$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfd07d49-73e3-3b6f-9a31-26cc120c3e5b.roa File: bfd07d49-73e3-3b6f-9a31-26cc120c3e5b.roa (raw, json) Hash identifier: IrLdjqJntpVWHrYHUebRPNzpVWNF1qGzdEx7IZfwAMg= Subject key identifier: 7D:5F:65:47:02:98:D4:FB:09:D6:A0:F0:82:B4:56:38:2F:FB:F4:E7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A1EF486EA8D7012A46F0EA80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfd07d49-73e3-3b6f-9a31-26cc120c3e5b.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.26.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:48:6e:a8:d7:01:2a:46:f0:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=563c09a9-b7f4-435d-b703-9d2fdfc7c964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d1:60:26:61:28:4a:43:0a:c0:22:6c:c3:7b: 8d:88:f1:69:27:cc:9d:df:9d:0d:b9:5d:e4:4e:38: 02:76:ec:16:6d:86:9b:d6:17:a5:85:ed:ee:24:8d: 24:ec:72:ae:3e:8e:ff:a3:1a:e1:f7:5a:dc:9f:85: 1b:6d:c7:e9:88:ed:c1:4b:8b:6b:59:69:f5:2a:40: 96:fe:1e:28:2b:91:bb:c4:f7:99:6e:bd:4c:c4:7c: 8a:c0:20:e1:3d:4c:e5:72:11:ee:42:fb:28:48:7f: 7f:be:42:d8:d7:3d:92:d6:51:08:3c:cf:c8:80:1c: dc:ed:2b:24:dd:86:0a:e7:46:27:30:1d:67:19:ff: c6:0f:17:ec:1d:67:7d:6f:82:36:57:1a:0a:e3:8e: 8d:b1:30:4e:01:38:a8:72:fd:ce:ed:cd:cb:8d:14: a9:1a:66:8e:65:f3:46:cf:c5:e9:95:30:f4:35:1f: 01:44:6d:bc:67:85:99:51:53:73:0e:8c:15:4a:45: 11:38:aa:21:25:4d:87:e0:e1:ce:41:4e:e7:41:85: cd:4a:da:68:10:93:77:3e:32:da:ce:9c:03:e0:b8: 3a:8b:13:b7:18:47:2e:e4:5f:e3:24:61:86:4d:ee: 3e:e3:e4:3c:68:6a:cc:63:c5:2c:78:0d:ed:43:4b: ec:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:5F:65:47:02:98:D4:FB:09:D6:A0:F0:82:B4:56:38:2F:FB:F4:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfd07d49-73e3-3b6f-9a31-26cc120c3e5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.26.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:d4:45:a6:1f:bd:0d:7d:cd:b3:01:fe:a6:c0:6e:de:94:ce: bf:47:c0:b9:14:5c:70:9b:95:d2:45:b3:66:f0:d4:24:1d:7a: e3:6b:29:e6:30:b9:13:8c:fa:40:b3:24:61:a8:a0:c3:96:43: 63:a4:09:be:55:92:5f:76:72:2e:be:10:4f:e1:bf:75:52:7f: 7a:d9:96:45:e7:e6:8e:97:06:6f:f8:87:35:aa:0c:f3:bb:27: 95:c3:b5:9d:dd:cb:74:01:02:38:28:35:18:2a:e3:87:8e:bc: a2:35:45:73:dd:14:8e:a6:41:a4:b3:33:d6:11:5b:a3:25:0f: ec:58:73:f6:53:d6:d7:64:a7:4a:a5:6f:23:9d:ff:80:89:e0: b0:76:4a:46:ef:85:b4:f5:84:e2:3e:56:59:01:3f:47:71:0d: c9:b8:36:e8:07:cd:c6:e7:c3:af:a1:df:ba:67:79:d5:36:73: 8b:9e:f4:80:3d:7d:07:0e:08:30:30:4a:73:e4:76:c4:1f:70: 75:a2:9c:0f:41:37:26:12:02:98:14:77:94:9a:fc:24:03:e7: a3:d8:c1:3c:d3:f8:f5:5b:5a:ba:25:63:59:f9:fd:80:24:02: c9:d2:34:9b:90:10:10:5d:a4:26:28:e8:af:e7:78:5a:02:b5: b7:d2:3c:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh70huqNcBKkbw6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk NTYzYzA5YTktYjdmNC00MzVkLWI3MDMtOWQyZmRmYzdjOTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9FgJmEoSkMKwCJsw3uNiPFpJ8yd350NuV3k TjgCduwWbYab1helhe3uJI0k7HKuPo7/oxrh91rcn4UbbcfpiO3BS4trWWn1KkCW /h4oK5G7xPeZbr1MxHyKwCDhPUzlchHuQvsoSH9/vkLY1z2S1lEIPM/IgBzc7Ssk 3YYK50YnMB1nGf/GDxfsHWd9b4I2VxoK446NsTBOATiocv3O7c3LjRSpGmaOZfNG z8XplTD0NR8BRG28Z4WZUVNzDowVSkUROKohJU2H4OHOQU7nQYXNStpoEJN3PjLa zpwD4Lg6ixO3GEcu5F/jJGGGTe4+4+Q8aGrMY8UseA3tQ0vssQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1fZUcCmNT7Cdag8IK0Vjgv+/TnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmZkMDdkNDktNzNlMy0z YjZmLTlhMzEtMjZjYzEyMGMzZTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDURaYfvQ19zbMB/qbAbt6Uzr9HwLkUXHCbldJFs2bw1CQdeuNrKeYw uROM+kCzJGGooMOWQ2OkCb5Vkl92ci6+EE/hv3VSf3rZlkXn5o6XBm/4hzWqDPO7 J5XDtZ3dy3QBAjgoNRgq44eOvKI1RXPdFI6mQaSzM9YRW6MlD+xYc/ZT1tdkp0ql byOd/4CJ4LB2SkbvhbT1hOI+VlkBP0dxDcm4NugHzcbnw6+h37pnedU2c4ue9IA9 fQcOCDAwSnPkdsQfcHWinA9BNyYSApgUd5Sa/CQD56PYwTzT+PVbWrolY1n5/YAk AsnSNJuQEBBdpCYo6K/neFoCtbfSPKk= -----END CERTIFICATE-----Generated at Fri May 9 08:40:30 2025 by rpki-client