$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ee96f213-6be9-3e81-8b57-5fdadbf28a05.roa File: ee96f213-6be9-3e81-8b57-5fdadbf28a05.roa (raw, json) Hash identifier: sWTSlZw5uyKY2UfXFgUITgz0KzDOR9W0Fg+PNic3nw4= Subject key identifier: 99:D7:A1:A5:AD:03:17:6F:98:88:55:57:5B:B0:E9:25:66:5E:BB:B0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA434125E6759F9266B480 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ee96f213-6be9-3e81-8b57-5fdadbf28a05.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.20.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:43:41:25:e6:75:9f:92:66:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=9479576e-500e-4935-94ac-e8299a8fe901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:88:b1:c5:9a:b0:51:b0:b8:e8:69:cf:4b:7b: ec:34:19:a6:18:61:3a:df:d5:fc:9e:be:d5:f6:cb: a5:f6:c9:4d:0e:38:c6:22:c0:48:80:0d:1f:cb:24: 85:d1:03:b7:44:6d:0d:db:01:2f:67:7f:ce:97:09: 1c:c8:27:a7:b8:81:02:5e:98:24:cf:58:34:a2:af: 56:d0:27:82:de:3b:8e:66:95:cf:24:c2:1e:b5:42: e8:a4:e8:91:1e:70:7c:5d:f0:c0:8b:5e:73:c8:fa: 3a:da:89:90:ae:69:3a:2d:60:a0:f4:26:84:ed:6b: 7f:04:29:e8:e6:95:9f:8e:28:62:3e:6f:a8:16:17: 28:a4:c6:ac:0c:46:b8:2a:d7:2d:19:81:46:d7:21: 4c:0b:3e:42:de:c4:4f:7d:02:a6:de:cb:e0:7a:ad: 62:d9:6f:a9:38:60:a5:25:bc:9a:05:c0:e3:52:a1: ed:f2:87:ae:10:dc:ee:0d:17:c9:92:79:fd:de:bf: 97:b4:d6:31:35:29:59:09:ca:a4:53:2f:ad:22:6d: f5:4c:02:6a:91:78:d5:f2:40:85:40:bf:ef:58:1a: 07:09:80:e1:b7:71:5d:13:f4:66:46:56:f8:d0:6f: 52:c8:ed:0c:b5:a8:1f:dd:f3:2c:43:d8:b3:1e:db: 7e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D7:A1:A5:AD:03:17:6F:98:88:55:57:5B:B0:E9:25:66:5E:BB:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ee96f213-6be9-3e81-8b57-5fdadbf28a05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:94:47:36:52:ea:74:b2:7c:ad:aa:75:2f:e8:ec:16:a5:9c: 94:40:a7:b9:ef:d0:6f:ff:ac:de:6a:97:28:01:70:6d:9c:a8: 6a:08:42:95:75:7d:c3:b1:45:ad:ff:fd:20:b2:44:b9:38:09: 2e:04:fc:69:1f:d8:c3:c7:bd:4c:3b:26:ca:e6:f5:1f:7f:ab: 8e:d4:70:f6:b1:5e:2f:f0:5b:95:c1:bd:80:b3:0b:91:4f:71: 67:01:59:9f:0e:e9:e4:55:ae:6a:71:55:23:b5:48:2a:f0:3c: 93:3d:7d:33:f2:32:11:8b:ea:ec:03:c9:a9:5a:66:aa:ae:a3: 9e:30:a0:86:83:55:b9:1d:1b:cc:c4:1e:36:4e:49:eb:b4:69: 0c:a3:9d:64:1b:fd:9c:34:9c:a1:95:8b:23:bd:f2:3c:dd:c2: b9:59:e0:aa:d6:72:7d:4b:82:76:dd:c6:1c:7b:69:33:93:5a: 3f:0e:5e:7c:f2:46:e9:47:8d:a2:6e:d1:2c:e5:74:7b:5e:d9: 07:ad:e0:0a:52:61:ec:a6:b7:1f:9b:4b:b7:b7:f8:cb:5b:12: f5:22:95:d0:db:48:10:63:85:2f:eb:57:83:de:7f:f1:c4:58: a2:9f:cf:97:56:68:3f:42:83:52:99:71:97:d6:c1:8b:38:16: 37:5a:e4:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkukNBJeZ1n5JmtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OTQ3OTU3NmUtNTAwZS00OTM1LTk0YWMtZTgyOTlhOGZlOTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4ixxZqwUbC46GnPS3vsNBmmGGE639X8nr7V 9sul9slNDjjGIsBIgA0fyySF0QO3RG0N2wEvZ3/OlwkcyCenuIECXpgkz1g0oq9W 0CeC3juOZpXPJMIetULopOiRHnB8XfDAi15zyPo62omQrmk6LWCg9CaE7Wt/BCno 5pWfjihiPm+oFhcopMasDEa4KtctGYFG1yFMCz5C3sRPfQKm3svgeq1i2W+pOGCl JbyaBcDjUqHt8oeuENzuDRfJknn93r+XtNYxNSlZCcqkUy+tIm31TAJqkXjV8kCF QL/vWBoHCYDht3FdE/RmRlb40G9SyO0Mtagf3fMsQ9izHtt+GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnXoaWtAxdvmIhVV1uw6SVmXruwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWU5NmYyMTMtNmJlOS0z ZTgxLThiNTctNWZkYWRiZjI4YTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOURzZS6nSyfK2qdS/o7BalnJRAp7nv0G//rN5qlygBcG2cqGoIQpV1 fcOxRa3//SCyRLk4CS4E/Gkf2MPHvUw7Jsrm9R9/q47UcPaxXi/wW5XBvYCzC5FP cWcBWZ8O6eRVrmpxVSO1SCrwPJM9fTPyMhGL6uwDyalaZqquo54woIaDVbkdG8zE HjZOSeu0aQyjnWQb/Zw0nKGViyO98jzdwrlZ4KrWcn1Lgnbdxhx7aTOTWj8OXnzy RulHjaJu0SzldHte2Qet4ApSYeymtx+bS7e3+MtbEvUildDbSBBjhS/rV4Pef/HE WKKfz5dWaD9Cg1KZcZfWwYs4Fjda5L8= -----END CERTIFICATE-----Generated at Sun Jun 29 21:57:57 2025 by rpki-client