$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/829a3c9f-0cbf-3b0f-a060-6f409f563e15.roa File: 829a3c9f-0cbf-3b0f-a060-6f409f563e15.roa (raw, json) Hash identifier: 8z/MuKTiY8ImYyPcwDCCuxNdwwkUO+L3fuJqUajbK4U= Subject key identifier: 22:0D:BF:BA:32:85:14:AB:0D:26:B2:CA:B0:DE:6E:65:E4:78:58:95 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF5BA1E523A16CCBF9C080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/829a3c9f-0cbf-3b0f-a060-6f409f563e15.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.27.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:5b:a1:e5:23:a1:6c:cb:f9:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=86c78c4b-d4bc-4651-b3c6-d14b796d1521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7b:63:0f:15:06:34:2e:db:37:a3:d3:c5:2a: a3:0a:6c:dc:10:0c:e3:b1:86:74:60:a0:6d:e9:82: 86:fd:ff:42:aa:53:3b:2b:a7:b1:a8:95:77:e8:de: b6:da:85:05:47:16:9c:83:06:46:a3:b1:8f:36:53: 0e:1f:c2:f0:f0:c7:a7:8a:e3:5b:37:0d:89:27:5f: 1b:ec:dc:03:29:42:c5:42:b3:d4:58:45:97:cb:d2: 1c:ea:25:e8:cd:db:f4:fc:6e:b0:4c:2c:81:e8:33: 95:50:4c:77:59:da:75:91:58:91:7c:f9:c9:87:f0: 5f:7d:ce:f6:c8:ae:74:3e:f4:63:60:b8:5e:90:79: 0e:d9:81:11:46:10:bf:e7:84:13:ef:c1:54:50:53: 31:af:b2:c4:b5:57:4d:6c:db:16:0d:18:b6:96:c7: ce:96:f9:58:31:34:98:1c:b2:e2:12:11:34:33:8b: 38:72:b8:8b:7c:9d:b3:6d:e4:0e:ba:4f:c9:9e:f6: ce:d4:c6:3f:20:d9:7b:ce:c9:8a:ed:44:3f:1f:ba: 83:6a:ba:c6:8b:90:80:cd:fc:8a:e1:b8:37:44:a5: 5a:02:65:e5:8d:13:4d:19:6c:5f:2c:00:3e:b7:ad: a0:13:3f:c7:41:ab:0f:d4:18:b9:40:26:20:96:86: fa:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0D:BF:BA:32:85:14:AB:0D:26:B2:CA:B0:DE:6E:65:E4:78:58:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/829a3c9f-0cbf-3b0f-a060-6f409f563e15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:0e:98:43:6d:72:25:ce:37:06:19:bf:d9:2a:f0:65:f1:cd: a6:37:eb:5e:87:07:1d:db:0e:ab:47:55:d6:e0:82:a7:44:4f: c2:6c:33:95:05:dc:b9:f2:d1:a8:5a:83:ea:79:14:e2:d4:df: 31:86:98:e5:e4:0b:18:0c:73:7c:1f:13:e5:2b:dd:93:99:df: 07:a6:0e:02:06:28:45:8a:d0:7d:78:51:9c:45:52:f2:0c:a9: ae:74:d2:4e:66:4f:ca:f7:c4:32:3e:79:2b:cf:d3:f2:1d:04: 79:9d:5e:40:97:45:96:aa:43:98:82:82:f9:35:58:4b:12:54: b8:3f:60:2b:9c:d5:5a:62:d7:ce:a4:d6:af:fe:9e:b7:9d:6d: 89:1f:7f:5d:04:1b:c7:c2:0a:d5:ad:f8:04:c0:4f:78:1b:f5: 95:18:1a:ae:3c:2d:97:6e:a6:46:c7:db:7d:13:1c:d3:16:bb: 34:f1:95:a2:27:ca:4b:73:03:9a:37:8f:b1:4b:ff:52:b7:93: d9:5e:b0:38:1d:4b:60:b6:ab:4e:31:9c:1c:fe:76:b7:ba:f8: 2d:6a:ba:24:fe:c3:bd:08:ce:3d:53:02:04:6d:ab:00:3c:94: ea:9d:49:17:36:78:42:30:2e:5e:28:64:2c:c9:db:10:d9:b3: 33:ad:f5:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh71uh5SOhbMv5wIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk ODZjNzhjNGItZDRiYy00NjUxLWIzYzYtZDE0Yjc5NmQxNTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3tjDxUGNC7bN6PTxSqjCmzcEAzjsYZ0YKBt 6YKG/f9CqlM7K6exqJV36N622oUFRxacgwZGo7GPNlMOH8Lw8MeniuNbNw2JJ18b 7NwDKULFQrPUWEWXy9Ic6iXozdv0/G6wTCyB6DOVUEx3Wdp1kViRfPnJh/Bffc72 yK50PvRjYLhekHkO2YERRhC/54QT78FUUFMxr7LEtVdNbNsWDRi2lsfOlvlYMTSY HLLiEhE0M4s4criLfJ2zbeQOuk/JnvbO1MY/INl7zsmK7UQ/H7qDarrGi5CAzfyK 4bg3RKVaAmXljRNNGWxfLAA+t62gEz/HQasP1Bi5QCYglob60QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCINv7oyhRSrDSayyrDebmXkeFiVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODI5YTNjOWYtMGNiZi0z YjBmLWEwNjAtNmY0MDlmNTYzZTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRsVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYOmENtciXONwYZv9kq8GXxzaY3616HBx3bDqtHVdbggqdET8JsM5UF 3Lny0ahag+p5FOLU3zGGmOXkCxgMc3wfE+Ur3ZOZ3wemDgIGKEWK0H14UZxFUvIM qa500k5mT8r3xDI+eSvP0/IdBHmdXkCXRZaqQ5iCgvk1WEsSVLg/YCuc1Vpi186k 1q/+nredbYkff10EG8fCCtWt+ATAT3gb9ZUYGq48LZdupkbH230THNMWuzTxlaIn yktzA5o3j7FL/1K3k9lesDgdS2C2q04xnBz+dre6+C1quiT+w70Izj1TAgRtqwA8 lOqdSRc2eEIwLl4oZCzJ2xDZszOt9Xo= -----END CERTIFICATE-----Generated at Thu May 8 22:59:26 2025 by rpki-client