$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dafac471-af6f-3a79-bde6-d8bb06803d84.roa File: dafac471-af6f-3a79-bde6-d8bb06803d84.roa (raw, json) Hash identifier: YKcZyMWE+wcjDsmuwjbKteiARNypW6Yf4J7OHphedvU= Subject key identifier: 53:66:D1:21:45:ED:B4:FE:73:F6:E1:4F:B8:F1:D8:BF:80:9F:2F:BE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584996C48A86A37A275749A85180 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dafac471-af6f-3a79-bde6-d8bb06803d84.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 30036 IP address blocks: 173.25.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:8a:86:a3:7a:27:57:49:a8:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=7a4abb9a-b9b3-4e03-be0e-1bb448e98236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:31:80:ca:31:68:dd:9a:41:08:bc:26:17:5c: 48:b3:03:dc:61:f6:95:ac:77:f9:7c:b1:7f:2e:13: 8d:77:85:89:4c:b1:9f:68:fb:6d:63:e0:6a:d9:cc: d8:f0:0e:2a:28:58:d5:0e:31:23:a9:7f:8d:99:40: 54:b2:7d:e0:ea:90:03:66:d2:be:91:a0:2b:fd:e2: 2d:8b:06:3c:bd:8c:72:ef:57:08:d1:13:97:e9:9a: f1:68:9e:b9:3b:28:9b:10:d7:6a:76:e4:b0:4f:4f: 58:c3:cc:1e:03:c1:53:ae:f6:11:5f:9a:30:4f:d7: 9b:a1:ba:8f:d3:bc:93:17:15:50:59:1e:76:e9:b6: d1:33:99:08:58:64:df:3c:d0:84:be:89:35:bc:fe: e3:b0:60:41:11:66:8a:fb:31:49:b5:f5:fe:2c:26: 30:56:6c:0d:a4:58:b0:97:a3:e3:a7:ce:d0:b0:cb: 1f:16:e7:cd:01:e4:a2:42:94:fc:36:bf:dd:00:b7: d8:d0:92:5f:4d:d9:47:31:41:66:02:a1:79:1c:43: f8:20:6a:79:bd:02:a8:da:96:9c:de:83:83:82:bf: b9:00:80:f4:00:9a:fe:98:33:a0:1d:5c:8b:16:ad: df:c7:3e:03:36:46:ea:1d:d3:ae:bb:c7:49:91:60: 43:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:66:D1:21:45:ED:B4:FE:73:F6:E1:4F:B8:F1:D8:BF:80:9F:2F:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dafac471-af6f-3a79-bde6-d8bb06803d84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:aa:69:fc:9a:f2:45:82:2a:28:b3:cd:f1:6f:ee:af:b7:7c: 2a:bf:5f:63:aa:96:3e:84:0b:35:45:8e:50:9e:f7:de:d5:d1: 94:7e:4b:b1:5f:03:df:fd:87:fb:8a:fb:b8:95:72:c5:e8:4a: 28:24:3b:0a:7b:1c:59:d2:bd:a1:a4:98:bc:bb:32:09:c3:2b: b6:ba:db:0b:42:25:e3:dd:a6:15:2b:f1:be:9f:df:10:e1:a3: dd:38:ad:bc:01:42:66:a7:a5:e4:84:57:aa:11:e9:96:56:52: 56:24:99:16:4c:bd:e5:11:06:d6:a8:b0:68:46:d1:f0:0e:09: a8:59:29:ad:df:89:74:52:f6:6e:45:62:74:b4:6c:fc:06:fe: c5:9b:14:98:03:d8:00:bf:45:62:ee:a6:44:e8:b9:be:8c:85: 30:19:9a:2d:5e:bd:16:2e:c7:3a:7f:a6:76:28:57:47:12:fe: c9:92:0b:5e:57:39:ba:40:82:5f:3f:e0:83:8d:6c:fa:02:4f: c9:1b:7b:02:d2:a6:1f:61:b1:7e:3f:2f:de:0f:82:98:16:3b: 6a:26:25:67:04:e7:92:01:98:9e:86:ff:b2:bb:1b:a8:46:08: 1d:29:95:63:68:9d:f0:d0:af:4a:bb:84:a6:7b:34:eb:c9:88: e4:7a:cb:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxIqGo3onV0moUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk N2E0YWJiOWEtYjliMy00ZTAzLWJlMGUtMWJiNDQ4ZTk4MjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzGAyjFo3ZpBCLwmF1xIswPcYfaVrHf5fLF/ LhONd4WJTLGfaPttY+Bq2czY8A4qKFjVDjEjqX+NmUBUsn3g6pADZtK+kaAr/eIt iwY8vYxy71cI0ROX6ZrxaJ65OyibENdqduSwT09Yw8weA8FTrvYRX5owT9ebobqP 07yTFxVQWR526bbRM5kIWGTfPNCEvok1vP7jsGBBEWaK+zFJtfX+LCYwVmwNpFiw l6Pjp87QsMsfFufNAeSiQpT8Nr/dALfY0JJfTdlHMUFmAqF5HEP4IGp5vQKo2pac 3oODgr+5AID0AJr+mDOgHVyLFq3fxz4DNkbqHdOuu8dJkWBDcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNm0SFF7bT+c/bhT7jx2L+Any++MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGFmYWM0NzEtYWY2Zi0z YTc5LWJkZTYtZDhiYjA2ODAzZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqqafya8kWCKiizzfFv7q+3fCq/X2Oqlj6ECzVFjlCe997V0ZR+S7Ff A9/9h/uK+7iVcsXoSigkOwp7HFnSvaGkmLy7MgnDK7a62wtCJePdphUr8b6f3xDh o904rbwBQmanpeSEV6oR6ZZWUlYkmRZMveURBtaosGhG0fAOCahZKa3fiXRS9m5F YnS0bPwG/sWbFJgD2AC/RWLupkToub6MhTAZmi1evRYuxzp/pnYoV0cS/smSC15X ObpAgl8/4IONbPoCT8kbewLSph9hsX4/L94PgpgWO2omJWcE55IBmJ6G/7K7G6hG CB0plWNonfDQr0q7hKZ7NOvJiOR6y78= -----END CERTIFICATE-----Generated at Fri May 9 19:23:28 2025 by rpki-client