$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/547e20a5-4d99-3189-acf5-18c6432c4890.roa File: 547e20a5-4d99-3189-acf5-18c6432c4890.roa (raw, json) Hash identifier: KuuBXOwj2qnuDmJdbXE3ZLqonq3L2F/GOAtYsLGEQ90= Subject key identifier: B3:EA:A0:19:31:12:41:1D:3D:18:EE:65:F5:D5:2E:F5:D3:B9:9D:5F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA3217FC1E094E36839800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/547e20a5-4d99-3189-acf5-18c6432c4890.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 170.52.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:32:17:fc:1e:09:4e:36:83:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=ef5c298b-7f8e-4551-bcbb-f9798d76462a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:85:e1:0d:49:a2:33:ab:93:62:12:7e:7e:e9: 9a:dc:85:86:f1:a6:ed:71:a7:86:89:04:af:d6:d6: eb:ea:59:67:72:29:53:59:ba:c0:45:94:28:96:6e: b9:a0:87:d4:78:52:1a:98:f8:46:22:a3:f1:83:40: 10:71:75:6c:8d:91:c4:9d:a9:53:ba:de:0b:5d:18: 0d:74:64:20:31:4e:2f:2c:ac:57:99:c9:16:d4:5f: b9:23:00:25:b1:eb:bb:52:ca:40:13:20:d1:d1:ef: 6c:bf:a0:26:09:e7:b3:f3:d2:40:f2:8d:7b:b9:42: 5a:54:ac:01:0f:ce:2a:3d:1c:07:e4:5e:90:58:6b: 60:e8:76:75:19:b0:47:67:4f:6a:b0:6e:5d:50:3d: 95:bd:f5:44:f1:bf:f2:62:52:e2:76:81:b1:d4:93: 55:1e:cc:bd:2b:f0:f0:5a:5a:13:f3:dd:96:86:d1: 74:fd:c7:53:4e:1b:65:a5:23:9e:1b:cf:d3:a7:da: 59:5f:7b:2c:1d:f4:fe:38:85:39:b3:66:2e:b7:7d: f6:53:6a:2e:a7:28:99:91:a5:fe:9c:72:73:83:73: d7:12:2d:68:53:d1:52:ab:30:b1:77:60:5c:9d:3a: 15:18:04:2d:cc:90:5b:62:06:86:70:8f:89:1e:3a: 0f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:EA:A0:19:31:12:41:1D:3D:18:EE:65:F5:D5:2E:F5:D3:B9:9D:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/547e20a5-4d99-3189-acf5-18c6432c4890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 170.52.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:ca:dc:7d:26:2f:97:85:2c:a8:ff:eb:b8:c2:38:80:98:c5: 3e:18:eb:70:87:7b:74:cf:d2:4e:6f:46:f9:e7:5a:6e:c8:02: 9c:87:08:08:81:1b:8d:8b:f7:74:56:7b:b0:be:4c:56:15:a4: aa:60:24:81:9c:f7:3b:07:a9:90:19:5f:68:59:c3:21:66:38: a6:4b:a8:b7:58:c8:50:83:59:7d:06:68:2f:46:4d:08:3e:d7: f3:90:57:70:19:c7:b0:ad:10:7e:11:78:be:cb:5d:8e:42:f4: 7f:26:d4:6d:f3:55:95:17:93:65:a0:c2:47:d3:58:fa:c4:10: 27:5d:6f:e6:e5:36:3d:9a:d0:77:ed:52:81:ff:bb:81:b2:42: 12:c2:22:e0:ed:1b:14:43:11:a2:f6:94:ec:47:82:a7:4b:38: 97:1d:ee:01:1c:83:6c:e8:da:f5:48:54:14:e5:b0:d9:aa:c9: bb:d4:0c:9a:a0:5a:c5:2d:a9:d0:92:be:d7:0b:0c:50:ba:20: 98:74:26:d3:8e:bf:18:c5:3b:16:2d:75:45:12:17:d0:45:6e: 9d:21:c0:d0:1d:49:f1:fe:50:82:56:d2:90:15:48:8d:62:ce: c2:b1:b1:db:04:8f:ca:63:4d:64:71:40:a7:1a:b2:2c:af:b0: 00:23:d0:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkujIX/B4JTjaDmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZWY1YzI5OGItN2Y4ZS00NTUxLWJjYmItZjk3OThkNzY0NjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIXhDUmiM6uTYhJ+fuma3IWG8abtcaeGiQSv 1tbr6llncilTWbrARZQolm65oIfUeFIamPhGIqPxg0AQcXVsjZHEnalTut4LXRgN dGQgMU4vLKxXmckW1F+5IwAlseu7UspAEyDR0e9sv6AmCeez89JA8o17uUJaVKwB D84qPRwH5F6QWGtg6HZ1GbBHZ09qsG5dUD2VvfVE8b/yYlLidoGx1JNVHsy9K/Dw WloT892WhtF0/cdTThtlpSOeG8/Tp9pZX3ssHfT+OIU5s2Yut332U2oupyiZkaX+ nHJzg3PXEi1oU9FSqzCxd2BcnToVGAQtzJBbYgaGcI+JHjoPnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPqoBkxEkEdPRjuZfXVLvXTuZ1fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTQ3ZTIwYTUtNGQ5OS0z MTg5LWFjZjUtMThjNjQzMmM0ODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqjQKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7K3H0mL5eFLKj/67jCOICYxT4Y63CHe3TP0k5vRvnnWm7IApyHCAiB G42L93RWe7C+TFYVpKpgJIGc9zsHqZAZX2hZwyFmOKZLqLdYyFCDWX0GaC9GTQg+ 1/OQV3AZx7CtEH4ReL7LXY5C9H8m1G3zVZUXk2WgwkfTWPrEECddb+blNj2a0Hft UoH/u4GyQhLCIuDtGxRDEaL2lOxHgqdLOJcd7gEcg2zo2vVIVBTlsNmqybvUDJqg WsUtqdCSvtcLDFC6IJh0JtOOvxjFOxYtdUUSF9BFbp0hwNAdSfH+UIJW0pAVSI1i zsKxsdsEj8pjTWRxQKcasiyvsAAj0Ow= -----END CERTIFICATE-----Generated at Sun Jun 29 22:31:58 2025 by rpki-client