$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/588fdbfa-ce75-35cd-9aca-bc3dace564ca.roa File: 588fdbfa-ce75-35cd-9aca-bc3dace564ca.roa (raw, json) Hash identifier: lAtiy3pQzeMX16pXksiqHGDL0Pv4P/QYSW5q0Q2w8pM= Subject key identifier: DE:47:E9:1C:F7:AE:FB:46:97:86:FB:8C:87:52:FC:D2:67:18:C5:83 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF4895B21EC2391BC0A100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/588fdbfa-ce75-35cd-9aca-bc3dace564ca.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.27.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:48:95:b2:1e:c2:39:1b:c0:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=1eb0cf24-c580-4de0-829c-c339f0cdc4cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f2:d5:49:08:bf:8a:ca:15:50:8a:70:c0:6d: 4e:63:96:4f:cb:b1:d6:8c:da:79:7f:72:29:64:d6: 1e:c5:4a:7e:73:6d:40:33:08:67:2e:e5:34:9a:7e: 77:8f:d3:cd:cf:c8:0e:fe:5d:55:d9:92:f8:e8:38: 59:28:b2:37:b3:f7:a1:aa:46:14:bf:61:ba:ef:96: 58:7b:9d:d0:a6:7f:cd:07:42:20:4f:85:00:42:3f: 6c:d9:38:dc:4b:a3:2d:f3:22:96:4d:37:a8:7c:42: 27:a0:f3:6d:f0:ef:e0:eb:99:87:be:3e:fe:db:eb: a7:27:99:13:e1:36:9c:b6:d7:8a:06:bb:88:04:bf: 8a:ec:a0:df:67:6b:9c:97:c7:e3:d9:c1:4d:ec:9a: a1:6c:8c:18:7f:56:85:dd:bc:9d:d9:a5:17:f1:dd: 30:51:01:3e:eb:32:54:d8:4e:b4:8d:ad:77:14:18: 64:4c:11:40:30:6c:f6:34:c5:1b:0a:5a:a8:b0:fc: a3:5d:94:ec:8d:12:f8:19:bf:c2:93:8a:68:eb:fa: d2:78:8b:d1:c4:88:3a:9b:19:fd:49:39:7a:12:97: 77:b9:ee:20:4e:e8:29:54:ec:a9:25:b9:88:eb:f9: e4:d9:fd:6f:9a:82:ab:38:c6:c8:af:31:27:dc:7b: 7b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:47:E9:1C:F7:AE:FB:46:97:86:FB:8C:87:52:FC:D2:67:18:C5:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/588fdbfa-ce75-35cd-9aca-bc3dace564ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:b5:7c:6f:7c:b3:99:63:a7:a4:de:b3:7f:e9:25:82:43:4b: 07:40:2c:8c:a5:3a:d9:d1:a1:8e:81:7d:b1:30:b5:4c:dd:da: 49:d5:23:25:ce:25:e0:b8:aa:81:04:0f:f6:78:45:9a:3a:5b: da:1b:02:2c:2e:2c:25:a1:3c:64:9d:6d:10:7b:30:27:b7:9c: 0c:8b:e0:22:3d:63:4c:be:52:6a:3e:4f:90:e7:97:13:c6:b9: 05:62:7b:d0:2e:d1:24:d9:76:23:bf:c4:cc:a6:d5:ad:f8:f8: 67:bc:a2:2c:f9:61:6e:b9:c7:0a:26:71:fc:da:92:52:4c:1d: 5c:e3:70:38:91:d9:b3:61:23:64:bf:0c:78:cb:a7:32:2c:f7: 1b:e9:62:cb:63:81:5e:fd:37:a8:ab:86:39:d0:9d:a4:a9:4d: 95:31:5f:b4:64:aa:6e:0e:40:28:02:c4:3b:56:84:0c:7e:bf: 6d:56:71:25:37:f0:21:ca:6d:2a:3f:ec:a9:25:3a:1c:eb:ac: c9:f3:d0:01:52:85:23:41:2f:05:2c:f8:33:c9:31:28:5d:21: 21:c7:46:8d:6f:98:7c:61:df:36:e3:54:4e:14:95:a9:bb:b8: c8:1d:4b:a4:55:aa:1d:6d:76:2d:f0:e6:0e:31:59:6a:e3:ed: 6f:2d:34:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh70iVsh7CORvAoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk MWViMGNmMjQtYzU4MC00ZGUwLTgyOWMtYzMzOWYwY2RjNGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/LVSQi/isoVUIpwwG1OY5ZPy7HWjNp5f3Ip ZNYexUp+c21AMwhnLuU0mn53j9PNz8gO/l1V2ZL46DhZKLI3s/ehqkYUv2G675ZY e53Qpn/NB0IgT4UAQj9s2TjcS6Mt8yKWTTeofEInoPNt8O/g65mHvj7+2+unJ5kT 4TactteKBruIBL+K7KDfZ2ucl8fj2cFN7JqhbIwYf1aF3byd2aUX8d0wUQE+6zJU 2E60ja13FBhkTBFAMGz2NMUbClqosPyjXZTsjRL4Gb/Ck4po6/rSeIvRxIg6mxn9 STl6Epd3ue4gTugpVOypJbmI6/nk2f1vmoKrOMbIrzEn3Ht7xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5H6Rz3rvtGl4b7jIdS/NJnGMWDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTg4ZmRiZmEtY2U3NS0z NWNkLTlhY2EtYmMzZGFjZTU2NGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRtYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAO1fG98s5ljp6Tes3/pJYJDSwdALIylOtnRoY6BfbEwtUzd2knVIyXO JeC4qoEED/Z4RZo6W9obAiwuLCWhPGSdbRB7MCe3nAyL4CI9Y0y+Umo+T5DnlxPG uQVie9Au0STZdiO/xMym1a34+Ge8oiz5YW65xwomcfzaklJMHVzjcDiR2bNhI2S/ DHjLpzIs9xvpYstjgV79N6irhjnQnaSpTZUxX7Rkqm4OQCgCxDtWhAx+v21WcSU3 8CHKbSo/7KklOhzrrMnz0AFShSNBLwUs+DPJMShdISHHRo1vmHxh3zbjVE4Ulam7 uMgdS6RVqh1tdi3w5g4xWWrj7W8tNOc= -----END CERTIFICATE-----Generated at Sat May 10 13:14:44 2025 by rpki-client