$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3198e6b0-d734-3c56-b010-71a33eeb4e6f.roa File: 3198e6b0-d734-3c56-b010-71a33eeb4e6f.roa (raw, json) Hash identifier: xxyMoDyAShiDVYWvwzBlF3nSYvm6HB9wtrcBO2epuJc= Subject key identifier: 34:10:8C:8C:E3:56:E7:36:12:53:E2:F9:6A:83:1A:1D:CD:A7:D0:2B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF47FD6222FCB23A9DFE00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3198e6b0-d734-3c56-b010-71a33eeb4e6f.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.25.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:47:fd:62:22:fc:b2:3a:9d:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=820e8cdf-8b86-4565-a27c-e2f2abc41c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:db:7e:09:14:a8:ad:7f:07:9b:63:bf:09:b1: 45:a2:fa:55:f7:75:5f:59:89:0e:62:0e:1e:71:a7: 1f:97:05:cf:d7:b6:b2:37:81:9e:90:50:d9:06:b2: 3a:08:4f:15:a8:bd:3c:82:08:26:48:87:ea:b8:16: 63:71:ca:db:3a:ae:91:d6:3d:70:cb:87:04:8d:c0: 26:b7:22:fd:15:7e:6c:29:d3:de:94:14:19:5e:05: 89:35:cc:1c:8b:c8:20:96:7c:67:1d:0f:7b:a5:78: e5:08:00:03:2b:3f:74:1c:11:9b:b8:14:5f:65:62: 5a:5e:9d:5e:15:30:49:49:ff:c5:81:3a:73:b0:18: c7:28:f5:ac:80:97:da:42:da:00:73:3f:21:0f:78: 14:5d:3b:f6:90:1c:79:58:34:04:9f:e3:8f:6e:1c: c5:16:e1:0f:6d:6d:11:d3:b8:45:a1:85:e6:87:0b: 33:5c:52:a1:70:97:f6:70:e0:af:d6:7b:2a:a0:f5: 71:a1:51:ff:84:1c:21:a5:08:0b:f9:e6:5b:8e:47: c4:88:34:26:f8:4b:08:1b:69:dc:30:dd:2e:c3:e5: 9e:91:fa:1a:00:6d:1e:70:b1:22:36:ba:8a:4b:8c: 18:e0:2d:d6:fe:40:e9:91:72:9f:c0:e3:8a:cf:de: 59:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:10:8C:8C:E3:56:E7:36:12:53:E2:F9:6A:83:1A:1D:CD:A7:D0:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3198e6b0-d734-3c56-b010-71a33eeb4e6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:f3:48:b8:f2:c8:ac:6f:91:c2:b2:cb:72:f0:3b:d9:26:b0: ca:e1:3b:2c:07:87:20:73:30:a0:03:bd:a9:d1:ff:d8:c2:a0: 9a:b5:43:45:9f:a0:7a:cd:08:4b:53:c8:9b:1d:01:79:5f:2c: e7:8b:73:5d:e5:35:8b:05:0b:fa:f6:a5:9e:75:ce:c9:47:8c: fa:7e:1d:23:0e:bb:4d:ee:f2:1d:62:99:15:9c:b8:2e:0f:9b: 5f:44:61:47:2a:79:cf:fa:de:6b:72:00:00:98:5c:a5:40:db: db:8f:77:da:4f:28:06:80:f7:d2:96:a3:7b:2c:ff:31:07:c5: b0:03:2a:ea:3d:1e:bb:df:e7:9d:04:7e:b1:ac:ee:e8:26:ef: 43:98:bb:10:6b:27:9d:71:13:08:af:46:77:ee:92:26:f8:44: 84:fc:1c:30:a0:a2:d9:14:8d:e7:3c:4f:4c:bc:e8:59:ed:ff: ce:ad:47:53:74:2a:83:67:06:d2:55:76:dc:70:7b:3b:77:19: e6:26:97:85:cb:c1:74:49:9e:56:61:9c:6e:7f:31:59:9d:51: 97:b5:18:04:49:1f:8a:f4:76:5b:b3:ba:1b:b9:40:59:ee:6f: 17:86:c5:14:fd:bf:89:8a:e1:02:1a:27:16:95:34:1c:8b:1b: 32:f3:f6:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh70f9YiL8sjqd/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk ODIwZThjZGYtOGI4Ni00NTY1LWEyN2MtZTJmMmFiYzQxYzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdt+CRSorX8Hm2O/CbFFovpV93VfWYkOYg4e cacflwXP17ayN4GekFDZBrI6CE8VqL08gggmSIfquBZjccrbOq6R1j1wy4cEjcAm tyL9FX5sKdPelBQZXgWJNcwci8gglnxnHQ97pXjlCAADKz90HBGbuBRfZWJaXp1e FTBJSf/FgTpzsBjHKPWsgJfaQtoAcz8hD3gUXTv2kBx5WDQEn+OPbhzFFuEPbW0R 07hFoYXmhwszXFKhcJf2cOCv1nsqoPVxoVH/hBwhpQgL+eZbjkfEiDQm+EsIG2nc MN0uw+WekfoaAG0ecLEiNrqKS4wY4C3W/kDpkXKfwOOKz95ZWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQQjIzjVuc2ElPi+WqDGh3Np9ArMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzE5OGU2YjAtZDczNC0z YzU2LWIwMTAtNzFhMzNlZWI0ZTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRl4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7zSLjyyKxvkcKyy3LwO9kmsMrhOywHhyBzMKADvanR/9jCoJq1Q0Wf oHrNCEtTyJsdAXlfLOeLc13lNYsFC/r2pZ51zslHjPp+HSMOu03u8h1imRWcuC4P m19EYUcqec/63mtyAACYXKVA29uPd9pPKAaA99KWo3ss/zEHxbADKuo9Hrvf550E frGs7ugm70OYuxBrJ51xEwivRnfukib4RIT8HDCgotkUjec8T0y86Fnt/86tR1N0 KoNnBtJVdtxwezt3GeYml4XLwXRJnlZhnG5/MVmdUZe1GARJH4r0dluzuhu5QFnu bxeGxRT9v4mK4QIaJxaVNByLGzLz9gk= -----END CERTIFICATE-----Generated at Fri May 9 11:55:59 2025 by rpki-client