$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af609f70-5354-323b-9ace-22f38e8708a1.roa File: af609f70-5354-323b-9ace-22f38e8708a1.roa (raw, json) Hash identifier: Ves5BhZCj5zEl7AT0lcDFHf8NUKW4O45hrf6h4aYHFg= Subject key identifier: E5:DA:5E:9B:8E:E4:AF:8B:85:E9:0F:FC:88:23:42:04:35:2C:ED:EA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A8E9DAD8EDE8C3CF53CACBC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af609f70-5354-323b-9ace-22f38e8708a1.roa Signing time: Sun 27 Apr 2025 01:00:46 +0000 ROA not before: Sun 27 Apr 2025 01:00:46 +0000 ROA not after: Sat 26 Jul 2025 01:00:46 +0000 asID: 30036 IP address blocks: 173.27.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:da:d8:ed:e8:c3:cf:53:ca:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 27 01:00:46 2025 GMT Not After : Jul 26 01:00:46 2025 GMT Subject: CN=54976b2a-5c7a-4f2e-8347-8cf62aec9980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:11:4c:a7:d3:5c:f3:96:2d:4b:81:de:b4:d4: 56:ae:8a:4a:9e:e8:2e:40:29:b6:a4:d0:2a:65:9c: 7d:b6:35:03:fc:41:e6:8b:ec:66:1c:b9:58:23:16: 95:06:17:d2:de:cf:61:5e:73:37:35:68:ac:46:b8: 00:bc:09:1c:b4:93:9e:a8:5d:33:de:9d:3d:5a:53: a4:88:54:57:b3:fa:b3:ba:dc:0a:6c:7e:81:12:d1: e6:78:cb:ff:18:29:69:05:f0:6c:a6:2c:50:71:c1: af:fa:34:cb:a8:2b:73:d9:16:e0:71:39:b5:16:b1: 9c:3b:e3:88:fb:e9:40:4f:7d:98:1a:00:95:2b:60: 8f:db:17:cc:18:e0:23:45:9c:ab:e3:5b:e9:d6:19: f0:e7:9d:1e:25:55:50:6b:74:44:84:aa:56:94:f1: ae:a9:54:d4:ab:32:6f:e8:72:52:25:32:1b:19:32: 5b:92:01:a4:a4:b9:63:ca:4b:d9:2a:e1:02:dc:5f: 38:16:72:27:9f:42:23:cd:a5:c9:01:a2:8b:e1:e5: f9:b8:a3:90:ba:37:1d:95:63:f7:90:d1:86:d6:2b: c0:69:9c:70:6e:20:8b:6e:cd:28:65:95:7e:f4:12: dc:a2:7a:b3:37:e7:9b:fd:a6:2f:8e:b5:65:67:ec: 25:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DA:5E:9B:8E:E4:AF:8B:85:E9:0F:FC:88:23:42:04:35:2C:ED:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af609f70-5354-323b-9ace-22f38e8708a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:48:07:d9:d8:55:dd:ef:89:25:d4:6e:b7:ee:41:2a:d6:a2: 09:4d:d0:5b:60:3f:34:4d:70:90:41:fe:73:33:05:5b:34:d5: 09:ee:c8:27:8a:2e:cd:06:8f:14:1a:92:a2:ff:e9:41:46:59: 65:21:f7:b7:da:ae:6f:4d:7e:6f:49:9f:4b:10:2a:49:a4:5e: 3d:1d:43:58:66:61:3a:93:e9:ab:0c:b9:b5:55:a9:b3:40:5c: fc:3c:f2:5f:65:5e:35:a8:ef:42:74:c1:67:b4:5c:11:98:1a: 62:a9:42:78:2f:73:87:d5:be:35:78:7c:a6:46:74:5b:2d:f8: 29:44:f6:71:8e:ec:55:9b:bd:e3:62:1d:4f:e8:71:dd:66:ed: 0c:ab:d9:09:87:1e:67:7d:c5:db:6b:02:2a:d2:6c:79:1f:6f: 26:65:7e:69:83:c6:11:48:2f:94:06:aa:6e:67:c6:29:2c:9e: 7b:6a:1b:08:6b:62:1c:df:19:44:50:24:32:40:2e:83:8b:43: b3:6f:9c:4b:2e:6e:b5:aa:7f:10:52:1d:d3:00:02:67:14:0d: d1:74:98:5c:20:e7:fd:b7:35:b2:13:56:8d:03:17:2e:91:97: 5f:fb:fc:93:de:52:d9:2f:3d:0b:6a:97:87:b6:8c:40:25:b3: 50:9b:37:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmo6drY7ejDz1PKy8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk NTQ5NzZiMmEtNWM3YS00ZjJlLTgzNDctOGNmNjJhZWM5OTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhFMp9Nc85YtS4HetNRWropKnuguQCm2pNAq ZZx9tjUD/EHmi+xmHLlYIxaVBhfS3s9hXnM3NWisRrgAvAkctJOeqF0z3p09WlOk iFRXs/qzutwKbH6BEtHmeMv/GClpBfBspixQccGv+jTLqCtz2RbgcTm1FrGcO+OI ++lAT32YGgCVK2CP2xfMGOAjRZyr41vp1hnw550eJVVQa3REhKpWlPGuqVTUqzJv 6HJSJTIbGTJbkgGkpLljykvZKuEC3F84FnInn0IjzaXJAaKL4eX5uKOQujcdlWP3 kNGG1ivAaZxwbiCLbs0oZZV+9BLconqzN+eb/aYvjrVlZ+wlgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXaXpuO5K+LhekP/IgjQgQ1LO3qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWY2MDlmNzAtNTM1NC0z MjNiLTlhY2UtMjJmMzhlODcwOGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRtLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVIB9nYVd3viSXUbrfuQSrWoglN0FtgPzRNcJBB/nMzBVs01QnuyCeK Ls0GjxQakqL/6UFGWWUh97farm9Nfm9Jn0sQKkmkXj0dQ1hmYTqT6asMubVVqbNA XPw88l9lXjWo70J0wWe0XBGYGmKpQngvc4fVvjV4fKZGdFst+ClE9nGO7FWbveNi HU/ocd1m7Qyr2QmHHmd9xdtrAirSbHkfbyZlfmmDxhFIL5QGqm5nxiksnntqGwhr YhzfGURQJDJALoOLQ7NvnEsubrWqfxBSHdMAAmcUDdF0mFwg5/23NbITVo0DFy6R l1/7/JPeUtkvPQtql4e2jEAls1CbN3s= -----END CERTIFICATE-----Generated at Fri May 9 09:44:05 2025 by rpki-client