$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c9be5478-2fb8-3cfa-9a61-b45d0a88bf1f.roa File: c9be5478-2fb8-3cfa-9a61-b45d0a88bf1f.roa (raw, json) Hash identifier: 8Dm9D1B2QNT6tkjIOo9Lm0YhLndQOU78vrWhtGueiq0= Subject key identifier: 27:37:57:1D:EB:86:BE:C9:C0:0C:30:37:98:03:FE:F2:94:DE:36:51 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A784AC6F928B624E27DAA740 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c9be5478-2fb8-3cfa-9a61-b45d0a88bf1f.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.16.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:ac:6f:92:8b:62:4e:27:da:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=c6c9f861-8158-41d4-bf14-c72c72652de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b9:9e:4a:e8:a1:47:c5:5e:71:a9:7c:b1:9a: 3d:0d:7a:75:21:3c:34:05:df:b0:e4:46:06:69:2d: 23:58:e8:09:02:8b:e6:54:95:41:1f:e6:e6:b5:b2: 68:6d:8a:0f:15:6f:d2:e7:89:ad:7e:01:71:51:ef: da:3e:04:66:b5:4c:a0:99:23:b2:4e:d3:e7:fa:33: 32:67:31:14:c0:7c:2c:3b:ee:b4:c8:93:33:4c:a4: 1e:4a:9e:c3:e9:d2:51:bd:ee:fe:f2:9b:34:62:63: dc:97:d2:c0:3a:7a:2c:ea:2c:60:9c:64:d5:bf:64: 35:7d:17:75:87:85:24:c4:ba:f0:c8:07:a7:2a:48: 19:aa:03:67:c2:22:a3:f1:7d:70:97:f2:a5:30:7e: 59:bb:12:2a:3e:3e:e7:09:b2:a9:ec:aa:d0:c9:5f: 1e:9a:22:a6:f9:b7:a0:c5:03:66:a6:60:b4:39:f4: 65:fd:ee:e0:49:13:f5:e7:99:fb:b8:7a:dc:cc:df: 6a:a1:8c:e6:9d:b4:96:66:4c:59:84:d6:d7:39:75: ee:07:e7:f6:35:ad:99:bd:ec:5f:b8:3d:3c:b1:1d: 77:06:83:df:dd:01:38:3a:c8:5e:ea:6f:98:f5:b1: 0f:9b:5c:98:72:26:82:28:e7:d5:e5:b2:25:d6:0f: 57:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:37:57:1D:EB:86:BE:C9:C0:0C:30:37:98:03:FE:F2:94:DE:36:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c9be5478-2fb8-3cfa-9a61-b45d0a88bf1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:18:ac:f3:02:b3:77:07:99:17:8a:de:17:d5:52:83:c0:d3: c8:7e:4b:7d:71:79:07:82:7b:c3:c6:0a:4c:da:1e:3c:5a:95: 9c:3a:c1:c0:4d:53:af:3b:e1:65:1d:6a:c7:ab:93:f6:cd:c5: 6e:92:3b:6e:c5:ad:05:e4:dc:b0:2b:f7:23:87:67:a0:95:e0: 7c:c6:91:3d:c3:e5:9b:fe:71:39:40:e6:49:e3:60:3f:6f:42: 5d:96:77:6d:4c:c8:0f:0d:aa:00:05:2a:24:85:54:0f:65:f4: 97:e4:f3:91:d5:c3:e7:1f:ec:4d:90:62:3c:0b:84:2f:3d:97: e8:77:66:cb:22:d5:4f:ff:82:d0:b1:3a:07:c1:53:a8:1f:88: 55:70:c7:5c:50:dc:63:2f:f4:06:56:0d:4c:4e:69:34:a9:87: 8f:11:97:7e:ba:ae:c8:ab:52:ef:53:8b:9b:54:ff:2c:b0:3d: 04:a0:f9:3f:d7:1b:6b:ab:54:f8:fb:9a:6e:dd:f1:55:83:d2: 09:78:a7:36:62:3a:20:26:f8:a9:4c:fe:a6:9a:63:83:7c:04: c5:58:79:46:28:61:62:e5:c6:f6:94:a2:21:5a:dd:34:dd:2a: da:dd:48:93:da:1e:b5:f2:a0:af:f9:04:f9:05:da:bf:2c:6a: fd:66:7b:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhKxvkotiTifap0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YzZjOWY4NjEtODE1OC00MWQ0LWJmMTQtYzcyYzcyNjUyZGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLmeSuihR8Vecal8sZo9DXp1ITw0Bd+w5EYG aS0jWOgJAovmVJVBH+bmtbJobYoPFW/S54mtfgFxUe/aPgRmtUygmSOyTtPn+jMy ZzEUwHwsO+60yJMzTKQeSp7D6dJRve7+8ps0YmPcl9LAOnos6ixgnGTVv2Q1fRd1 h4UkxLrwyAenKkgZqgNnwiKj8X1wl/KlMH5ZuxIqPj7nCbKp7KrQyV8emiKm+beg xQNmpmC0OfRl/e7gSRP155n7uHrczN9qoYzmnbSWZkxZhNbXOXXuB+f2Na2Zvexf uD08sR13BoPf3QE4Oshe6m+Y9bEPm1yYciaCKOfV5bIl1g9XSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCc3Vx3rhr7JwAwwN5gD/vKU3jZRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzliZTU0NzgtMmZiOC0z Y2ZhLTlhNjEtYjQ1ZDBhODhiZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRD7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkYrPMCs3cHmReK3hfVUoPA08h+S31xeQeCe8PGCkzaHjxalZw6wcBN U6874WUdaserk/bNxW6SO27FrQXk3LAr9yOHZ6CV4HzGkT3D5Zv+cTlA5knjYD9v Ql2Wd21MyA8NqgAFKiSFVA9l9Jfk85HVw+cf7E2QYjwLhC89l+h3Zssi1U//gtCx OgfBU6gfiFVwx1xQ3GMv9AZWDUxOaTSph48Rl366rsirUu9Ti5tU/yywPQSg+T/X G2urVPj7mm7d8VWD0gl4pzZiOiAm+KlM/qaaY4N8BMVYeUYoYWLlxvaUoiFa3TTd KtrdSJPaHrXyoK/5BPkF2r8sav1me/Q= -----END CERTIFICATE-----Generated at Fri May 9 08:24:13 2025 by rpki-client