$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fcf03ed-f9fb-3004-bd04-3c3da699bc4c.roa File: 3fcf03ed-f9fb-3004-bd04-3c3da699bc4c.roa (raw, json) Hash identifier: GqMEHfRXuCKz4Dbtnt7zviRr/g7epRgErnL8ouviano= Subject key identifier: 8C:1D:72:E0:4D:71:66:2A:1C:8D:74:E2:20:02:9A:4E:30:B4:0F:1B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849FE610C92B663344E3B48D900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fcf03ed-f9fb-3004-bd04-3c3da699bc4c.roa Signing time: Tue 27 May 2025 15:44:41 +0000 ROA not before: Tue 27 May 2025 15:44:41 +0000 ROA not after: Mon 25 Aug 2025 15:44:41 +0000 asID: 30036 IP address blocks: 173.30.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fe:61:0c:92:b6:63:34:4e:3b:48:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 27 15:44:41 2025 GMT Not After : Aug 25 15:44:41 2025 GMT Subject: CN=86de554b-ad82-4833-b395-8d495ba0d6d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a8:38:3c:60:f1:ad:3d:9f:84:15:bb:ae:e5: 54:2b:b5:de:23:f9:5f:b6:e8:08:bb:91:69:59:62: 87:9c:e7:a1:c1:83:c6:de:1e:34:f1:24:13:5d:54: 8c:c8:14:ab:4d:0f:44:b0:04:17:fb:f5:98:e3:7f: 1a:78:1d:47:64:5e:06:fa:c9:84:78:9e:aa:c3:7e: 36:26:4e:59:c7:2a:ea:51:1f:57:8b:22:84:a8:6a: 6d:b4:a2:ca:1e:d6:63:ed:48:af:a9:71:a1:bf:f3: 90:00:03:90:c5:10:6b:fb:ab:f3:05:66:7c:19:e0: 3f:dd:83:d6:36:99:2c:95:ae:0f:d8:56:75:33:02: cd:13:68:2e:3b:68:c5:00:92:b0:ee:64:80:1e:21: 54:b1:61:01:ec:48:52:b0:a0:1b:e2:ee:ea:54:da: 8c:db:83:40:4a:aa:24:a5:9b:0d:9a:22:17:41:2b: ce:64:1a:ee:ad:db:20:1c:1d:fd:41:0d:91:5d:80: 76:17:ac:d6:08:9c:42:d7:f6:1d:8e:5b:69:f8:a4: 9f:3d:94:1b:cb:44:6d:1d:eb:e0:3a:aa:c5:ff:1b: 27:21:85:1d:59:a3:15:f3:a0:0a:04:62:d2:99:3f: 36:ac:86:6a:f6:89:b5:2d:84:ae:b6:af:78:65:0f: 11:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:1D:72:E0:4D:71:66:2A:1C:8D:74:E2:20:02:9A:4E:30:B4:0F:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fcf03ed-f9fb-3004-bd04-3c3da699bc4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.30.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:55:73:57:47:a8:60:d7:b7:a2:00:3d:ee:e2:2e:58:43:26: 04:7c:b3:26:cc:9f:76:a3:da:f5:09:00:7b:a7:5f:05:c3:7a: 7b:15:79:73:71:27:da:5b:29:fc:34:cc:64:f3:09:34:95:b5: d5:08:4e:ab:35:98:3a:8d:c0:ca:b1:24:98:f9:96:70:14:38: 83:56:f5:8b:8b:f1:b2:2c:d1:57:85:6a:2e:8b:b2:ea:fc:4c: 73:b1:b9:3d:cb:55:f4:ac:f0:f6:c2:0b:de:25:29:21:48:e0: 19:43:ec:d3:8a:93:20:ea:ae:cf:df:23:e5:f2:39:43:33:f6: 77:e3:99:93:e8:e0:bc:40:9a:bc:27:97:3a:56:2e:be:07:d0: 10:ce:6c:72:43:5f:25:6a:6e:93:ff:2e:68:ee:fa:4b:ad:36: 47:99:45:b2:29:3c:83:8f:35:18:74:a5:8c:37:f8:c0:02:4e: 5d:3e:c2:3e:ff:96:a3:fc:32:fb:e2:70:18:11:7c:d9:72:1c: ad:1c:c1:7c:44:d6:c6:93:d4:b1:9d:c4:78:5c:25:88:d0:b7: b1:02:a7:e2:17:93:b9:0a:6a:bc:a9:69:c9:9d:47:b8:60:02: 44:7a:72:0b:e2:12:37:4c:4b:bf:54:8b:93:2e:13:aa:f6:a7: c5:51:93:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+YQyStmM0TjtI2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDUyNzE1NDQ0MVoXDTI1MDgyNTE1NDQ0MVowLzEtMCsGA1UEAxMk ODZkZTU1NGItYWQ4Mi00ODMzLWIzOTUtOGQ0OTViYTBkNmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKg4PGDxrT2fhBW7ruVUK7XeI/lftugIu5Fp WWKHnOehwYPG3h408SQTXVSMyBSrTQ9EsAQX+/WY438aeB1HZF4G+smEeJ6qw342 Jk5ZxyrqUR9XiyKEqGpttKLKHtZj7UivqXGhv/OQAAOQxRBr+6vzBWZ8GeA/3YPW Npksla4P2FZ1MwLNE2guO2jFAJKw7mSAHiFUsWEB7EhSsKAb4u7qVNqM24NASqok pZsNmiIXQSvOZBrurdsgHB39QQ2RXYB2F6zWCJxC1/Ydjltp+KSfPZQby0RtHevg OqrF/xsnIYUdWaMV86AKBGLSmT82rIZq9om1LYSutq94ZQ8RUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwdcuBNcWYqHI104iACmk4wtA8bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2ZjZjAzZWQtZjlmYi0z MDA0LWJkMDQtM2MzZGE2OTliYzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR6FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVVc1dHqGDXt6IAPe7iLlhDJgR8sybMn3aj2vUJAHunXwXDensVeXNx J9pbKfw0zGTzCTSVtdUITqs1mDqNwMqxJJj5lnAUOINW9YuL8bIs0VeFai6Lsur8 THOxuT3LVfSs8PbCC94lKSFI4BlD7NOKkyDqrs/fI+XyOUMz9nfjmZPo4LxAmrwn lzpWLr4H0BDObHJDXyVqbpP/Lmju+kutNkeZRbIpPIOPNRh0pYw3+MACTl0+wj7/ lqP8MvvicBgRfNlyHK0cwXxE1saT1LGdxHhcJYjQt7ECp+IXk7kKarypacmdR7hg AkR6cgviEjdMS79Ui5MuE6r2p8VRk44= -----END CERTIFICATE-----Generated at Sun Jun 29 21:56:20 2025 by rpki-client