$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae284185-8331-36fb-ac10-4add73c3919c.roa File: ae284185-8331-36fb-ac10-4add73c3919c.roa (raw, json) Hash identifier: 1Ygido7E39kE7n8oE5uXnOYKz8BOA8OaYJdlR9CI0lE= Subject key identifier: 31:B4:73:00:F6:D9:9A:83:E6:5A:2F:72:D7:26:78:0C:0C:2B:32:0A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA3D67E5451891EFA01700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae284185-8331-36fb-ac10-4add73c3919c.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.26.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:3d:67:e5:45:18:91:ef:a0:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=535ea583-62e6-4220-93c6-f11f3538e102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4b:c4:68:d2:6a:21:14:ee:f8:f1:9c:5b:02: 9c:6f:89:a3:fc:4b:ff:90:d7:2e:c8:b5:05:c1:00: ad:e0:11:87:50:f0:0b:01:a1:72:4d:bb:18:03:dc: 15:37:73:36:a5:62:ab:8b:96:8f:13:a3:a3:f0:5c: fd:e3:1f:98:08:eb:67:09:f3:06:2a:c3:d6:9d:3a: 86:33:68:a9:5b:a5:2c:56:18:7f:8e:68:bd:10:94: d4:e4:85:ad:b8:0f:4a:7e:17:1e:e4:5a:a6:53:2c: 26:06:fc:c4:07:9b:97:bf:b3:2a:0d:a9:49:8a:c8: ef:85:9b:21:ed:64:b9:8d:37:04:fa:d5:f9:7b:eb: 3b:21:5e:ca:bc:77:c2:11:b0:49:57:4b:0e:71:a4: 53:12:89:5c:23:59:b8:2e:a5:8c:cf:dc:f7:0a:37: f7:92:07:92:e7:2d:90:62:aa:a8:e0:2d:9c:fe:b3: 21:9d:a1:c0:5f:e7:be:66:e4:2c:26:0b:3f:50:b8: b2:09:e0:10:3a:22:e3:44:05:6d:45:e0:d6:b5:61: d5:34:57:cf:02:8c:a9:51:85:33:30:d8:c8:8f:7e: df:68:ce:ae:0d:1e:b8:3f:91:a9:64:fd:a1:29:58: a6:79:7c:c9:9b:44:f7:30:79:98:2d:57:c2:e9:aa: 9d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B4:73:00:F6:D9:9A:83:E6:5A:2F:72:D7:26:78:0C:0C:2B:32:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae284185-8331-36fb-ac10-4add73c3919c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.26.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:d6:0d:a2:19:b3:d1:48:97:05:05:20:d4:8b:93:4d:1b:6b: 01:95:76:a2:71:fd:68:6b:51:52:00:e2:38:b4:44:93:d0:8b: 3d:d8:bd:74:ff:10:e4:29:49:67:de:7a:e5:93:76:09:ef:1c: 8f:25:36:18:cb:26:4d:5c:71:6b:40:b3:51:dc:ca:ba:2a:75: 98:4b:35:ed:a9:68:fd:76:4a:a1:45:d2:14:84:b6:23:e0:e8: 81:b0:90:c3:62:b2:d9:15:fe:75:4e:fa:60:36:4c:17:c0:8a: 47:37:c5:c6:c9:f9:79:54:6a:44:10:03:f1:fc:85:67:8c:5e: 0a:3e:f4:85:04:23:42:15:2a:86:6a:5b:73:2b:4f:ec:c1:ab: 92:0d:f7:57:4f:d0:41:1b:a2:ae:17:40:69:0d:36:6f:5e:26: 3b:f0:9d:b0:cd:cc:fd:00:61:0e:a9:2a:9f:03:c1:13:df:fc: 8b:21:8c:bc:c2:be:ed:d0:28:cd:f0:ae:b5:31:a7:52:45:7d: a9:05:40:f8:2d:56:fe:f8:7b:eb:e2:36:7a:84:31:17:34:0a: 86:5e:1b:df:48:c9:87:a5:9a:3f:19:93:39:1d:b6:9d:5c:75: f9:06:14:d2:8d:df:27:39:cd:ef:c9:00:1b:f4:0e:d8:76:a6: 90:b5:34:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuj1n5UUYke+gFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTM1ZWE1ODMtNjJlNi00MjIwLTkzYzYtZjExZjM1MzhlMTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0vEaNJqIRTu+PGcWwKcb4mj/Ev/kNcuyLUF wQCt4BGHUPALAaFyTbsYA9wVN3M2pWKri5aPE6Oj8Fz94x+YCOtnCfMGKsPWnTqG M2ipW6UsVhh/jmi9EJTU5IWtuA9Kfhce5FqmUywmBvzEB5uXv7MqDalJisjvhZsh 7WS5jTcE+tX5e+s7IV7KvHfCEbBJV0sOcaRTEolcI1m4LqWMz9z3Cjf3kgeS5y2Q Yqqo4C2c/rMhnaHAX+e+ZuQsJgs/ULiyCeAQOiLjRAVtReDWtWHVNFfPAoypUYUz MNjIj37faM6uDR64P5GpZP2hKVimeXzJm0T3MHmYLVfC6aqd9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDG0cwD22ZqD5lovctcmeAwMKzIKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWUyODQxODUtODMzMS0z NmZiLWFjMTAtNGFkZDczYzM5MTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRp8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzWDaIZs9FIlwUFINSLk00bawGVdqJx/WhrUVIA4ji0RJPQiz3YvXT/ EOQpSWfeeuWTdgnvHI8lNhjLJk1ccWtAs1HcyroqdZhLNe2paP12SqFF0hSEtiPg 6IGwkMNistkV/nVO+mA2TBfAikc3xcbJ+XlUakQQA/H8hWeMXgo+9IUEI0IVKoZq W3MrT+zBq5IN91dP0EEboq4XQGkNNm9eJjvwnbDNzP0AYQ6pKp8DwRPf/IshjLzC vu3QKM3wrrUxp1JFfakFQPgtVv74e+viNnqEMRc0CoZeG99IyYelmj8Zkzkdtp1c dfkGFNKN3yc5ze/JABv0Dth2ppC1NMk= -----END CERTIFICATE-----Generated at Fri May 9 08:34:40 2025 by rpki-client