:a6:0f:89:1a:02:59:02:c4:e9:e8: a7:01:da:e4:a6:7e:cb:09:e0:f8:db:87:65:0b:4b:79:15:4a: 4f:7b:fb:89:5c:a0:cb:4d:8d:87:74:c3:54:5a:9b:21:a8:b7: 21:a3:b9:93:b4:d4:4b:86:69:8e:59:b2:36:ec:98:1e:ee:b9: 13:cb:3f:73:5f:d9:fc:6f:65:9a:85:6d:c1:3a:98:c8:d3:66: ea:1f:10:79:ef:8c:93:94:93:1e:bb:f1:57:5a:73:ff:d6:4e: d1:17:6a:78:93:27:80:ae:d9:47:45:cc:1c:f3:28:87:88:b2: a5:75:7d:b4:a8:fb:27:7a:f0:c2:8f:d2:2c:91:63:79:86:c7: 9c:9c:b1:80:f9:2a:00:ec:07:c6:95:46:3d:32:bf:18:d1:47: 46:ac:4a:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxIoJZDAgfFwfYUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk MGMwM2ViZDItZGVkZS00YTNkLWJjMTEtNmM0MWU5ZWE3ZWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJCobx1cvzhIeEYA+m9r3h+D926kIgQWSimB i8nVoNyOnuxPN+zToBAQHGDrpkS34uxyx/wO2dKqYherH0SsGs2ehlMNGlBNSD53 lpjDRwrvjsde7PZWMOo3lpPI9toQfT+TBDP6GkjDnEvL/NnEXwpywUFrlpBneLvY 9TjyJFbabjiOSq8X9/FgQGOsy+tMUpg+TNGOOfEQ+wGa4PwP9BzjRsOmQv0g4E6j q398tkBfYn8IbY78GXSh+ncrwPb2dDJjNxfcGPnJ3OTogZRJ6oi2nEMb5IC9DCa6 oEGJUaOHuxKIZWGpbVruSfbePH40MRokRP7iGrje+wtMrzkxVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwQCguL1A98Z+bsooT8m/O+G/VaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjM0NjI0ZGQtMDQ5Mi0z NjhiLTgxYTItNTkxOWUyNGQyMTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE999TScg8iZ45poyYhuVwHG48RnJbGiJ1FF1MHR5XqqdctuSu9LD4za 4omXR3kZi2ilPpsNEif+GaLkFtSNSfQq2DgIaXv0yl6L+Jn2BWNuHI0jh+OzfmOx PfS3bK1A51RUpg+JGgJZAsTp6KcB2uSmfssJ4Pjbh2ULS3kVSk97+4lcoMtNjYd0 w1RamyGotyGjuZO01EuGaY5ZsjbsmB7uuRPLP3Nf2fxvZZqFbcE6mMjTZuofEHnv jJOUkx678Vdac//WTtEXaniTJ4Cu2UdFzBzzKIeIsqV1fbSo+yd68MKP0iyRY3mG x5ycsYD5KgDsB8aVRj0yvxjRR0asSi8= -----END CERTIFICATE-----Generated at Fri May 9 20:44:54 2025 by rpki-client