$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dc497464-7bf2-3a4f-a62f-938ebc1eaad4.roa File: dc497464-7bf2-3a4f-a62f-938ebc1eaad4.roa (raw, json) Hash identifier: YljunVjcrsxPnUawZJf1P4HczLREzMF7KPkGJPATP18= Subject key identifier: B5:B1:2F:E4:1A:C8:FA:A8:8A:FE:20:73:E1:B8:6A:A3:30:FA:B0:5D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4B9FF48D357949A74155600 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dc497464-7bf2-3a4f-a62f-938ebc1eaad4.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.25.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:b9:ff:48:d3:57:94:9a:74:15:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=429c31a1-a6ad-4940-aa39-3b8eaf0ab37e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f0:e1:4f:dc:65:3e:da:68:b1:70:52:cc:3b: 98:e8:90:08:29:e8:44:12:e6:cd:23:23:5b:b9:68: d6:ab:a7:e1:5c:93:fc:77:ce:1e:99:1d:32:e9:d7: 60:e3:07:2d:f5:88:23:97:54:27:5a:81:76:ba:7d: 00:65:fa:61:81:6c:fc:c2:6f:8d:d9:05:19:bf:01: 29:5d:c9:aa:80:7a:43:01:61:3c:33:e7:5f:8c:e0: b8:ce:ea:22:1a:de:b4:32:5a:e7:6f:06:b8:9a:4d: ad:c4:c2:55:44:40:4d:2e:4a:17:17:e5:4b:a7:45: f3:52:88:8c:20:13:01:4b:b6:66:b9:71:ce:96:5c: 99:9c:04:25:c4:e3:a7:00:91:70:35:ab:1e:7d:c7: 9a:61:26:70:13:7d:7d:d2:a3:e6:de:75:b7:61:f3: 46:21:53:0c:eb:b6:d0:3c:2f:42:28:18:e2:65:cc: c8:38:50:e6:37:72:50:0c:da:9b:e2:b6:19:1c:44: 23:5d:39:54:0b:dd:3a:11:fb:a8:62:1b:06:88:5d: 3e:26:7e:0f:f2:f0:4d:b0:58:91:08:72:ea:32:b8: cc:6c:1b:f4:7e:1e:ec:b0:36:9f:cf:23:a5:6d:fb: 17:82:71:36:8f:86:94:ee:22:2a:4f:c9:aa:d3:a2: aa:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B1:2F:E4:1A:C8:FA:A8:8A:FE:20:73:E1:B8:6A:A3:30:FA:B0:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dc497464-7bf2-3a4f-a62f-938ebc1eaad4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:2b:4c:8f:bd:89:71:2b:fe:91:c7:0f:a8:37:de:6b:80:34: 91:14:8f:cf:f4:02:3b:f7:42:57:a1:ed:9a:af:b5:3f:0e:bd: 94:ba:06:f5:c7:f4:f2:9d:48:21:e3:54:e1:ea:f0:2a:33:97: 58:57:82:be:5b:20:3a:54:58:b8:48:75:c2:69:b9:83:f8:06: cd:16:b7:49:c7:59:6f:27:c2:34:65:4c:4d:ee:9c:b2:a3:74: 6e:c5:a2:f8:3b:73:07:79:61:e4:e2:a3:a2:a5:0d:8a:0b:15: 88:73:fa:1b:af:b7:82:25:2f:ae:ac:c5:eb:98:20:3a:68:13: 4c:ec:2d:86:e0:79:54:74:7e:4c:ac:ad:e6:14:e1:f7:76:fb: 03:82:c5:8a:be:95:59:df:6b:4b:53:ea:15:66:80:71:e6:94: f6:ce:b4:4f:76:63:60:ec:3e:72:bf:4f:fb:8d:d5:4f:07:cf: 94:2a:47:b5:66:12:c6:24:dd:1c:6b:f5:ba:ce:41:ba:47:90: 33:7b:0b:b6:49:d8:8f:2b:9c:32:65:d1:a9:3e:11:8f:2d:2a: e9:17:cf:cb:35:47:90:d9:2c:ab:86:92:04:15:f4:e4:c9:3a: f5:62:3c:62:8b:81:e3:f2:0a:2c:4a:23:b3:07:4b:9b:78:52: 10:5c:f7:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuf9I01eUmnQVVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NDI5YzMxYTEtYTZhZC00OTQwLWFhMzktM2I4ZWFmMGFiMzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/DhT9xlPtposXBSzDuY6JAIKehEEubNIyNb uWjWq6fhXJP8d84emR0y6ddg4wct9Ygjl1QnWoF2un0AZfphgWz8wm+N2QUZvwEp XcmqgHpDAWE8M+dfjOC4zuoiGt60Mlrnbwa4mk2txMJVREBNLkoXF+VLp0XzUoiM IBMBS7ZmuXHOllyZnAQlxOOnAJFwNasefceaYSZwE3190qPm3nW3YfNGIVMM67bQ PC9CKBjiZczIOFDmN3JQDNqb4rYZHEQjXTlUC906EfuoYhsGiF0+Jn4P8vBNsFiR CHLqMrjMbBv0fh7ssDafzyOlbfsXgnE2j4aU7iIqT8mq06KqtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWxL+QayPqoiv4gc+G4aqMw+rBdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGM0OTc0NjQtN2JmMi0z YTRmLWE2MmYtOTM4ZWJjMWVhYWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRnoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACErTI+9iXEr/pHHD6g33muANJEUj8/0Ajv3Qleh7ZqvtT8OvZS6BvXH 9PKdSCHjVOHq8Cozl1hXgr5bIDpUWLhIdcJpuYP4Bs0Wt0nHWW8nwjRlTE3unLKj dG7Fovg7cwd5YeTio6KlDYoLFYhz+huvt4IlL66sxeuYIDpoE0zsLYbgeVR0fkys reYU4fd2+wOCxYq+lVnfa0tT6hVmgHHmlPbOtE92Y2DsPnK/T/uN1U8Hz5QqR7Vm EsYk3Rxr9brOQbpHkDN7C7ZJ2I8rnDJl0ak+EY8tKukXz8s1R5DZLKuGkgQV9OTJ OvViPGKLgePyCixKI7MHS5t4UhBc95M= -----END CERTIFICATE-----Generated at Fri May 9 22:18:31 2025 by rpki-client