$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2b95d3e5-df63-3a59-a897-c4cfdb695a8d.roa File: 2b95d3e5-df63-3a59-a897-c4cfdb695a8d.roa (raw, json) Hash identifier: nyPPz2qRN9O0LWVQg2BzFNxujpOgpsmKt3UdWBYB6dk= Subject key identifier: B7:77:2D:D5:5D:70:C6:67:53:7E:63:42:C6:27:C9:1F:14:09:B3:23 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF48390058123D7DD80A00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2b95d3e5-df63-3a59-a897-c4cfdb695a8d.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.25.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:48:39:00:58:12:3d:7d:d8:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=477db705-f905-405f-947f-2b241feba1b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a4:3c:cd:97:7a:54:e2:dc:b4:36:9d:53:f4: 4a:3f:2d:54:d0:0b:3f:d5:ea:e7:34:53:a5:04:3d: de:c9:c5:a7:2d:eb:8d:1b:ea:28:ae:0c:43:92:b6: f7:d5:c5:3d:b3:69:0e:23:a6:3f:e9:0e:6d:77:6b: fd:55:8e:db:4b:6d:21:8d:72:4d:c8:94:f5:34:20: c6:58:81:a6:6a:36:37:32:c6:e6:38:36:ed:dc:e1: 97:d7:16:39:bf:61:e7:85:69:16:57:19:fb:67:fb: 4d:46:a6:54:1a:eb:89:28:26:a8:dc:5c:d0:1b:7f: 34:37:42:1c:e8:b7:37:dc:08:9a:60:d6:af:83:99: 14:25:68:48:7d:b0:cc:7c:56:f0:5f:93:fa:af:80: 66:bc:0d:5e:88:ae:9e:be:1c:49:a2:6b:b7:ff:2d: 99:37:90:a8:a5:c2:d0:ff:b9:f5:d4:35:7b:09:f9: 96:7a:e0:8f:0a:2d:30:e6:2a:8e:79:f9:46:0a:e0: 80:1a:5c:5e:24:db:d6:98:cb:78:20:8e:17:cf:39: 6d:75:26:2d:56:7a:b4:fe:64:42:c7:6e:39:23:89: 72:6c:d3:09:6f:22:02:69:1f:c1:62:56:86:1b:c3: 77:f4:a3:6c:fe:bc:93:a8:4f:8a:35:d0:18:03:7d: e4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:77:2D:D5:5D:70:C6:67:53:7E:63:42:C6:27:C9:1F:14:09:B3:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2b95d3e5-df63-3a59-a897-c4cfdb695a8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:4c:c1:f4:e9:ad:36:dc:29:11:c7:2b:a5:57:e1:55:87:e3: fe:b7:bf:3f:7b:7c:a6:cd:a2:e9:a2:c9:f9:03:a0:88:31:83: 07:85:8a:2b:da:b5:db:a4:36:5b:60:e2:c5:71:cd:67:a7:8e: 5e:1c:8b:f5:8b:ac:35:a1:fb:39:80:b0:5a:ff:fe:d7:82:bf: 10:cd:c0:ac:61:ed:67:c5:df:9e:f1:70:7d:22:37:dc:b5:d2: d3:14:1f:fb:14:13:a3:64:69:be:57:15:8c:6f:e9:12:6c:db: f0:46:71:0f:2e:27:95:64:e8:40:de:52:43:02:63:12:84:f3: 4b:c7:c8:93:80:81:a6:1a:20:01:4a:8d:e6:6b:79:5c:3d:62: 47:93:24:c6:d5:f8:3d:40:3d:b0:ca:f3:9e:f2:5b:7b:7e:7e: 55:a3:7d:b2:cb:64:8b:b1:ad:72:4b:38:cc:f8:58:b6:64:aa: 5a:38:e6:91:70:b9:08:ea:c8:5f:11:04:b2:e1:20:b3:59:b7: a8:fa:b4:65:57:57:0c:4c:2c:18:47:12:41:e8:de:cd:60:fc: d6:c9:7a:08:a2:d1:2c:6b:fa:95:6f:b7:b1:7a:f6:40:34:da: 82:ab:21:07:30:08:e4:41:f0:d4:62:7d:53:b5:5d:2f:58:d4: 28:f3:b5:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh70g5AFgSPX3YCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk NDc3ZGI3MDUtZjkwNS00MDVmLTk0N2YtMmIyNDFmZWJhMWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qQ8zZd6VOLctDadU/RKPy1U0As/1ernNFOl BD3eycWnLeuNG+oorgxDkrb31cU9s2kOI6Y/6Q5td2v9VY7bS20hjXJNyJT1NCDG WIGmajY3MsbmODbt3OGX1xY5v2HnhWkWVxn7Z/tNRqZUGuuJKCao3FzQG380N0Ic 6Lc33AiaYNavg5kUJWhIfbDMfFbwX5P6r4BmvA1eiK6evhxJomu3/y2ZN5CopcLQ /7n11DV7CfmWeuCPCi0w5iqOeflGCuCAGlxeJNvWmMt4II4XzzltdSYtVnq0/mRC x245I4lybNMJbyICaR/BYlaGG8N39KNs/ryTqE+KNdAYA33ktQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLd3LdVdcMZnU35jQsYnyR8UCbMjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmI5NWQzZTUtZGY2My0z YTU5LWE4OTctYzRjZmRiNjk1YThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVMwfTprTbcKRHHK6VX4VWH4/63vz97fKbNoumiyfkDoIgxgweFiiva tdukNltg4sVxzWenjl4ci/WLrDWh+zmAsFr//teCvxDNwKxh7WfF357xcH0iN9y1 0tMUH/sUE6Nkab5XFYxv6RJs2/BGcQ8uJ5Vk6EDeUkMCYxKE80vHyJOAgaYaIAFK jeZreVw9YkeTJMbV+D1APbDK857yW3t+flWjfbLLZIuxrXJLOMz4WLZkqlo45pFw uQjqyF8RBLLhILNZt6j6tGVXVwxMLBhHEkHo3s1g/NbJegii0Sxr+pVvt7F69kA0 2oKrIQcwCORB8NRifVO1XS9Y1CjztVk= -----END CERTIFICATE-----Generated at Fri May 9 08:21:32 2025 by rpki-client