$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5da20c58-3d59-33f3-8812-1e182e18a388.roa File: 5da20c58-3d59-33f3-8812-1e182e18a388.roa (raw, json) Hash identifier: tK8tHUEvFmjRnUYwJRY+h76qJUI+lHH+HEK+pJ0NKIo= Subject key identifier: 9D:EB:1F:C8:B0:1B:89:4B:A5:0F:ED:A1:CA:E5:41:AD:80:7D:2B:98 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF5C049121385F85224900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5da20c58-3d59-33f3-8812-1e182e18a388.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.27.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:5c:04:91:21:38:5f:85:22:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=d3cbcfed-b9b4-4e15-9e65-0f7b1528c767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c5:42:75:30:87:0e:f7:be:ae:63:16:3b:e7: 51:09:b8:09:01:ec:26:4e:40:c1:7a:35:88:b1:be: d0:7c:3b:0e:0b:44:d8:c0:b1:4a:05:dd:58:39:c2: 42:b6:76:2a:0e:57:e0:0d:b8:08:f2:5c:0d:14:32: ab:44:60:02:fa:ca:fe:0e:b5:c5:8a:1a:8c:68:35: 8b:69:e2:3f:a4:37:ef:31:a8:e7:89:d5:ca:82:1e: b5:98:0a:98:bd:e7:6c:85:67:43:ff:84:bf:5b:31: a1:47:da:b1:09:15:03:b5:36:6d:0c:12:c7:a7:7e: f7:3c:5f:fe:ba:45:50:bc:0a:19:18:99:ec:4e:f4: 0b:00:1e:a6:aa:0e:9f:5f:d4:ca:8f:23:74:92:03: a9:89:4d:59:d0:fa:58:95:0f:aa:79:c6:82:ac:9e: 80:26:3e:f0:18:30:ec:16:fb:87:47:34:cf:ea:12: 9e:98:a4:2b:68:bc:57:30:72:5d:32:96:99:21:21: 5e:be:5d:93:ac:16:c1:58:74:9d:7f:b9:75:1c:a4: dc:11:4c:56:13:2d:55:33:e8:19:68:56:50:f4:d4: 2e:a0:24:8d:21:35:81:4e:19:c4:14:48:b9:85:ce: b1:f3:f0:63:62:1c:74:5d:4f:a0:fa:64:c6:31:40: 93:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:EB:1F:C8:B0:1B:89:4B:A5:0F:ED:A1:CA:E5:41:AD:80:7D:2B:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5da20c58-3d59-33f3-8812-1e182e18a388.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:e6:95:aa:8e:e2:7e:e0:af:e4:c4:14:d7:05:85:27:8c:38: 18:55:56:b5:e1:17:67:45:5a:9e:b3:5f:f0:a9:0e:2d:f8:36: 9a:fd:bc:72:6f:f9:c2:fc:2b:5e:ef:b8:a3:2a:95:c3:0b:cd: b4:ab:3a:1a:3b:d0:9a:73:9d:f7:cd:02:08:12:e9:8b:b1:c7: f7:5d:79:1c:b4:9a:27:16:f4:14:1c:bf:5d:f3:d5:24:87:20: 1c:bb:df:87:32:1b:b0:90:1b:8e:01:48:9f:b6:a6:60:2b:e7: bb:a2:5f:6d:c0:e9:92:ac:6d:86:ac:b5:1d:da:55:d2:9d:72: 09:b7:44:06:69:01:fc:9f:a0:f2:a1:ff:1e:7c:59:a6:37:bd: 44:63:c7:c5:28:84:c5:59:ac:d7:78:8c:cc:e4:f8:0b:e7:b9: 7c:c6:94:30:3b:7d:1f:45:2d:dd:0c:14:41:f7:8f:ce:38:9a: 14:5c:3a:f1:59:21:19:88:c4:91:3a:6d:c3:04:f7:dc:c6:30: 9e:c3:1d:e4:75:52:b1:3c:95:93:28:f0:12:b5:d9:1b:1d:e1: 7b:c8:85:5c:e8:c8:6e:cf:bc:a3:52:5f:a7:7a:df:d4:e4:46: d7:69:54:a0:64:46:a3:43:1e:8e:34:2d:45:69:12:38:e1:42: 12:d6:54:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh71wEkSE4X4UiSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk ZDNjYmNmZWQtYjliNC00ZTE1LTllNjUtMGY3YjE1MjhjNzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cVCdTCHDve+rmMWO+dRCbgJAewmTkDBejWI sb7QfDsOC0TYwLFKBd1YOcJCtnYqDlfgDbgI8lwNFDKrRGAC+sr+DrXFihqMaDWL aeI/pDfvMajnidXKgh61mAqYvedshWdD/4S/WzGhR9qxCRUDtTZtDBLHp373PF/+ ukVQvAoZGJnsTvQLAB6mqg6fX9TKjyN0kgOpiU1Z0PpYlQ+qecaCrJ6AJj7wGDDs FvuHRzTP6hKemKQraLxXMHJdMpaZISFevl2TrBbBWHSdf7l1HKTcEUxWEy1VM+gZ aFZQ9NQuoCSNITWBThnEFEi5hc6x8/BjYhx0XU+g+mTGMUCT1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3rH8iwG4lLpQ/tocrlQa2AfSuYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWRhMjBjNTgtM2Q1OS0z M2YzLTg4MTItMWUxODJlMThhMzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRvdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHmlaqO4n7gr+TEFNcFhSeMOBhVVrXhF2dFWp6zX/CpDi34Npr9vHJv +cL8K17vuKMqlcMLzbSrOho70JpznffNAggS6Yuxx/ddeRy0micW9BQcv13z1SSH IBy734cyG7CQG44BSJ+2pmAr57uiX23A6ZKsbYastR3aVdKdcgm3RAZpAfyfoPKh /x58WaY3vURjx8UohMVZrNd4jMzk+AvnuXzGlDA7fR9FLd0MFEH3j844mhRcOvFZ IRmIxJE6bcME99zGMJ7DHeR1UrE8lZMo8BK12Rsd4XvIhVzoyG7PvKNSX6d639Tk RtdpVKBkRqNDHo40LUVpEjjhQhLWVJw= -----END CERTIFICATE-----Generated at Fri May 9 08:51:01 2025 by rpki-client